last executing test programs: 5.201614237s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000001180)={0x0, 0x0, 0x1, '3'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.172846742s ago: executing program 2 (id=9): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff41) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0135014010ff"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 4.09851604s ago: executing program 3 (id=4): socket(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="7b677470002c00028008", @ANYRES32=r0], 0x60}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xfd, 0x1ff}, {0x0, 0x0, 0x81}], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.907782761s ago: executing program 2 (id=10): mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000700)=&(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/133, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000740)=""/82}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) syz_clone3(&(0x7f00000004c0)={0x0, &(0x7f0000000280), 0x0, 0x0, {0x32}, &(0x7f0000002400)=""/4096, 0x1000, &(0x7f00000003c0), 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000b80)="$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") 3.772070445s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000040)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/address_bits', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) 3.630870274s ago: executing program 3 (id=11): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000001c0)=ANY=[], 0x12, 0x9ef, &(0x7f0000000e40)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x100, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "19d740"}, {0x5, 0x24, 0x0, 0x31}, {0xd, 0x24, 0xf, 0x1, 0x78e6, 0x0, 0x3, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0xd}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xaa}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x80, 0x3}}}}}]}}]}}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x200000001494) fcntl$setstatus(r0, 0x4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x0, "8daf"}, @global=@item_012={0x1, 0x1, 0x0, ','}]}}, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 3.532963705s ago: executing program 4 (id=12): openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000480)=[@request_death], 0x0, 0x0, 0x0}) 3.500374302s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) dup3(r4, r3, 0x0) 2.782554532s ago: executing program 4 (id=14): epoll_create(0x880) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2.462302621s ago: executing program 0 (id=15): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.271919918s ago: executing program 4 (id=16): r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xfff, 0x7, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000490, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff800}) 2.249574017s ago: executing program 0 (id=17): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fanotify_init(0x200, 0x0) r4 = dup(r1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="e7", 0x1}], 0x1, 0x0) fanotify_mark(r3, 0x1, 0x40001059, r4, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 2.033530776s ago: executing program 2 (id=18): creat(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000240)={0x0, 0x0}, 0x0) splice(r4, 0x0, r5, 0x0, 0x808, 0x0) 1.91945635s ago: executing program 4 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.87689116s ago: executing program 2 (id=20): unshare(0x6a040000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 1.728881915s ago: executing program 3 (id=21): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@nobh}, {@abort}, {@norecovery}, {@nojournal_checksum}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x6, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/154, 0x9a) 813.26486ms ago: executing program 4 (id=22): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) mkdir(&(0x7f0000001200)='./control\x00', 0x0) open(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100), 0x7, 0x773, &(0x7f0000000940)="$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") 736.291042ms ago: executing program 0 (id=23): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r3 = dup(r2) write$binfmt_script(r2, &(0x7f0000000280), 0xc7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800107b, r3, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 562.882668ms ago: executing program 1 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x34, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe78) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 506.533024ms ago: executing program 2 (id=25): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xe002a0ffffffff, 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000080)=0x2, 0x3, 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)=0x2, 0x2) 440.540337ms ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 240.382344ms ago: executing program 4 (id=27): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) fstat(r4, &(0x7f0000005940)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter, 0x48) write$P9_RVERSION(r1, 0x0, 0x15) fcntl$setpipe(r0, 0x407, 0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa95, &(0x7f0000000600), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@noadinicb}, {@session={'session', 0x3d, 0x4}}, {@uid_forget}, {@gid}, {@shortad}, {@undelete}, {@unhide}, {@gid}]}, 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") 230.59259ms ago: executing program 0 (id=28): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0xe, 0x4, 0x14a8, 0xffffffff, 0x0, 0x258, 0x188, 0xffffffff, 0xffffffff, 0x13d8, 0x13d8, 0x13d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xff, 0xff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 'ip6gre0\x00', 'veth1_macvtap\x00', {}, {}, 0x87, 0x6, 0x5, 0x2}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0xff, 0x1, 0xb7, 0x6, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff00007f, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff], 0x3010, 0x24d0}}, @common=@ipv6header={{0x28}, {0x50, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @local, [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xff, 0xff], 'dvmrp0\x00', 'netpci0\x00', {0xff}, {}, 0x18, 0x9, 0x6, 0x40}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x1140, 0x1180, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x1, './cgroup.net/syz1\x00', 0x8abc, {0xb}}}, @common=@unspec=@rateest={{0x68}, {'veth0_to_bridge\x00', 'pim6reg0\x00', 0x3e, 0x0, 0x6, 0xbdd, 0x7, 0x101, {0x8}, {0x1000}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fff, 0x9, 0x6bb446c2, 0x8001, 0x2233, 0x5, 0xca0, 0x6d5b]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1508) 149.463616ms ago: executing program 2 (id=29): socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsa(0x0, 0x9, 0x10c00) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0xa, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) 0s ago: executing program 3 (id=30): syz_mount_image$hfs(&(0x7f000001fa80), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000c0, &(0x7f00000004c0)=ANY=[@ANYBLOB="71756965742c63726561746f723dd4675f162c696f636861727365743d69736f383835392d322c71756965742c636f6465706167653d63703933362c00b24530a1a1e51b95228246cc65c972358b611490e09004a315011a4fe58392211f22a42390912061adb25c406e20585d9fa4109c4a2b201f39c5e48b745085abecadfbfbbcd03215c2cdd68151829c12d7be50cdd55aa9e506d9e28ad8ce2951dd1f560961e92e8d198954d737b45262a26cc3bb46b70e1ad909d3b0c2d7fb8053f47884a9cc46a9d32ce04b2d00544c47d94d5a91538c024918965b"], 0x11, 0x2b6, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./file0\x00') chdir(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 64.958903][ T5215] cgroup: Unknown subsys name 'net' [ 65.065072][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.681942][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.983941][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.995814][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.006609][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.014554][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.023271][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.031801][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.040283][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.049114][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.058016][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.066554][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.074363][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.078341][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.082690][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.097353][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.102491][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.108529][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.113316][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.120675][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.125483][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.140426][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.148536][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.175617][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.184070][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.191924][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.201586][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.213698][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.216475][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.232118][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.245122][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.252801][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.645267][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 69.728619][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 69.759154][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 69.826360][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.835718][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.843433][ T5226] bridge_slave_0: entered allmulticast mode [ 69.850926][ T5226] bridge_slave_0: entered promiscuous mode [ 69.864095][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.871471][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.878759][ T5226] bridge_slave_1: entered allmulticast mode [ 69.885617][ T5226] bridge_slave_1: entered promiscuous mode [ 69.893113][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 69.903152][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 69.992501][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.004320][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.107963][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.115213][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.122660][ T5236] bridge_slave_0: entered allmulticast mode [ 70.130427][ T5236] bridge_slave_0: entered promiscuous mode [ 70.145232][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.152726][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.160253][ T5239] bridge_slave_0: entered allmulticast mode [ 70.167453][ T5239] bridge_slave_0: entered promiscuous mode [ 70.181461][ T5226] team0: Port device team_slave_0 added [ 70.189815][ T5226] team0: Port device team_slave_1 added [ 70.218242][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.225421][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.233221][ T5236] bridge_slave_1: entered allmulticast mode [ 70.240478][ T5236] bridge_slave_1: entered promiscuous mode [ 70.256115][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.263517][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.271136][ T5239] bridge_slave_1: entered allmulticast mode [ 70.278066][ T5239] bridge_slave_1: entered promiscuous mode [ 70.326141][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.354874][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.365873][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.392442][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.404687][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.412184][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.419464][ T5225] bridge_slave_0: entered allmulticast mode [ 70.426147][ T5225] bridge_slave_0: entered promiscuous mode [ 70.434916][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.461273][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.468561][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.495350][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.507006][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.514206][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.522208][ T5225] bridge_slave_1: entered allmulticast mode [ 70.529150][ T5225] bridge_slave_1: entered promiscuous mode [ 70.555226][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.569140][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.578618][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.585738][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.593222][ T5231] bridge_slave_0: entered allmulticast mode [ 70.600778][ T5231] bridge_slave_0: entered promiscuous mode [ 70.609264][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.617059][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.624355][ T5231] bridge_slave_1: entered allmulticast mode [ 70.632165][ T5231] bridge_slave_1: entered promiscuous mode [ 70.661833][ T5236] team0: Port device team_slave_0 added [ 70.670668][ T5236] team0: Port device team_slave_1 added [ 70.737512][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.749558][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.773899][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.782026][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.808731][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.829990][ T5239] team0: Port device team_slave_0 added [ 70.837826][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.857573][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.876148][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.883420][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.909809][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.938423][ T5239] team0: Port device team_slave_1 added [ 70.955990][ T5231] team0: Port device team_slave_0 added [ 70.976365][ T5225] team0: Port device team_slave_0 added [ 70.984726][ T5225] team0: Port device team_slave_1 added [ 70.997383][ T5226] hsr_slave_0: entered promiscuous mode [ 71.003688][ T5226] hsr_slave_1: entered promiscuous mode [ 71.038417][ T5231] team0: Port device team_slave_1 added [ 71.044822][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.052145][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.078540][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.128248][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.135242][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.161633][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.174176][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.185560][ T4622] Bluetooth: hci1: command tx timeout [ 71.191646][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.217895][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.242723][ T5236] hsr_slave_0: entered promiscuous mode [ 71.249324][ T5236] hsr_slave_1: entered promiscuous mode [ 71.255651][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.263812][ T4622] Bluetooth: hci4: command tx timeout [ 71.269474][ T5233] Bluetooth: hci0: command tx timeout [ 71.269486][ T5235] Bluetooth: hci2: command tx timeout [ 71.269965][ T5236] Cannot create hsr debugfs directory [ 71.318010][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.325024][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.337951][ T4622] Bluetooth: hci3: command tx timeout [ 71.357442][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.399068][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.406045][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.432972][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.478137][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.485181][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.511634][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.532608][ T5239] hsr_slave_0: entered promiscuous mode [ 71.540559][ T5239] hsr_slave_1: entered promiscuous mode [ 71.547234][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.554833][ T5239] Cannot create hsr debugfs directory [ 71.613363][ T5225] hsr_slave_0: entered promiscuous mode [ 71.620338][ T5225] hsr_slave_1: entered promiscuous mode [ 71.627317][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.634943][ T5225] Cannot create hsr debugfs directory [ 71.661889][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.676736][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.749011][ T5231] hsr_slave_0: entered promiscuous mode [ 71.755449][ T5231] hsr_slave_1: entered promiscuous mode [ 71.761808][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.769483][ T5231] Cannot create hsr debugfs directory [ 71.990490][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.014262][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.036370][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.055304][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.102210][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.113331][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.127217][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.151066][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.195087][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.218692][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.244908][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.265886][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.307200][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.321070][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.348420][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.362959][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.458588][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.470097][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.503593][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.522281][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.532693][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.551930][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.593111][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.612125][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.652901][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.665342][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.672663][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.684267][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.691471][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.702090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.709276][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.775536][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.782899][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.794027][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.815655][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.822882][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.833311][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.840462][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.878789][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.974865][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.036184][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.043432][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.060945][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.082770][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.089992][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.136188][ T5231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.147834][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.192158][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.249209][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.256403][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.263325][ T4622] Bluetooth: hci1: command tx timeout [ 73.311166][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.336952][ T4622] Bluetooth: hci4: command tx timeout [ 73.342533][ T4622] Bluetooth: hci0: command tx timeout [ 73.350713][ T5233] Bluetooth: hci2: command tx timeout [ 73.358243][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.365381][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.416934][ T4622] Bluetooth: hci3: command tx timeout [ 73.545733][ T5226] veth0_vlan: entered promiscuous mode [ 73.556246][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.578565][ T5226] veth1_vlan: entered promiscuous mode [ 73.604262][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.624595][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.663653][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.769827][ T5236] veth0_vlan: entered promiscuous mode [ 73.800285][ T5236] veth1_vlan: entered promiscuous mode [ 73.822888][ T5231] veth0_vlan: entered promiscuous mode [ 73.832386][ T5226] veth0_macvtap: entered promiscuous mode [ 73.854183][ T5226] veth1_macvtap: entered promiscuous mode [ 73.894403][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.914538][ T5231] veth1_vlan: entered promiscuous mode [ 73.928322][ T5225] veth0_vlan: entered promiscuous mode [ 73.938839][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.960437][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973519][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.982789][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.992050][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.004716][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.014650][ T5236] veth0_macvtap: entered promiscuous mode [ 74.031904][ T5225] veth1_vlan: entered promiscuous mode [ 74.073295][ T5236] veth1_macvtap: entered promiscuous mode [ 74.149092][ T5231] veth0_macvtap: entered promiscuous mode [ 74.189620][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.212288][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.223411][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.239489][ T5225] veth0_macvtap: entered promiscuous mode [ 74.249952][ T5231] veth1_macvtap: entered promiscuous mode [ 74.268666][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.281723][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.296687][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.309727][ T5225] veth1_macvtap: entered promiscuous mode [ 74.322146][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.333840][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.346201][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.355145][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.405277][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.411117][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.424069][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.435223][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.435532][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.452398][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.465617][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.497552][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.508502][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.519115][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.529663][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.541386][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.560548][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.569886][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.573911][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.589130][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.598374][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.607519][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625952][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.636888][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.646996][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.659770][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.669804][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.680349][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.692070][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.706318][ T5239] veth0_vlan: entered promiscuous mode [ 74.752394][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.764584][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.775069][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.786518][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.796369][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.807211][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.818643][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.841332][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.859369][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.868986][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.878161][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.911670][ T5239] veth1_vlan: entered promiscuous mode [ 74.963389][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.963745][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.980598][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.991235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.048127][ T5239] veth0_macvtap: entered promiscuous mode [ 75.062654][ T5239] veth1_macvtap: entered promiscuous mode [ 75.158491][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.173712][ T5313] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 75.180551][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.193754][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.211604][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221906][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.240094][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.252826][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.272502][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.291080][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.306843][ T5277] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.336021][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.345001][ T4622] Bluetooth: hci1: command tx timeout [ 75.346133][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.351311][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.377757][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.392619][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.403305][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.413512][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.425510][ T4622] Bluetooth: hci0: command tx timeout [ 75.428095][ T5233] Bluetooth: hci2: command tx timeout [ 75.431192][ T4622] Bluetooth: hci4: command tx timeout [ 75.446175][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.458611][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.491097][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.501924][ T4622] Bluetooth: hci3: command tx timeout [ 75.505445][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.538125][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.556661][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 75.562358][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.574669][ T5277] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.601101][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.615131][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.618667][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.667346][ T5277] usb 2-1: config 0 descriptor?? [ 75.724374][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.763752][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.772381][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.800282][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.919519][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.927777][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.951325][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.955930][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.959618][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.036932][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.071160][ T5327] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.108287][ T5328] @ÿ: renamed from veth0_vlan (while UP) [ 76.669273][ T5333] loop2: detected capacity change from 0 to 512 [ 76.681633][ T5341] loop3: detected capacity change from 0 to 1764 [ 76.718779][ T5333] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 77.200364][ T5329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.421078][ T4622] Bluetooth: hci1: command tx timeout [ 77.590942][ T4622] Bluetooth: hci2: command tx timeout [ 77.597427][ T4622] Bluetooth: hci0: command tx timeout [ 77.614130][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.628873][ T4622] Bluetooth: hci4: command tx timeout [ 77.634471][ T4622] Bluetooth: hci3: command tx timeout [ 77.667297][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.768556][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 77.768732][ T5233] Bluetooth: hci1: Malformed LE Event: 0x0d [ 77.786565][ T5329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.797033][ T5329] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 77.804709][ T5329] usb 4-1: can't read configurations, error -71 [ 77.962196][ T5358] loop4: detected capacity change from 0 to 2048 [ 77.972184][ T5358] EXT4-fs: Ignoring removed orlov option [ 78.032149][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.107814][ T5358] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.129340][ T5358] EXT4-fs (loop4): Remounting filesystem read-only [ 78.189246][ T5239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.212293][ T5277] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 79.226580][ T5277] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 79.244910][ T5277] asix 2-1:0.0: probe with driver asix failed with error -71 [ 79.293102][ T5375] loop3: detected capacity change from 0 to 1024 [ 79.309952][ T5277] usb 2-1: USB disconnect, device number 2 [ 79.321040][ T5375] EXT4-fs: Ignoring removed nobh option [ 79.381483][ T5375] EXT4-fs: Ignoring removed orlov option [ 79.404263][ T5380] loop4: detected capacity change from 0 to 256 [ 79.415725][ T5375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.494643][ T5380] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 79.529454][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.782656][ T5390] binder: 5387:5390 ioctl 400c620e 200003c0 returned -22 [ 79.852096][ T5391] loop1: detected capacity change from 0 to 128 [ 80.037422][ T5391] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.058249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 80.097776][ T5391] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.143709][ T5399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.481388][ T5399] x_tables: duplicate underflow at hook 2 [ 80.678213][ T5398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.29'. [ 80.796762][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 80.810079][ T5391] syz.1.26 (pid 5391) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 80.839960][ T5396] loop4: detected capacity change from 0 to 2048 [ 80.881539][ T5225] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.930771][ T5402] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 80.943413][ T5402] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 80.951917][ T5402] CPU: 1 UID: 0 PID: 5402 Comm: modprobe Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 80.961889][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.971945][ T5402] RIP: 0010:__rb_erase_color+0x2d7/0xa30 [ 80.977586][ T5402] Code: 73 02 00 00 49 8d 5c 24 10 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 74 08 48 89 df e8 43 dc 44 f6 4c 8b 2b 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 2a dc 44 f6 41 f6 45 00 01 48 89 [ 80.997194][ T5402] RSP: 0018:ffffc900044a7040 EFLAGS: 00010046 [ 81.003266][ T5402] RAX: 000000000016e360 RBX: ffff88807b16a820 RCX: dffffc0000000000 [ 81.011235][ T5402] RDX: ffffffff81681190 RSI: ffff8880b903eb48 RDI: ffff88807b16a810 [ 81.019199][ T5402] RBP: 1ffff1100f62d504 R08: ffffffff901c12ef R09: 1ffffffff203825d [ 81.027164][ T5402] R10: dffffc0000000000 R11: ffffffff81671e10 R12: ffff88807b16a810 [ 81.035130][ T5402] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 81.043093][ T5402] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 81.052013][ T5402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.058586][ T5402] CR2: 00007ffce6d55fc8 CR3: 000000001769e000 CR4: 00000000003506f0 [ 81.066584][ T5402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.074546][ T5402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.082505][ T5402] Call Trace: [ 81.085795][ T5402] [ 81.088717][ T5402] ? __die_body+0x5f/0xb0 [ 81.093042][ T5402] ? die_addr+0xb0/0xe0 [ 81.097183][ T5402] ? exc_general_protection+0x3dd/0x5d0 [ 81.102732][ T5402] ? asm_exc_general_protection+0x26/0x30 [ 81.108442][ T5402] ? __pfx_set_next_task_fair+0x10/0x10 [ 81.113986][ T5402] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 81.119873][ T5402] ? __rb_erase_color+0x2d7/0xa30 [ 81.124897][ T5402] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 81.130787][ T5402] __dequeue_entity+0x953/0xd30 [ 81.135679][ T5402] set_next_entity+0xfe/0x4c0 [ 81.140394][ T5402] set_next_task_fair+0x1dd/0x540 [ 81.145461][ T5402] ? put_prev_entity+0x6f/0x200 [ 81.150327][ T5402] __schedule+0x250c/0x4b30 [ 81.154840][ T5402] ? __pfx___schedule+0x10/0x10 [ 81.159705][ T5402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.165687][ T5402] ? preempt_schedule_irq+0xf0/0x1c0 [ 81.170970][ T5402] preempt_schedule_irq+0xfb/0x1c0 [ 81.176098][ T5402] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 81.181836][ T5402] irqentry_exit+0x5e/0x90 [ 81.186250][ T5402] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 81.191707][ T5402] RIP: 0010:__kasan_check_write+0x6/0x20 [ 81.197337][ T5402] Code: e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 <48> 8b 0c 24 ba 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 [ 81.216935][ T5402] RSP: 0018:ffffc900044a7578 EFLAGS: 00000246 [ 81.222998][ T5402] RAX: 1ffff92000894ec4 RBX: ffff88801db26880 RCX: ffff888029fa3c00 [ 81.230982][ T5402] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801db27084 [ 81.238948][ T5402] RBP: 1ffff92000894eca R08: ffffffff81e73665 R09: 1ffff11003b64e10 [ 81.246938][ T5402] R10: dffffc0000000000 R11: ffffed1003b64e11 R12: dffffc0000000000 [ 81.254930][ T5402] R13: 0000000000000000 R14: ffffc900044a7620 R15: ffffc900044a7650 [ 81.262905][ T5402] ? tlb_flush_mmu+0x325/0x680 [ 81.267682][ T5402] tlb_finish_mmu+0x172/0x200 [ 81.272381][ T5402] unmap_region+0x2df/0x350 [ 81.276912][ T5402] ? mas_prev_slot+0xd2a/0xdd0 [ 81.281769][ T5402] ? __pfx_unmap_region+0x10/0x10 [ 81.286821][ T5402] ? __pfx_mas_prev_range+0x10/0x10 [ 81.292035][ T5402] ? __mas_set_range+0x133/0x3c0 [ 81.296988][ T5402] do_vmi_align_munmap+0x1268/0x1900 [ 81.302282][ T5402] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 81.307952][ T5402] ? mas_find+0x8c0/0xbb0 [ 81.312306][ T5402] do_vmi_munmap+0x24e/0x2d0 [ 81.316935][ T5402] mmap_region+0x6b6/0x20a0 [ 81.321469][ T5402] ? mark_lock+0x9a/0x360 [ 81.325956][ T5402] ? __pfx_lock_acquire+0x10/0x10 [ 81.331032][ T5402] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 81.336958][ T5402] ? __pfx_mmap_region+0x10/0x10 [ 81.341921][ T5402] ? bpf_lsm_mmap_addr+0x9/0x10 [ 81.346796][ T5402] ? security_mmap_addr+0x6f/0x250 [ 81.351927][ T5402] ? __get_unmapped_area+0x2f0/0x360 [ 81.357236][ T5402] do_mmap+0x8f9/0x1010 [ 81.361591][ T5402] ? __pfx_do_mmap+0x10/0x10 [ 81.366202][ T5402] ? __pfx_down_write_killable+0x10/0x10 [ 81.371861][ T5402] ? common_file_perm+0x1a6/0x210 [ 81.376907][ T5402] vm_mmap_pgoff+0x1dd/0x3d0 [ 81.381592][ T5402] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 81.386731][ T5402] ? __fget_files+0x29/0x470 [ 81.391328][ T5402] ? __fget_files+0x3f6/0x470 [ 81.396027][ T5402] ksys_mmap_pgoff+0x4f1/0x720 [ 81.400803][ T5402] ? __x64_sys_mmap+0x7f/0x140 [ 81.405563][ T5402] do_syscall_64+0xf3/0x230 [ 81.410070][ T5402] ? clear_bhb_loop+0x35/0x90 [ 81.415180][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.421068][ T5402] RIP: 0033:0x7f446d4bab74 [ 81.425490][ T5402] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 81.445090][ T5402] RSP: 002b:00007ffce6d55fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 81.453499][ T5402] RAX: ffffffffffffffda RBX: 00007ffce6d56020 RCX: 00007f446d4bab74 [ 81.461467][ T5402] RDX: 0000000000000001 RSI: 0000000000053000 RDI: 00007f446d36d000 [ 81.469432][ T5402] RBP: 00007ffce6d56740 R08: 0000000000000000 R09: 000000000014b000 [ 81.477400][ T5402] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f446d4965c0 [ 81.485420][ T5402] R13: 00007ffce6d567c8 R14: 000000000014ab8e R15: 0000000000000000 [ 81.493427][ T5402] [ 81.496456][ T5402] Modules linked in: [ 81.500352][ T5402] ---[ end trace 0000000000000000 ]--- [ 81.506098][ T5402] RIP: 0010:__rb_erase_color+0x2d7/0xa30 [ 81.511759][ T5402] Code: 73 02 00 00 49 8d 5c 24 10 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 74 08 48 89 df e8 43 dc 44 f6 4c 8b 2b 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 2a dc 44 f6 41 f6 45 00 01 48 89 [ 81.531392][ T5402] RSP: 0018:ffffc900044a7040 EFLAGS: 00010046 [ 81.537584][ T5402] RAX: 000000000016e360 RBX: ffff88807b16a820 RCX: dffffc0000000000 [ 81.545582][ T5402] RDX: ffffffff81681190 RSI: ffff8880b903eb48 RDI: ffff88807b16a810 [ 81.553569][ T5402] RBP: 1ffff1100f62d504 R08: ffffffff901c12ef R09: 1ffffffff203825d [ 81.561567][ T5402] R10: dffffc0000000000 R11: ffffffff81671e10 R12: ffff88807b16a810 [ 81.569546][ T5402] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 81.577533][ T5402] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 81.586473][ T5402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.593067][ T5402] CR2: 00007ffce6d55fc8 CR3: 000000001769e000 CR4: 00000000003506f0 [ 81.601061][ T5402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.609062][ T5402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.617054][ T5402] Kernel panic - not syncing: Fatal exception [ 82.741952][ T5402] Shutting down cpus with NMI [ 82.747081][ T5402] Kernel Offset: disabled [ 82.751412][ T5402] Rebooting in 86400 seconds..