last executing test programs: 2m7.828359986s ago: executing program 3 (id=19): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 2m5.431769344s ago: executing program 3 (id=22): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x8, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m4.003707483s ago: executing program 3 (id=27): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x1, 0xa, 0x3, "2e85f85a3b9156e89e82960ad936188f4429f4bf777d1b56926c75b050d4c3f0", 0x39555659}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$user(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f00000000c0)="ff", 0x1, 0x0) keyctl$clear(0x7, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000022", @ANYRES32=r1, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c0002800800030019000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setgroups(0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) close(r5) 2m2.366677809s ago: executing program 3 (id=32): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x54}}, 0x40) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x7, 0x54485746}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x2, @private2, 0x80}}, [0xb69b, 0x1, 0x9, 0x8, 0x2, 0x4cc16f28, 0x9, 0x1, 0x9, 0x6a, 0xc0b4, 0x1, 0x0, 0x63, 0x3]}, &(0x7f0000000080)=0x100) connect$phonet_pipe(r3, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1m57.182381632s ago: executing program 3 (id=38): getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x2, 0x7, 0x13) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1m55.777317207s ago: executing program 3 (id=42): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x8070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 1m40.620505554s ago: executing program 32 (id=42): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x8070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 20.603631251s ago: executing program 1 (id=230): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) 19.00421257s ago: executing program 1 (id=236): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7fff) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xd95, 0x1, 0xffff, 0xfffffffffffffffd, 0x8000000000000000, 0x100000001}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000200)={[0x6]}, 0x8}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 16.442450429s ago: executing program 1 (id=242): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) munlockall() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 14.601936605s ago: executing program 1 (id=246): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) 13.045265798s ago: executing program 1 (id=248): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000140)=ANY=[], 0x1, 0xf43, &(0x7f0000002d80)="$eJzs3U9sHNX9APA367+JTbwGfj8ClDiF0kDaOsHJgd6CFLUSQohL76CQQFRD04YeQEQJPQWpBypED1Q9UMGtUnqoVFClClWq1D8cem0PFWovrapUioRUNVXiyvZ76/WLJ7ser2fX3s9H+vrtmzc73+94HWffevZtAIZWY+Xr8eP7ixDe+ejtk1+/ePMXy9vmWnscXPlaxF4zhDDW1i+y430aN9y49vqp5fZm1oawsHyv0TQenr7auu9UCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbTl5AAAYMld+v/jnR//+uy/PXr9y4ESYaG1Pz8+bsT8Vn/cfLcL1pVUr2xtxvH0+UGwwLxjP9huJ0cj2G8n2G41tI+vn+cay44yV7DfeId9I27b27XmdAAAAsJOkeW0zFI35df1GY35+dd6/7NOZ8WL+5bOLZ873qVAAAACgss8urlx0K3ZETA5ADUIIIYQQQggxDDE30f8aehtLM/1+BQIAAAAYNmndgdb6YLlL+coCW9M6WrO7/FefaGx8f+iBTj9/2/3zVve/P/k3l//9N/zGAQCgut36bDKdV3oePfXmnpV+vo7gSHa/zT7/b2THGd1knWXrCu6U9QbL6sy/r4OqrP7NPo79UlZ/vh7moCqrP1+nc1CV1T9Rcx1VldU/uUN+B5XVuKfmOqoqq39vzXVUVVb/VM11VFVW/3TNdVRVVv8dNddRVVn9+2quo6qy+nfKZbVl9TdrrqOqsvpna66jqrL676y5jqrK6r+r5jqqKqv/7prr6JcHYpu+Dwey8db8eYM53U6Z4wEAAMCw+4/1/0QPY24AahBCbDlGBqAGIYQQQoi6ojEANdQSF/v9AgQAAADQd+l9Aeld70tRGh/pMD7aYXzstuMjrfcBl91/osP4rf7dcQ8AAADYbX55+cy9bxVr7/Pf6np4k7FN6y9tdh2jfD3Czebf6rpnW82/U9YtAwAAYLgUX/v45uGT770ye/3KgRNts9+bcb6b1gEdja8NfBj76bqA6axfpDn0ifV5GiX75a8P3FF2vGe2eKIAAAAwxNL8vRmKxnzbvLsZGo35+bX5+P4wVpw5u3j6aOynz2f57cxkCGHx9GM11w0AAAB0b22+X+wJG8z/0+f47g/jxfzLZxfPnF/tT7e2jzXaXxeYWdu+8nrBY63jrd++ULL9WOynz+98cWbPyvb5U99afL7H5w4AAADD4vyrr33zucXF099xw42SGxc3da+DIfw3LrE4CMW7UfFGv38zAQAAvfbB397+w3ePTf9q9f3/a+vfpff/H4z9Zlzb749xh3SdQHofwC3v1392fZ6Zsv3Ord+vme03EmMiq3uy7Tjti+6l+82W5WuuP854Sb6pLN90e74N1ikYzfZP+fZl2/P1CdN+M9n2fB3G0SxHkeV/MNv/hwEAAADWHHnlpXNHzr/62lfOvvTcC6dfOP3ysaMLX114fGHh+MKRlev6j7Rf3Q8AAADsRGsX/fa7EgAAAAAAAAAAAAAAAAAAABhedXycWL/PEQAAAIbdvy6GEC4JIYQQQggh6on4CdQ9PGbR93MSYhjiLz3/t1t3LC3lnzQPAAAAsL1uXHv9VHt7i0tFT/O1jtZcbW7GvKn9zcM/fng50m5Xn1j/esnenlbDsKv75//2+Uf7nH8DQ57//Td6m38y3ej6919j/QFOVMv7xR/845H2/PeNdpk/P/9nquU/lOU/FLrLv/Relv/ZavkfyfLv7TL/Led/rlr+R2P+/ameh7rNv/7xn4htOo89XeY/nJ3/86Hb/Nn5N7tMmPlSzA8Aw6jR7wK2SXqWkJ5HT8V+Ot80s8mvftjs8/9GdpwNZkyVpOOm50H3xH56vjSd5U02W/9Udrw7KtaZ2ylXlZTV36vHcbuV1T9Wcx1VldU/XnMdVZXVP1FzHVWV1T9Zcx1VldXf7Ty038rq3ymvK5fVP1VzHVWV1T9dcx1VldW/2f/H+6Ws/n0111FVWf0zt7nPIP3fVlZ/xZfValdW/2zNdVRVVv+dNddRVVn9d9VcR1Vl9d9dcx39cn9sy+bDaf45E8dSv5n1Jzb4Xrb1l6JtOw8AAACg3D+t/yfE4MTYANQgNh+NAahB7NrYMwA17IRYbvpdw7DGt//U/xpqjmL1Rt/rEGJ7Y2mp/zWInoc/yQ+37X03MwCDyu//4ebxH24e/+Hm8ed20jX8RdZPRjqMj3YYH+swPp6N5z+vEx3G78qOm78R4e4O4//XYXxfh/F7Oozv7zB+b4fx+zqM399hHAAAgOHw/7E1PwQAAIDd68JPP/z+zw89e232+pUDJ8L4LevOH439ifi39cuxn697n4zFv/l/L/Z/Ettfx/av2f6uPwEAAIDtlz4nxt//AQAAYPdKn1Nq/g8AAAC712xszf8BAABg97oztub/AAAAsIsVkxtvjm16XeDB2Ha7rh8AMPg+F9sHYnsgtnOx/Xxs0/OAh2L7hZrqAwB650ffePPxt4q19f6PZeM34vbU3uLS6isFRWP9Sv57Yrs3tg93WU/+eQDd5k/2dZlnu/LPbDE/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7NFa+Hj++vwjhnY/ePjlz4eQLy9vmWnscXPlaxF4zhDDWul8aXev/LO5449rrp5bbm7Fdim0RFkIRitZ4ePpqK9NUCOFSOBg+Ds0wd7j52eWRp8588O4nhy6ce/LFbfwWAAAAwK73vwAAAP//LTxGDA==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000049c0)='.\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1970024, &(0x7f0000000080)=ANY=[]) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10.26165362s ago: executing program 4 (id=252): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) munlockall() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 10.100642743s ago: executing program 0 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 9.931815468s ago: executing program 1 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 9.748434348s ago: executing program 0 (id=257): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 9.106622299s ago: executing program 0 (id=259): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c61"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 8.874951269s ago: executing program 4 (id=260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f0700"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 8.601403761s ago: executing program 2 (id=262): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002004e20ac141400000000000000000002000100000000000000090000000080030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x300}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 8.467689333s ago: executing program 2 (id=263): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file2\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33424752, 0x0, @stepwise={0x4, 0x6, 0x0, 0x5, 0xffffffd8, 0x5}}) unlink(0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) 8.404022847s ago: executing program 4 (id=265): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42080, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001240)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) dup3(r2, r0, 0x0) openat$null(0xffffff9c, 0x0, 0x12000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.099727852s ago: executing program 0 (id=266): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42080, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001240)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) dup3(r2, r0, 0x0) openat$null(0xffffff9c, 0x0, 0x12000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.406721576s ago: executing program 2 (id=267): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 7.02292242s ago: executing program 5 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) close(0xffffffffffffffff) landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x1f5) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') 5.919800175s ago: executing program 2 (id=269): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.21765644s ago: executing program 5 (id=270): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1d4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x180, 0x1, [@m_skbedit={0x110, 0x10, 0x0, 0x0, {{0xc}, {0x4}, {0xe1, 0x6, "fe8c518df59f5f5bfd06cc24509d18d36281f42c1cea41e3caff621b1faf896d009f21c54277e2d6ae88734ddac48efc86cd9237e83eb080d1f904f6cf8cc92fdfc106a13fed7734e002eb54d2cba9acedeb2951afebf278d4b50dc2976cb895d2adbd884cf137bc6c418c4c9fe45b6a0a9448fb75f056a9208f67cb0c83bef6310d50bccfc24bc1adcfa2b5b96c426be9b7e9ff88a5741f408802995482cc14fc00893c7d73c5af7d906a47a03d6abea9ee666247ff0073c4d6b46893a191ec1ae1f4a22e27a5b06113d073112c9075d27ad83e68b153977e83fbd2a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xfffffffb, 0x6, 0x9f32, 0x80000001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee4, 0x2, 0x6, 0xc, 0x6}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.150206094s ago: executing program 4 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 4.934218188s ago: executing program 2 (id=272): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) 4.787331691s ago: executing program 5 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) 4.673431585s ago: executing program 5 (id=274): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0xb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 4.470131922s ago: executing program 4 (id=275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f0700"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 4.438448086s ago: executing program 5 (id=276): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c61"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.815246671s ago: executing program 4 (id=277): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7fff) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xd95, 0x1, 0xffff, 0xfffffffffffffffd, 0x8000000000000000, 0x100000001}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f0000000200)={[0x6]}, 0x8}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.599015153s ago: executing program 2 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) 3.580217889s ago: executing program 0 (id=279): getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x2, 0x7, 0x13) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1.919634554s ago: executing program 5 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800000, 0x2a9}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x9d14fd9bbd71d4f0}, 0x20) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x20012, 0xffffffffffffffff, 0x8000000) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) readv(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r5 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x62f3, &(0x7f0000000140)={0x0, 0x99f2, 0x400, 0x0, 0x1c2}, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r6, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0x14}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffc000/0x3000)=nil, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 0 (id=281): socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) munlockall() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 67.073087][ T5817] cgroup: Unknown subsys name 'net' [ 67.199793][ T5817] cgroup: Unknown subsys name 'cpuset' [ 67.208637][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.580913][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.193600][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.193627][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.209665][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.215741][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.217573][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.225382][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.232638][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.239566][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.248009][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.253573][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.260501][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.273977][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.276479][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.284282][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.296234][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.307635][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.315522][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.337257][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.344661][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.348289][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.351776][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.371161][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.376961][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.378618][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.384511][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.393522][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.422250][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.046039][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 72.076116][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 72.215649][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 72.243839][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.305749][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.401708][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.410184][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.418081][ T5838] bridge_slave_0: entered allmulticast mode [ 72.425093][ T5838] bridge_slave_0: entered promiscuous mode [ 72.470533][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.477754][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.484881][ T5838] bridge_slave_1: entered allmulticast mode [ 72.492168][ T5838] bridge_slave_1: entered promiscuous mode [ 72.523348][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.530659][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.538894][ T5839] bridge_slave_0: entered allmulticast mode [ 72.545895][ T5839] bridge_slave_0: entered promiscuous mode [ 72.554110][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.561284][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.568807][ T5839] bridge_slave_1: entered allmulticast mode [ 72.575712][ T5839] bridge_slave_1: entered promiscuous mode [ 72.669526][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.676846][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.684219][ T5827] bridge_slave_0: entered allmulticast mode [ 72.691430][ T5827] bridge_slave_0: entered promiscuous mode [ 72.700143][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.707413][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.714615][ T5827] bridge_slave_1: entered allmulticast mode [ 72.722318][ T5827] bridge_slave_1: entered promiscuous mode [ 72.740198][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.747596][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.754782][ T5830] bridge_slave_0: entered allmulticast mode [ 72.763035][ T5830] bridge_slave_0: entered promiscuous mode [ 72.773591][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.805152][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.815305][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.822690][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.830430][ T5830] bridge_slave_1: entered allmulticast mode [ 72.838408][ T5830] bridge_slave_1: entered promiscuous mode [ 72.870888][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.897018][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.944814][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.968483][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.981849][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.991339][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.998769][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.005960][ T5828] bridge_slave_0: entered allmulticast mode [ 73.013056][ T5828] bridge_slave_0: entered promiscuous mode [ 73.021112][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.028360][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.035530][ T5828] bridge_slave_1: entered allmulticast mode [ 73.042747][ T5828] bridge_slave_1: entered promiscuous mode [ 73.063665][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.125029][ T5838] team0: Port device team_slave_0 added [ 73.147543][ T5827] team0: Port device team_slave_0 added [ 73.155391][ T5839] team0: Port device team_slave_0 added [ 73.165871][ T5839] team0: Port device team_slave_1 added [ 73.199031][ T5838] team0: Port device team_slave_1 added [ 73.206922][ T5827] team0: Port device team_slave_1 added [ 73.226955][ T5830] team0: Port device team_slave_0 added [ 73.248031][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.282331][ T5830] team0: Port device team_slave_1 added [ 73.293117][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.300366][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.327060][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.340768][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.367127][ T5847] Bluetooth: hci3: command tx timeout [ 73.387429][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.394384][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.423244][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.446587][ T5847] Bluetooth: hci1: command tx timeout [ 73.452730][ T5847] Bluetooth: hci2: command tx timeout [ 73.455435][ T5831] Bluetooth: hci0: command tx timeout [ 73.466524][ T5151] Bluetooth: hci4: command tx timeout [ 73.485538][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.492640][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.518855][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.531559][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.538598][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.564663][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.595076][ T5828] team0: Port device team_slave_0 added [ 73.601644][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.609052][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.635175][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.647408][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.654373][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.680474][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.692163][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.699193][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.725418][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.737964][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.744923][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.771313][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.800669][ T5828] team0: Port device team_slave_1 added [ 73.867059][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.874112][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.900065][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.932458][ T5839] hsr_slave_0: entered promiscuous mode [ 73.939329][ T5839] hsr_slave_1: entered promiscuous mode [ 73.947756][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.954703][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.981130][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.068163][ T5830] hsr_slave_0: entered promiscuous mode [ 74.074491][ T5830] hsr_slave_1: entered promiscuous mode [ 74.080916][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.088704][ T5830] Cannot create hsr debugfs directory [ 74.100661][ T5827] hsr_slave_0: entered promiscuous mode [ 74.107184][ T5827] hsr_slave_1: entered promiscuous mode [ 74.113136][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.121278][ T5827] Cannot create hsr debugfs directory [ 74.162788][ T5838] hsr_slave_0: entered promiscuous mode [ 74.169269][ T5838] hsr_slave_1: entered promiscuous mode [ 74.175223][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.183456][ T5838] Cannot create hsr debugfs directory [ 74.333296][ T5828] hsr_slave_0: entered promiscuous mode [ 74.340398][ T5828] hsr_slave_1: entered promiscuous mode [ 74.346642][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.354212][ T5828] Cannot create hsr debugfs directory [ 74.807169][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.827865][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.847010][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.864240][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.913643][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.942038][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.961735][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.981055][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.042315][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.053737][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.069238][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.085678][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.225596][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.250664][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.283934][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.300156][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.340576][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.385251][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.393765][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.439035][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.449258][ T5151] Bluetooth: hci3: command tx timeout [ 75.458396][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.479124][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.492047][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.499363][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.521651][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.528917][ T5151] Bluetooth: hci4: command tx timeout [ 75.534318][ T5151] Bluetooth: hci0: command tx timeout [ 75.537081][ T5831] Bluetooth: hci2: command tx timeout [ 75.540253][ T5151] Bluetooth: hci1: command tx timeout [ 75.571360][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.578600][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.612778][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.641602][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.673730][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.680852][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.694358][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.701541][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.749718][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.813440][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.820593][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.832522][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.839707][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.865675][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.955999][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.002510][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.050104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.057757][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.114977][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.122154][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.190884][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.265928][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.340822][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.348164][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.438625][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.445796][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.482767][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.611123][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.663171][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.685568][ T5827] veth0_vlan: entered promiscuous mode [ 76.739686][ T5827] veth1_vlan: entered promiscuous mode [ 76.834233][ T5839] veth0_vlan: entered promiscuous mode [ 76.855353][ T5830] veth0_vlan: entered promiscuous mode [ 76.871410][ T5839] veth1_vlan: entered promiscuous mode [ 76.883200][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.934859][ T5830] veth1_vlan: entered promiscuous mode [ 76.953785][ T5827] veth0_macvtap: entered promiscuous mode [ 76.982584][ T5827] veth1_macvtap: entered promiscuous mode [ 77.051424][ T5839] veth0_macvtap: entered promiscuous mode [ 77.071049][ T5839] veth1_macvtap: entered promiscuous mode [ 77.121920][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.155987][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.179103][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.208100][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.223814][ T5830] veth0_macvtap: entered promiscuous mode [ 77.245474][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.255345][ T3531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.284368][ T3531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.296028][ T3531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.316960][ T5830] veth1_macvtap: entered promiscuous mode [ 77.335655][ T3531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.344953][ T3531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.374076][ T3531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.383707][ T3531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.401544][ T3531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.431577][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.484413][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.529394][ T5151] Bluetooth: hci3: command tx timeout [ 77.591794][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.600870][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.610463][ T5151] Bluetooth: hci1: command tx timeout [ 77.617440][ T5151] Bluetooth: hci2: command tx timeout [ 77.617730][ T5847] Bluetooth: hci0: command tx timeout [ 77.622853][ T5151] Bluetooth: hci4: command tx timeout [ 77.638183][ T5838] veth0_vlan: entered promiscuous mode [ 77.644831][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.654648][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.670039][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.679125][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.715163][ T5838] veth1_vlan: entered promiscuous mode [ 77.743451][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.748531][ T5828] veth0_vlan: entered promiscuous mode [ 77.753886][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.813266][ T5828] veth1_vlan: entered promiscuous mode [ 77.850459][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.864148][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.892142][ T5838] veth0_macvtap: entered promiscuous mode [ 77.919888][ T5828] veth0_macvtap: entered promiscuous mode [ 77.952512][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.972619][ T5838] veth1_macvtap: entered promiscuous mode [ 77.978336][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.990453][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.031203][ T5828] veth1_macvtap: entered promiscuous mode [ 78.059549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.073095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.160975][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.341039][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.427961][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.048084][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.063105][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.170958][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.255245][ T5956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 79.262032][ T5956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.270234][ T5956] vhci_hcd vhci_hcd.0: Device attached [ 79.331114][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.641315][ T5847] Bluetooth: hci3: command tx timeout [ 79.720810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.729991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.823543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.851286][ T5847] Bluetooth: hci4: command tx timeout [ 79.851290][ T5831] Bluetooth: hci1: command tx timeout [ 79.851344][ T5831] Bluetooth: hci0: command tx timeout [ 79.871638][ T5836] Bluetooth: hci2: command tx timeout [ 79.925557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.935445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.047152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.066800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.089167][ T5961] vhci_hcd: connection closed [ 80.111850][ T3481] vhci_hcd: stop threads [ 80.130326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.139435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.222710][ T3481] vhci_hcd: release socket [ 80.259982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 80.280366][ T3481] vhci_hcd: disconnect device [ 80.472546][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.580827][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.768803][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.953068][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.005832][ T5902] vhci_hcd: vhci_device speed not set [ 81.080891][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.284144][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.492212][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609630][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926370][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 82.273602][ T5973] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 82.512286][ T5976] loop3: detected capacity change from 0 to 1024 [ 84.327632][ T5976] EXT4-fs: Ignoring removed i_version option [ 84.340827][ T5976] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.910580][ T5976] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 84.911176][ T5976] EXT4-fs: failed to create workqueue [ 84.926394][ T5976] EXT4-fs (loop3): mount failed [ 85.154022][ T5979] Invalid ELF header magic: != ELF [ 85.221936][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.257033][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.317492][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.325787][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.394091][ T5985] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 85.648622][ T5989] loop2: detected capacity change from 0 to 1024 [ 85.664992][ T5989] EXT4-fs: Ignoring removed i_version option [ 85.740669][ T5989] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.269718][ T5989] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.10: Invalid block bitmap block 0 in block_group 0 [ 87.286657][ T5989] Quota error (device loop2): write_blk: dquota write failed [ 87.294765][ T5989] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 87.306838][ T5989] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.10: Failed to acquire dquot type 0 [ 87.380420][ T5989] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.10: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.407918][ T5989] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.10: Invalid inode bitmap blk 0 in block_group 0 [ 87.434833][ T5989] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 87.449320][ T5989] EXT4-fs (loop2): 1 orphan inode deleted [ 87.469099][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.134141][ T3079] cfg80211: failed to load regulatory.db [ 88.675644][ T36] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 88.696556][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 88.957494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.974307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.030952][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.102617][ T6005] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 89.102617][ T6005] program syz.0.13 not setting count and/or reply_len properly [ 89.956519][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402325][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.788836][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 93.462193][ T6030] syz.3.19 (6030) used greatest stack depth: 15960 bytes left [ 93.738844][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.066119][ T6035] syzkaller0: entered promiscuous mode [ 94.187652][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 94.196742][ T6035] syzkaller0: entered allmulticast mode [ 94.700896][ T6052] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 94.710489][ T6052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 94.720129][ T6052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.102762][ T6053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 95.321485][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 96.074051][ T6065] Zero length message leads to an empty skb [ 101.773822][ T6095] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 101.794294][ T6097] loop1: detected capacity change from 0 to 512 [ 102.023086][ T6097] EXT4-fs (loop1): too many log groups per flexible block group [ 102.031174][ T6097] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 102.039551][ T6097] EXT4-fs (loop1): mount failed [ 103.200349][ T6105] syzkaller0: entered promiscuous mode [ 103.205856][ T6105] syzkaller0: entered allmulticast mode [ 103.298433][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 103.366728][ T30] audit: type=1326 audit(1750683683.406:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26f8e929 code=0x7ffc0000 [ 103.433513][ T30] audit: type=1326 audit(1750683683.436:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26f8e929 code=0x7ffc0000 [ 103.562912][ T6095] loop2: detected capacity change from 0 to 256 [ 103.570641][ T6110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.602764][ T6095] ======================================================= [ 103.602764][ T6095] WARNING: The mand mount option has been deprecated and [ 103.602764][ T6095] and is ignored by this kernel. Remove the mand [ 103.602764][ T6095] option from the mount to silence this warning. [ 103.602764][ T6095] ======================================================= [ 103.733598][ T30] audit: type=1800 audit(1750683683.776:4): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 103.741085][ T6095] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 103.842901][ T30] audit: type=1326 audit(1750683683.876:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fec26f8e929 code=0x7ffc0000 [ 103.889428][ T6115] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 [ 104.108967][ T6117] loop1: detected capacity change from 0 to 1024 [ 104.122241][ T6117] EXT4-fs: Ignoring removed i_version option [ 104.212152][ T6117] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.288091][ T6117] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.45: Invalid block bitmap block 0 in block_group 0 [ 104.329494][ T6117] Quota error (device loop1): write_blk: dquota write failed [ 104.337397][ T6117] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 104.347930][ T6117] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.45: Failed to acquire dquot type 0 [ 104.370991][ T6117] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.45: Freeing blocks not in datazone - block = 0, count = 4096 [ 104.412695][ T6117] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.45: Invalid inode bitmap blk 0 in block_group 0 [ 104.440304][ T3481] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 104.451578][ T6117] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 104.462377][ T6117] EXT4-fs (loop1): 1 orphan inode deleted [ 104.480572][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.948930][ T30] audit: type=1326 audit(1750683684.996:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26f8e929 code=0x7ffc0000 [ 104.986948][ T3481] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 105.850575][ T30] audit: type=1326 audit(1750683684.996:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec26f8e929 code=0x7ffc0000 [ 106.291422][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.611448][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 107.139728][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 107.179727][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 107.441037][ T6129] loop4: detected capacity change from 0 to 2048 [ 107.938606][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 110.097742][ T6135] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 110.104297][ T6135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.117611][ T6135] vhci_hcd vhci_hcd.0: Device attached [ 110.677319][ T6144] vhci_hcd: connection closed [ 111.186096][ T49] vhci_hcd: stop threads [ 111.333828][ T49] vhci_hcd: release socket [ 111.338554][ T49] vhci_hcd: disconnect device [ 111.345179][ T6129] EXT4-fs: error -4 creating inode table initialization thread [ 111.356252][ T6129] EXT4-fs (loop4): mount failed [ 111.432721][ T6142] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 111.443811][ T6142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 111.456361][ T6142] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.633994][ T6164] Invalid ELF header magic: != ELF [ 112.802195][ T6170] bridge0: port 3(vlan2) entered blocking state [ 112.809300][ T6170] bridge0: port 3(vlan2) entered disabled state [ 112.815888][ T6170] vlan2: entered allmulticast mode [ 112.821808][ T6170] bridge0: entered allmulticast mode [ 112.855035][ T6170] vlan2: left allmulticast mode [ 112.873761][ T6170] bridge0: left allmulticast mode [ 112.944588][ T6125] infiniband syz1: set active [ 112.951364][ T5945] vxcan1 speed is unknown, defaulting to 1000 [ 112.980789][ T6125] infiniband syz1: added vxcan1 [ 112.989249][ T6125] syz1: rxe_create_cq: returned err = -12 [ 112.995427][ T6125] infiniband syz1: Couldn't create ib_mad CQ [ 113.009523][ T6125] infiniband syz1: Couldn't open port 1 [ 113.098826][ T6125] RDS/IB: syz1: added [ 113.105291][ T6125] smc: adding ib device syz1 with port count 1 [ 113.129853][ T6174] syzkaller0: entered promiscuous mode [ 113.135354][ T6174] syzkaller0: entered allmulticast mode [ 113.152163][ T6125] smc: ib device syz1 port 1 has pnetid [ 113.163249][ T5887] vxcan1 speed is unknown, defaulting to 1000 [ 113.176140][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 113.237189][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.56'. [ 113.537017][ T6182] kvm: pic: level sensitive irq not supported [ 113.538338][ T6182] kvm: pic: non byte read [ 113.550073][ T6182] kvm: pic: single mode not supported [ 113.550138][ T6182] kvm: pic: non byte read [ 113.570448][ T6182] kvm: pic: non byte read [ 113.586739][ T6182] kvm: pic: non byte read [ 113.591483][ T6182] kvm: pic: non byte read [ 113.603001][ T6182] kvm: pic: single mode not supported [ 113.603020][ T6182] kvm: pic: level sensitive irq not supported [ 113.626520][ T6182] kvm: pic: non byte read [ 113.656730][ T6182] kvm: pic: non byte read [ 113.676633][ T6182] kvm: pic: non byte read [ 113.681377][ T6182] kvm: pic: non byte read [ 113.686029][ T6182] kvm: pic: non byte read [ 113.698196][ T6182] kvm: pic: level sensitive irq not supported [ 113.698578][ T6182] kvm: pic: single mode not supported [ 113.740356][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 113.752526][ T6182] kvm: pic: single mode not supported [ 113.753044][ T6182] kvm: pic: single mode not supported [ 113.758844][ T6182] kvm: pic: level sensitive irq not supported [ 113.766069][ T6182] kvm: pic: single mode not supported [ 113.772868][ T6182] kvm: pic: level sensitive irq not supported [ 113.801731][ T6182] kvm: pic: level sensitive irq not supported [ 113.808267][ T6182] kvm: pic: single mode not supported [ 113.814782][ T6182] kvm: pic: single mode not supported [ 113.821482][ T6182] kvm: pic: level sensitive irq not supported [ 113.838148][ T6182] kvm: pic: level sensitive irq not supported [ 117.061344][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 118.819698][ T6219] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 118.819698][ T6219] program syz.4.69 not setting count and/or reply_len properly [ 120.598527][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.609492][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.617365][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.632485][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.640166][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.690851][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 121.205000][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 121.916484][ T6241] capability: warning: `syz.1.74' uses deprecated v2 capabilities in a way that may be insecure [ 121.982817][ T6228] vxcan1 speed is unknown, defaulting to 1000 [ 122.737478][ T5151] Bluetooth: hci5: command tx timeout [ 124.815072][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 124.849974][ T5151] Bluetooth: hci5: command tx timeout [ 126.679969][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 126.848671][ T6270] bridge0: port 3(vlan2) entered blocking state [ 126.866494][ T6270] bridge0: port 3(vlan2) entered disabled state [ 126.876861][ T6270] vlan2: entered allmulticast mode [ 126.886395][ T6270] bridge0: entered allmulticast mode [ 126.893518][ T5151] Bluetooth: hci5: command tx timeout [ 126.953573][ T6270] vlan2: left allmulticast mode [ 126.958644][ T6270] bridge0: left allmulticast mode [ 127.423733][ T30] audit: type=1326 audit(1750683707.366:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.87" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7292f8e929 code=0x0 [ 128.143917][ T6284] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 128.150470][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.159217][ T6284] vhci_hcd vhci_hcd.0: Device attached [ 128.671621][ T6294] vhci_hcd: connection closed [ 128.890420][ T3518] vhci_hcd: stop threads [ 128.905978][ T43] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 128.963457][ T3518] vhci_hcd: release socket [ 128.976444][ T5151] Bluetooth: hci5: command tx timeout [ 128.994712][ T3518] vhci_hcd: disconnect device [ 129.254414][ T6125] vxcan1 speed is unknown, defaulting to 1000 [ 129.349739][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.470076][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.478507][ T6228] bridge_slave_0: entered allmulticast mode [ 129.508159][ T6228] bridge_slave_0: entered promiscuous mode [ 129.522038][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.536604][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.546611][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.564847][ T6228] bridge_slave_1: entered allmulticast mode [ 129.665240][ T6228] bridge_slave_1: entered promiscuous mode [ 129.985594][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.997283][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.013151][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.026557][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.043202][ T6301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.131270][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.547868][ T10] usb 5-1: USB disconnect, device number 2 [ 130.561622][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.669002][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.277893][ T6317] ceph: No mds server is up or the cluster is laggy [ 131.680072][ T6228] team0: Port device team_slave_0 added [ 131.689530][ T6228] team0: Port device team_slave_1 added [ 131.940309][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.960759][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.118884][ T6324] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 132.118884][ T6324] program syz.4.93 not setting count and/or reply_len properly [ 132.201830][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.256624][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.421313][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.476671][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.678138][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 132.813544][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.823676][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.215188][ T6328] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 133.224629][ T6328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 133.234247][ T6328] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 133.861446][ T6228] hsr_slave_0: entered promiscuous mode [ 133.869616][ T6228] hsr_slave_1: entered promiscuous mode [ 133.876146][ T6228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.902163][ T6228] Cannot create hsr debugfs directory [ 134.077133][ T43] vhci_hcd: vhci_device speed not set [ 134.077876][ T5945] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.006972][ T3481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.091375][ T5945] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.106414][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.121666][ T5945] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.150498][ T5945] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.164857][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.202865][ T6336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.237336][ T5945] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.292587][ T3481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.377794][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.411301][ T5902] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.445989][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.477549][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.523471][ T6341] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 135.646534][ T3481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.019824][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.612018][ T3481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.069971][ T5945] usb 5-1: USB disconnect, device number 3 [ 138.308485][ T5902] usb 3-1: USB disconnect, device number 2 [ 138.337467][ T6364] netlink: 240 bytes leftover after parsing attributes in process `syz.4.105'. [ 139.064941][ T6228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.157558][ T3481] bridge_slave_1: left allmulticast mode [ 139.169173][ T3481] bridge_slave_1: left promiscuous mode [ 139.169705][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 139.176173][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.239985][ T6370] loop0: detected capacity change from 0 to 512 [ 139.304223][ T6370] EXT4-fs (loop0): too many log groups per flexible block group [ 139.347348][ T6370] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 139.355397][ T3481] bridge_slave_0: left allmulticast mode [ 139.357510][ T6370] EXT4-fs (loop0): mount failed [ 139.375053][ T3481] bridge_slave_0: left promiscuous mode [ 139.385378][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.364454][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 142.094518][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.106214][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.119036][ T3481] bond0 (unregistering): Released all slaves [ 142.133439][ T6228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.165928][ T6228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.191834][ T6228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.281786][ T6393] bridge0: port 3(vlan2) entered blocking state [ 142.289834][ T6393] bridge0: port 3(vlan2) entered disabled state [ 142.296369][ T6393] vlan2: entered allmulticast mode [ 142.301499][ T6393] bridge0: entered allmulticast mode [ 142.317068][ T6393] vlan2: left allmulticast mode [ 142.322382][ T6393] bridge0: left allmulticast mode [ 142.348820][ T6400] bridge0: port 3(vlan2) entered blocking state [ 142.355249][ T6400] bridge0: port 3(vlan2) entered disabled state [ 142.361836][ T6400] vlan2: entered allmulticast mode [ 142.367075][ T6400] bridge0: entered allmulticast mode [ 142.373977][ T6400] vlan2: left allmulticast mode [ 142.378944][ T6400] bridge0: left allmulticast mode [ 142.390525][ T6402] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 142.402757][ T6402] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 142.413145][ T6402] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.667896][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.731186][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.103526][ T30] audit: type=1326 audit(1750683723.126:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6411 comm="syz.0.116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7292f8e929 code=0x0 [ 143.361438][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.368678][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.549406][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.556611][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.615075][ T6417] vxcan1 speed is unknown, defaulting to 1000 [ 144.067153][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 144.709620][ T6428] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 144.719298][ T6428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 144.729818][ T6428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 146.160598][ T3481] hsr_slave_0: left promiscuous mode [ 146.169807][ T3481] hsr_slave_1: left promiscuous mode [ 146.176699][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.249752][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.277848][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.317841][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.461021][ T3481] veth1_macvtap: left promiscuous mode [ 146.471363][ T3481] veth0_macvtap: left promiscuous mode [ 146.586944][ T3481] veth1_vlan: left promiscuous mode [ 146.594938][ T3481] veth0_vlan: left promiscuous mode [ 146.781067][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 148.161589][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 148.289861][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 148.423001][ T6463] loop4: detected capacity change from 0 to 512 [ 148.651593][ T6463] EXT4-fs (loop4): too many log groups per flexible block group [ 148.659657][ T6463] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 148.666743][ T6463] EXT4-fs (loop4): mount failed [ 149.484062][ T64] smc: removing ib device syz1 [ 150.233131][ T30] audit: type=1326 audit(1750683730.266:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d18e929 code=0x7fc00000 [ 150.938171][ T30] audit: type=1326 audit(1750683730.956:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.4.128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe37d18e929 code=0x0 [ 151.496086][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.744839][ T6459] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 151.754522][ T6459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 151.764248][ T6459] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.845977][ T5945] vxcan1 speed is unknown, defaulting to 1000 [ 151.866529][ T5945] syz1: Port: 1 Link DOWN [ 155.000003][ T6228] veth0_vlan: entered promiscuous mode [ 155.034717][ T6228] veth1_vlan: entered promiscuous mode [ 155.116200][ T6518] loop4: detected capacity change from 0 to 2048 [ 155.841294][ T6228] veth0_macvtap: entered promiscuous mode [ 155.913091][ T6228] veth1_macvtap: entered promiscuous mode [ 155.975228][ T6518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 156.005688][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.069430][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.174626][ T3518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.193727][ T3518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.237946][ T1337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.276892][ T6534] netlink: 240 bytes leftover after parsing attributes in process `syz.2.137'. [ 156.299564][ T6531] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.325642][ T6531] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 618 with error 28 [ 156.342496][ T6531] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.342496][ T6531] [ 156.386664][ T6531] EXT4-fs (loop4): Total free blocks count 0 [ 156.392932][ T6531] EXT4-fs (loop4): Free/Dirty block details [ 156.403328][ T6531] EXT4-fs (loop4): free_blocks=2415919104 [ 156.404745][ T1337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.455032][ T6531] EXT4-fs (loop4): dirty_blocks=624 [ 156.496570][ T6531] EXT4-fs (loop4): Block reservation details [ 156.544831][ T6531] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 156.628100][ T6542] uprobe: syz.2.138:6542 failed to unregister, leaking uprobe [ 156.752474][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.761167][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.805558][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 156.847140][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.881975][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.374215][ T30] audit: type=1326 audit(1750683737.416:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6546 comm="syz.4.139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe37d18e929 code=0x0 [ 160.008965][ T30] audit: type=1326 audit(1750683740.006:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.5.145" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c8d8e929 code=0x0 [ 162.928845][ T6598] loop1: detected capacity change from 0 to 2048 [ 163.532517][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 163.882850][ T6617] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 163.889404][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.961498][ T6617] vhci_hcd vhci_hcd.0: Device attached [ 164.206334][ T5902] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 164.222721][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 165.212060][ T6634] syzkaller0: entered promiscuous mode [ 165.218452][ T6634] syzkaller0: entered allmulticast mode [ 165.343670][ T6618] vhci_hcd: connection reset by peer [ 165.371969][ T49] vhci_hcd: stop threads [ 165.392051][ T49] vhci_hcd: release socket [ 165.403242][ T49] vhci_hcd: disconnect device [ 165.912601][ T30] audit: type=1326 audit(1750683745.956:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.5.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c8d8e929 code=0x0 [ 166.951213][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 168.387948][ T6657] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 169.332503][ T30] audit: type=1326 audit(1750683748.836:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.1.161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb54b38e929 code=0x0 [ 169.516896][ T5902] vhci_hcd: vhci_device speed not set [ 170.673880][ T6686] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 170.986482][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.163'. [ 171.492201][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 172.784997][ T6709] syzkaller0: entered promiscuous mode [ 172.934205][ T6709] syzkaller0: entered allmulticast mode [ 173.626288][ T30] audit: type=1326 audit(1750683753.116:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.1.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb54b38e929 code=0x0 [ 175.727160][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.175'. [ 177.408039][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.5.180'. [ 179.066790][ T6781] syzkaller0: entered promiscuous mode [ 179.414562][ T6784] IPv6: Can't replace route, no match found [ 179.430111][ T6781] syzkaller0: entered allmulticast mode [ 180.953408][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 181.001762][ T6804] loop1: detected capacity change from 0 to 512 [ 181.089136][ T6804] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 181.128359][ T6804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.152813][ T6804] EXT4-fs (loop1): 1 truncate cleaned up [ 181.360707][ T6804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.027260][ T30] audit: type=1326 audit(1750683761.526:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.5.188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c8d8e929 code=0x0 [ 182.298998][ T6821] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 182.395183][ T6821] netlink: 152 bytes leftover after parsing attributes in process `syz.1.189'. [ 182.449930][ T30] audit: type=1326 audit(1750683762.486:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54b38e929 code=0x7ffc0000 [ 182.539756][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 182.570425][ T30] audit: type=1326 audit(1750683762.496:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54b38e929 code=0x7ffc0000 [ 182.812115][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.256686][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 184.169396][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.193'. [ 184.828667][ T6846] Context (ID=0x10) not attached to queue pair (handle=0x4d3:0x0) [ 185.227614][ T6853] syzkaller0: entered promiscuous mode [ 185.233125][ T6853] syzkaller0: entered allmulticast mode [ 185.448110][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 185.701789][ T6866] ceph: No mds server is up or the cluster is laggy [ 186.073329][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 186.091192][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 186.230588][ T6873] IPv6: Can't replace route, no match found [ 187.594999][ T6884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 187.601555][ T6884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.609387][ T6884] vhci_hcd vhci_hcd.0: Device attached [ 188.215855][ T6887] vhci_hcd: connection closed [ 188.345535][ T12] vhci_hcd: stop threads [ 188.478990][ T12] vhci_hcd: release socket [ 188.483455][ T12] vhci_hcd: disconnect device [ 188.861991][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 188.985274][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'. [ 189.482065][ T6906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 189.488617][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.499466][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 189.614471][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 189.766558][ T43] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 189.871930][ T10] usb 3-1: device descriptor read/all, error -71 [ 189.914281][ T6915] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0) [ 190.070761][ T6907] vhci_hcd: connection reset by peer [ 190.238210][ T64] vhci_hcd: stop threads [ 190.259133][ T64] vhci_hcd: release socket [ 190.266784][ T64] vhci_hcd: disconnect device [ 190.937924][ T6921] ceph: No mds server is up or the cluster is laggy [ 193.193140][ T6937] syzkaller0: entered promiscuous mode [ 193.228584][ T6937] syzkaller0: entered allmulticast mode [ 193.888862][ T6937] tipc: Enabling of bearer rejected, failed to enable media [ 194.207133][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 194.282282][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289420][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.541036][ T6964] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 195.377523][ T43] vhci_hcd: vhci_device speed not set [ 195.447882][ T6974] bridge0: port 3(vlan2) entered blocking state [ 195.454979][ T6974] bridge0: port 3(vlan2) entered disabled state [ 195.462498][ T6974] vlan2: entered allmulticast mode [ 195.467719][ T6974] bridge0: entered allmulticast mode [ 195.978294][ T6974] vlan2: left allmulticast mode [ 195.983200][ T6974] bridge0: left allmulticast mode [ 196.395581][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 196.401865][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 196.409083][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 196.415819][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 197.274257][ T6995] 9pnet_fd: Insufficient options for proto=fd [ 197.722541][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 198.771371][ T7010] syzkaller0: entered promiscuous mode [ 198.800178][ T7010] syzkaller0: entered allmulticast mode [ 198.947970][ T7010] tipc: Enabling of bearer rejected, failed to enable media [ 198.978359][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.232'. [ 199.208955][ T7017] kvm: pic: single mode not supported [ 199.209094][ T7017] picdev_read: 25 callbacks suppressed [ 199.209109][ T7017] kvm: pic: non byte read [ 199.236938][ T7017] kvm: pic: non byte read [ 199.241578][ T7017] kvm: pic: non byte read [ 199.246189][ T7017] kvm: pic: non byte read [ 199.290621][ T7017] kvm: pic: non byte read [ 199.305578][ T7017] kvm: pic: non byte read [ 199.326689][ T7017] kvm: pic: non byte read [ 199.335956][ T7017] kvm: pic: non byte read [ 199.358567][ T7017] kvm: pic: non byte read [ 199.363213][ T7017] kvm: pic: non byte read [ 199.394048][ T7017] kvm: pic: level sensitive irq not supported [ 199.455598][ T7024] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 199.468203][ T7024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.476527][ T7024] vhci_hcd vhci_hcd.0: Device attached [ 199.760416][ T10] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 200.707907][ T7025] vhci_hcd: connection reset by peer [ 200.977963][ T13] vhci_hcd: stop threads [ 201.037801][ T13] vhci_hcd: release socket [ 201.063134][ T7030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.106899][ T13] vhci_hcd: disconnect device [ 202.108255][ T30] audit: type=1326 audit(1750683782.126:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d18e929 code=0x7fc00000 [ 202.403676][ T30] audit: type=1326 audit(1750683782.266:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.4.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37d18e929 code=0x7fc00000 [ 202.551828][ T7038] syz.1.236 (7038): drop_caches: 2 [ 203.072622][ T7058] syzkaller0: entered promiscuous mode [ 203.079077][ T7058] syzkaller0: entered allmulticast mode [ 204.507431][ T7058] tipc: Enabling of bearer rejected, failed to enable media [ 205.118745][ T10] vhci_hcd: vhci_device speed not set [ 205.806348][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 205.950489][ T7057] IPv6: Can't replace route, no match found [ 206.040977][ T7085] loop1: detected capacity change from 0 to 4096 [ 206.137182][ T7085] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.295733][ T7089] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 206.302284][ T7089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.464929][ T7085] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 206.560247][ T7094] process 'syz.0.250' launched './file2' with NULL argv: empty string added [ 207.048071][ T7089] vhci_hcd vhci_hcd.0: Device attached [ 207.170079][ T6036] udevd[6036]: incorrect nilfs2 checksum on /dev/loop1 [ 207.214284][ T7090] vhci_hcd: connection closed [ 207.242091][ T7098] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.288270][ T12] vhci_hcd: stop threads [ 207.308715][ T10] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 207.335044][ T12] vhci_hcd: release socket [ 207.362952][ T12] vhci_hcd: disconnect device [ 208.554363][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 209.504525][ T7116] loop0: detected capacity change from 0 to 2048 [ 209.691808][ T7120] bridge0: port 3(vlan2) entered blocking state [ 209.698289][ T7120] bridge0: port 3(vlan2) entered disabled state [ 209.704748][ T7120] vlan2: entered allmulticast mode [ 209.709945][ T7120] bridge0: entered allmulticast mode [ 209.728025][ T7120] vlan2: left allmulticast mode [ 209.732932][ T7120] bridge0: left allmulticast mode [ 209.768018][ T7116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 209.932324][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 210.180883][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 210.377840][ T7137] syzkaller0: entered promiscuous mode [ 210.396704][ T7137] syzkaller0: entered allmulticast mode [ 210.428214][ T7137] tipc: Enabling of bearer rejected, failed to enable media [ 211.881784][ T5945] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 212.287182][ T5945] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.301253][ T5945] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.360539][ T5945] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.454846][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 212.616689][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 212.707781][ T10] vhci_hcd: vhci_device speed not set [ 213.105607][ T30] audit: type=1326 audit(1750683792.986:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.5.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c8d8e929 code=0x0 [ 213.572853][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.621422][ T7151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.644041][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.653241][ T7174] loop2: detected capacity change from 0 to 2048 [ 213.674779][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.685585][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.799910][ T5945] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.807472][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.809278][ T7174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 213.831723][ T7159] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.901298][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.926840][ T5945] usb 5-1: USB disconnect, device number 4 [ 214.236176][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 214.791700][ T7192] syzkaller0: entered promiscuous mode [ 214.810624][ T7192] syzkaller0: entered allmulticast mode [ 214.821249][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 214.875791][ T7192] tipc: Enabling of bearer rejected, failed to enable media [ 215.240517][ T7198] 9pnet_fd: Insufficient options for proto=fd [ 215.425699][ T10] usb 1-1: USB disconnect, device number 2 [ 219.313430][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 219.325379][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 219.333807][ C1] CPU: 1 UID: 0 PID: 7216 Comm: syz.5.280 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 219.345161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.355203][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 219.360587][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 219.380202][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 219.386264][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888033ec1e00 [ 219.394313][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88807d3961f0 [ 219.402283][ C1] RBP: 0000000000000001 R08: ffff88807d396183 R09: 1ffff1100fa72c30 [ 219.410334][ C1] R10: dffffc0000000000 R11: ffffed100fa72c31 R12: 1ffff1100fa72c3d [ 219.418304][ C1] R13: ffffffff81a83684 R14: ffff88807d3961e8 R15: dffffc0000000000 [ 219.426444][ C1] FS: 00007fa6c9b766c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 219.435401][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.442163][ C1] CR2: 0000562c69624950 CR3: 000000007ea78000 CR4: 00000000003526f0 [ 219.450122][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.458075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.466028][ C1] Call Trace: [ 219.469289][ C1] [ 219.472117][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 219.477391][ C1] put_pid+0x9c/0x130 [ 219.481381][ C1] rcu_core+0xca5/0x1710 [ 219.485615][ C1] ? __pfx_rcu_core+0x10/0x10 [ 219.490281][ C1] ? scsi_end_request+0x339/0x830 [ 219.495290][ C1] ? scsi_end_request+0x339/0x830 [ 219.500300][ C1] ? scsi_io_completion+0x13e/0x390 [ 219.505484][ C1] handle_softirqs+0x283/0x870 [ 219.510241][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 219.515002][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 219.520276][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 219.525461][ C1] __irq_exit_rcu+0xca/0x1f0 [ 219.530039][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 219.535228][ C1] irq_exit_rcu+0x9/0x30 [ 219.539453][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 219.545070][ C1] [ 219.547989][ C1] [ 219.550936][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.556897][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 219.563382][ C1] Code: 74 05 e8 7b 5a 57 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 47 20 f6 65 8b 05 0c ab 2f 07 85 c0 74 40 48 c7 04 24 0e 36 [ 219.582972][ C1] RSP: 0018:ffffc90010227b60 EFLAGS: 00000206 [ 219.589110][ C1] RAX: 9e5b106694942100 RBX: 0000000000000a06 RCX: 9e5b106694942100 [ 219.597062][ C1] RDX: 0000000000000006 RSI: ffffffff8d991910 RDI: 0000000000000001 [ 219.605018][ C1] RBP: ffffc90010227be8 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 219.612980][ C1] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: dffffc0000000000 [ 219.620938][ C1] R13: 00000000000018fe R14: ffffffff8e224620 R15: 1ffff92002044f6c [ 219.628916][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 219.635259][ C1] pcpu_alloc_noprof+0xc00/0x16b0 [ 219.640278][ C1] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 219.645979][ C1] percpu_ref_init+0x42/0x360 [ 219.650649][ C1] io_ring_ctx_alloc+0x28c/0xae0 [ 219.655740][ C1] ? io_uring_fill_params+0x3f9/0x7e0 [ 219.661098][ C1] io_uring_create+0x130/0xb60 [ 219.665844][ C1] __se_sys_io_uring_setup+0x264/0x270 [ 219.671370][ C1] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 219.679000][ C1] ? rcu_is_watching+0x15/0xb0 [ 219.684502][ C1] ? do_syscall_64+0xbe/0x3b0 [ 219.689177][ C1] do_syscall_64+0xfa/0x3b0 [ 219.693678][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.698862][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.704909][ C1] ? clear_bhb_loop+0x60/0xb0 [ 219.709577][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.715456][ C1] RIP: 0033:0x7fa6c8d8e929 [ 219.719869][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.739460][ C1] RSP: 002b:00007fa6c9b76038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 219.747859][ C1] RAX: ffffffffffffffda RBX: 00007fa6c8fb5fa0 RCX: 00007fa6c8d8e929 [ 219.755813][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000006ddd [ 219.763780][ C1] RBP: 00007fa6c8e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 219.771742][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.779695][ C1] R13: 0000000000000000 R14: 00007fa6c8fb5fa0 R15: 00007fffaf3ef178 [ 219.787660][ C1] [ 219.790659][ C1] Modules linked in: [ 219.796921][ C1] ---[ end trace 0000000000000000 ]--- [ 219.802404][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 219.807798][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 219.827586][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 219.833651][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888033ec1e00 [ 219.841633][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88807d3961f0 [ 219.849645][ C1] RBP: 0000000000000001 R08: ffff88807d396183 R09: 1ffff1100fa72c30 [ 219.857693][ C1] R10: dffffc0000000000 R11: ffffed100fa72c31 R12: 1ffff1100fa72c3d [ 219.865751][ C1] R13: ffffffff81a83684 R14: ffff88807d3961e8 R15: dffffc0000000000 [ 219.873818][ C1] FS: 00007fa6c9b766c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 219.882821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.889453][ C1] CR2: 0000562c69624950 CR3: 000000007ea78000 CR4: 00000000003526f0 [ 219.897487][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.905504][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.913549][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 219.920998][ C1] Kernel Offset: disabled [ 219.925306][ C1] Rebooting in 86400 seconds..