last executing test programs: 14m37.966968533s ago: executing program 32 (id=51): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r7], 0x40c}}, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x1}, 0x10) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 12m45.010144537s ago: executing program 33 (id=367): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2a5a00000040500e671d8f5ff4"], 0x28}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 11m30.928909716s ago: executing program 34 (id=475): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) 8m55.804563049s ago: executing program 35 (id=844): mmap(&(0x7f0000121000/0x3000)=nil, 0x3000, 0x0, 0x8831, 0xffffffffffffffff, 0x16837000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = add_key(0x0, 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00', 0xb, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='hostfs\x00', 0x202000, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 8m46.749395965s ago: executing program 7 (id=860): sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 8m43.328072054s ago: executing program 7 (id=867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 8m42.491397611s ago: executing program 36 (id=867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 6m18.216164146s ago: executing program 9 (id=1205): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 6m16.501475377s ago: executing program 8 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 6m16.411976039s ago: executing program 9 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) 6m15.143389851s ago: executing program 9 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) r4 = creat(0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012113, r3, 0xd15b8000) 6m13.407597814s ago: executing program 9 (id=1216): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x0, 0x1df, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) io_destroy(0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0xffffff7f}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m10.892079463s ago: executing program 9 (id=1217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf8"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x2, 0x5911, 0x2}) 6m9.448255699s ago: executing program 8 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 6m8.042611063s ago: executing program 8 (id=1224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6m7.541437882s ago: executing program 9 (id=1228): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0xf43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 6m5.363093341s ago: executing program 8 (id=1233): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 6m3.89589691s ago: executing program 8 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 6m1.779896994s ago: executing program 8 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0xfffffffffffffff4}, 0x18) setreuid(0xee01, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 5m52.17361784s ago: executing program 37 (id=1228): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45e3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0xf43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 5m46.606736316s ago: executing program 38 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0xfffffffffffffff4}, 0x18) setreuid(0xee01, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 1m51.652243142s ago: executing program 4 (id=1873): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) 1m51.252220988s ago: executing program 4 (id=1875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) inotify_init1(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m48.409860216s ago: executing program 4 (id=1878): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000000000000118"], 0x28}, 0x0) 1m47.72194432s ago: executing program 4 (id=1879): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000100)={[{@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m46.200089066s ago: executing program 4 (id=1885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000380), r4, 0x0, 0x1, 0x4}}, 0x20) 1m44.572420333s ago: executing program 4 (id=1886): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x102000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x24}}, 0x44) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x1fffdfe, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) 1m42.866500232s ago: executing program 39 (id=1886): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x102000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x24}}, 0x44) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x1fffdfe, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) 1m14.375968527s ago: executing program 3 (id=1940): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2a, 0x0, &(0x7f0000000680)="67f5545fdca65fd97d0dc19deb405c3bff91e679ae787fc9cf34131dc5bc3ba1768d2f0bae3db90274b2"}) 1m13.481981874s ago: executing program 3 (id=1941): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2a, 0x0, &(0x7f0000000680)="67f5545fdca65fd97d0dc19deb405c3bff91e679ae787fc9cf34131dc5bc3ba1768d2f0bae3db90274b2"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m11.676458315s ago: executing program 3 (id=1945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) link(0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800001810000d0028bd7000fcdbff2500006700", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x4086}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m10.638234994s ago: executing program 3 (id=1948): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 1m9.20776958s ago: executing program 3 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32], 0x254}}, 0x0) 1m7.905333438s ago: executing program 3 (id=1954): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000940)={[{@inlinecrypt}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@noload}, {@sb={'sb', 0x3d, 0x8}}, {@nouser_xattr}]}, 0x0, 0x45d, &(0x7f00000004c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/30) 52.581437372s ago: executing program 40 (id=1954): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000940)={[{@inlinecrypt}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@noload}, {@sb={'sb', 0x3d, 0x8}}, {@nouser_xattr}]}, 0x0, 0x45d, &(0x7f00000004c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/30) 19.353294311s ago: executing program 2 (id=2081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000100)) copy_file_range(r2, 0x0, r1, 0x0, 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_setup(0x3fe, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) 17.121617345s ago: executing program 6 (id=2092): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 15.101888989s ago: executing program 6 (id=2094): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0xd, 0x40005, 0x3, 0x0, 0xffff7ff6}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) capget(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x8001, 0x9, 0x8, 0x7ff, 0xffffffff, 0x8}) 13.244460291s ago: executing program 6 (id=2097): syz_emit_ethernet(0x44, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @loopback}, "001863718e9b"}}}}}, 0x0) 12.759996438s ago: executing program 6 (id=2100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) link(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0314f000000000000000070000000900010073797a30000000001c000000090a010400000000000000000700000008000a4000000003"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800001810000d0028bd7000fcdbff2500006700", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x4086}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.615377999s ago: executing program 5 (id=2103): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 11.424073859s ago: executing program 2 (id=2104): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) socket$nl_rdma(0x10, 0x3, 0x14) 10.867898465s ago: executing program 6 (id=2106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) fcntl$notify(r2, 0x402, 0x8000003d) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r6 = gettid() syz_emit_ethernet(0x19, &(0x7f0000000380)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xfff, 0x0, 0x1}], @llc={@llc={0xf4, 0xaa, 'k'}}}}}}, &(0x7f0000000500)={0x1, 0x1, [0x218, 0xda7, 0x416, 0x167]}) syz_open_procfs(r6, &(0x7f0000000080)='attr/sockcreate\x00') close(r5) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') 10.569794642s ago: executing program 5 (id=2107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"/301], 0x254}}, 0x0) 9.121393065s ago: executing program 5 (id=2108): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2a, 0x0, &(0x7f0000000680)="67f5545fdca65fd97d0dc19deb405c3bff91e679ae787fc9cf34131dc5bc3ba1768d2f0bae3db90274b2"}) 5.661722492s ago: executing program 1 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) listen(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000005240)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 5.427715492s ago: executing program 6 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020}, 0x2020) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, &(0x7f0000000100)) copy_file_range(r2, 0x0, r1, 0x0, 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_setup(0x3fe, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) 4.377203452s ago: executing program 1 (id=2116): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2a, 0x0, &(0x7f0000000680)="67f5545fdca65fd97d0dc19deb405c3bff91e679ae787fc9cf34131dc5bc3ba1768d2f0bae3db90274b2"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.228093875s ago: executing program 0 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x108, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 4.034718651s ago: executing program 2 (id=2118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) link(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0314f000000000000000070000000900010073797a30000000001c000000090a010400000000000000000700000008000a4000000003"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800001810000d0028bd7000fcdbff2500006700", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x4086}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.81523145s ago: executing program 0 (id=2119): syz_emit_ethernet(0x44, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @loopback}, "001863718e9b"}}}}}, 0x0) 3.541593249s ago: executing program 1 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff0100"/301], 0x254}}, 0x0) 3.416066215s ago: executing program 5 (id=2121): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000000200)='./control\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/54, 0x36) 3.401497745s ago: executing program 0 (id=2122): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0xd, 0x40005, 0x3, 0x0, 0xffff7ff6}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) capget(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x8001, 0x9, 0x8, 0x7ff, 0xffffffff, 0x8}) 3.164572608s ago: executing program 2 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0xf08, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 2.228076244s ago: executing program 0 (id=2124): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.227739588s ago: executing program 7 (id=1994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.98547298s ago: executing program 1 (id=2125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.931973929s ago: executing program 5 (id=2126): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 1.587140836s ago: executing program 7 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r1) 1.507387624s ago: executing program 1 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000001200)='./control\x00', 0x0) chmod(&(0x7f0000000940)='./control\x00', 0x9c32f69e6caa24ef) 1.321513445s ago: executing program 0 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) 1.223929403s ago: executing program 2 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0xd0, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 939.987484ms ago: executing program 7 (id=2131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 885.684659ms ago: executing program 0 (id=2132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000001100)='mm_compaction_kcompactd_sleep\x00', r0, 0x0, 0x100000001}, 0x18) fcntl$setlease(r1, 0x400, 0x1) 328.391954ms ago: executing program 5 (id=2133): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 73.70035ms ago: executing program 7 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1.099109ms ago: executing program 1 (id=2135): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) listen(r1, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x80800) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 0s ago: executing program 2 (id=2136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) listen(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000005240)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) kernel console output (not intermixed with test programs): mpat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 796.828684][ T30] audit: type=1326 audit(1746257886.807:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11983 comm="syz.5.1495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 797.546127][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 797.607210][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 797.787807][T11998] fuse: Unknown parameter 'user00000000000000000000' [ 798.435598][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 798.540836][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 799.204921][T11703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.221640][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.250079][T12012] No such timeout policy "syz0" [ 799.289350][T11703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.311859][T11703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.318839][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.356181][T11703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.494316][T11987] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1495'. [ 800.137725][T12021] ptrace attach of "./syz-executor exec"[12023] was attempted by "./syz-executor exec"[12021] [ 800.163855][T12025] fuse: Unknown parameter 'user00000000000000000000' [ 800.283706][T11703] hsr_slave_0: entered promiscuous mode [ 800.310829][T11703] hsr_slave_1: entered promiscuous mode [ 802.070173][T12047] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 802.591879][T12058] tipc: Enabling of bearer rejected, failed to enable media [ 802.773838][T12068] fuse: Unknown parameter 'user_i00000000000000000000' [ 803.020354][T11661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 803.075122][T11661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 803.397172][T11661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 803.423148][T11661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.663898][T12089] syz.1.1524: attempt to access beyond end of device [ 803.663898][T12089] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 804.258218][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 804.258245][ T30] audit: type=1326 audit(1746257894.487:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 804.283237][T11621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 804.471773][ T30] audit: type=1326 audit(1746257894.487:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 804.890006][ T30] audit: type=1326 audit(1746257894.527:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 804.998588][ T30] audit: type=1326 audit(1746257894.527:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 805.077209][ T30] audit: type=1326 audit(1746257894.527:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12100 comm="syz.5.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 805.145942][T11621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 805.421160][T12111] delete_channel: no stack [ 805.454505][T11621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.746814][T11621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 806.010926][T12115] fuse: Unknown parameter 'user_i00000000000000000000' [ 806.150234][T12118] loop5: detected capacity change from 0 to 1024 [ 806.311690][ T5904] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 806.345414][T11703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.425111][T11703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.512836][T11703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.552844][T11703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.694187][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.744319][T12124] loop5: detected capacity change from 0 to 512 [ 806.765731][T12124] EXT4-fs: inline encryption not supported [ 806.781125][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.798077][T12124] ext4: Unknown parameter 'nouser_xattr' [ 806.841260][T11621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.859550][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.885415][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.892665][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.095239][ T5904] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 807.105939][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.115153][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.310936][T12126] loop5: detected capacity change from 0 to 512 [ 807.355137][T12126] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 808.155238][T12126] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1535: corrupted xattr entries [ 808.168740][T12126] EXT4-fs (loop5): Remounting filesystem read-only [ 808.175847][T12126] EXT4-fs (loop5): 1 truncate cleaned up [ 808.183213][T12126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.413816][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.421033][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.654512][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.760349][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.817040][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.824265][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.894459][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.901685][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.254432][T11703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.430888][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.515593][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.522864][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.657106][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.664361][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.996927][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 811.229790][T11703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.344576][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.367898][T12164] fuse: Unknown parameter 'user_i00000000000000000000' [ 812.736366][T12169] loop5: detected capacity change from 0 to 128 [ 812.822430][T11661] veth0_vlan: entered promiscuous mode [ 812.935347][T11661] veth1_vlan: entered promiscuous mode [ 812.981008][T12169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 813.007577][T12169] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.165886][ T5904] usb 2-1: can't set config #27, error -71 [ 813.220773][ T5904] usb 2-1: USB disconnect, device number 15 [ 813.225393][T11661] veth0_macvtap: entered promiscuous mode [ 813.290838][T11661] veth1_macvtap: entered promiscuous mode [ 813.438269][T12179] loop1: detected capacity change from 0 to 512 [ 813.474852][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.496434][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.498822][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 813.514550][T12179] EXT4-fs: inline encryption not supported [ 813.518279][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.520465][T12179] ext4: Unknown parameter 'nouser_xattr' [ 813.531122][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.547496][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.557993][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.568240][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.577107][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.625032][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.643672][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.654942][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.685006][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.701690][T11661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.712846][T11661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.725187][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.800857][T11661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.831244][T11661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.891240][T11661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.940806][T11661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.041665][ T30] audit: type=1326 audit(1746257904.267:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 814.233651][T12193] loop1: detected capacity change from 0 to 512 [ 814.253375][T12193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 814.339580][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 815.007109][ T30] audit: type=1326 audit(1746257904.267:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 815.106682][ T30] audit: type=1326 audit(1746257904.267:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 815.226452][T12193] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1545: corrupted xattr entries [ 815.246637][T12193] EXT4-fs (loop1): Remounting filesystem read-only [ 815.255077][T12193] EXT4-fs (loop1): 1 truncate cleaned up [ 815.283118][T12193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.425791][ T30] audit: type=1326 audit(1746257904.267:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 815.604920][ T30] audit: type=1326 audit(1746257904.297:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 815.945899][ T5838] Bluetooth: hci0: command tx timeout [ 815.961086][T11703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.969514][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.201610][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1551'. [ 817.211059][T12215] fuse: Unknown parameter 'user_id00000000000000000000' [ 817.516603][T12225] delete_channel: no stack [ 817.921636][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 818.042251][ T5838] Bluetooth: hci0: command tx timeout [ 818.299131][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 818.627476][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.634057][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.003649][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 819.072178][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 819.125132][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 819.226442][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.407594][T12225] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 819.435758][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.009511][T11703] veth0_vlan: entered promiscuous mode [ 820.092796][ T5838] Bluetooth: hci0: command tx timeout [ 820.304263][T11703] veth1_vlan: entered promiscuous mode [ 820.749324][T10158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.762784][T10158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.770928][T10158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.783850][T10158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.796622][T10158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 821.102387][T11703] veth0_macvtap: entered promiscuous mode [ 821.159013][ T83] bridge_slave_1: left allmulticast mode [ 821.222741][ T83] bridge_slave_1: left promiscuous mode [ 821.272301][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.373376][ T83] bridge_slave_0: left allmulticast mode [ 821.379096][ T83] bridge_slave_0: left promiscuous mode [ 821.424744][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.637733][T11595] usb 6-1: USB disconnect, device number 18 [ 822.182575][T10158] Bluetooth: hci0: command tx timeout [ 822.318022][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 822.389381][ T30] audit: type=1326 audit(1746257912.617:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.441140][ T30] audit: type=1326 audit(1746257912.647:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.474593][T12297] nfs: Unknown parameter '18446744073709551615' [ 822.497745][T12297] syz.2.1572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 822.508403][ T30] audit: type=1326 audit(1746257912.647:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.532320][ T30] audit: type=1326 audit(1746257912.647:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.555032][ T30] audit: type=1326 audit(1746257912.647:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.577714][ T30] audit: type=1326 audit(1746257912.647:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.606227][ T30] audit: type=1326 audit(1746257912.647:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.629148][ T30] audit: type=1326 audit(1746257912.647:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.652008][ T30] audit: type=1326 audit(1746257912.647:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.674706][ T30] audit: type=1326 audit(1746257912.647:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12291 comm="syz.2.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 822.957145][T10158] Bluetooth: hci2: command tx timeout [ 823.521328][T12302] netlink: '+}[@': attribute type 30 has an invalid length. [ 823.542152][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.561721][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.583986][ T83] bond0 (unregistering): Released all slaves [ 823.916525][ T83] hsr_slave_0: left promiscuous mode [ 823.941665][ T83] hsr_slave_1: left promiscuous mode [ 823.947866][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.975885][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.155030][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 824.253890][T12317] delete_channel: no stack [ 824.566390][ T9745] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 825.016611][ T9745] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 825.051659][ T5838] Bluetooth: hci2: command tx timeout [ 825.062224][ T9745] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 825.101565][ T9745] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 825.166741][ T9745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.448285][T10158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.462544][T10158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.470888][T10158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.480707][T10158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.488979][T10158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 825.586683][T12317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 825.599346][ T9745] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.724845][ T83] team0 (unregistering): Port device team_slave_1 removed [ 825.765953][ T83] team0 (unregistering): Port device team_slave_0 removed [ 826.460728][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 827.131654][ T5838] Bluetooth: hci2: command tx timeout [ 827.329520][T12328] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 827.581009][ T5838] Bluetooth: hci5: command tx timeout [ 828.052715][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 828.052735][ T30] audit: type=1326 audit(1746257918.287:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 828.231674][ T30] audit: type=1326 audit(1746257918.317:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 828.274561][ T30] audit: type=1326 audit(1746257918.317:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 828.299819][T12180] chnl_net:caif_netlink_parms(): no params data found [ 828.328444][ T30] audit: type=1326 audit(1746257918.317:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 828.353020][ T30] audit: type=1326 audit(1746257918.317:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12364 comm="syz.1.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 828.623639][ T9745] usb 6-1: USB disconnect, device number 19 [ 828.816053][T12378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.917645][T12385] loop1: detected capacity change from 0 to 512 [ 828.937841][T12385] EXT4-fs: Ignoring removed nobh option [ 828.951531][T12385] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 829.152471][T12378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.211652][ T5838] Bluetooth: hci2: command tx timeout [ 829.304789][T12395] loop1: detected capacity change from 0 to 512 [ 829.360346][T12395] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 829.375761][T12378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.394627][T12395] EXT4-fs (loop1): 1 truncate cleaned up [ 829.404150][T12395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.422231][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.427034][T12395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.430737][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.445834][T12180] bridge_slave_0: entered allmulticast mode [ 829.454050][T12180] bridge_slave_0: entered promiscuous mode [ 829.498189][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.512738][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.521786][T12180] bridge_slave_1: entered allmulticast mode [ 829.536292][T12180] bridge_slave_1: entered promiscuous mode [ 829.611736][ T5838] Bluetooth: hci5: command tx timeout [ 829.741015][T12378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.133433][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.347611][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.434603][T12422] delete_channel: no stack [ 830.994988][T12180] team0: Port device team_slave_0 added [ 831.019055][T12260] chnl_net:caif_netlink_parms(): no params data found [ 831.136535][T12378] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.458157][T12180] team0: Port device team_slave_1 added [ 831.665723][T11595] kernel write not supported for file bpf-prog (pid: 11595 comm: kworker/0:7) [ 831.692461][ T5838] Bluetooth: hci5: command tx timeout [ 831.754927][T12378] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.893099][T12180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.900107][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.127752][T12180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.168708][T12180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.178911][T12180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.217486][T12180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.891522][T12378] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.917751][T12378] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.003379][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.018208][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.032436][T12260] bridge_slave_0: entered allmulticast mode [ 833.042410][T12260] bridge_slave_0: entered promiscuous mode [ 833.176032][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.196311][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.219942][T12260] bridge_slave_1: entered allmulticast mode [ 833.247864][T12260] bridge_slave_1: entered promiscuous mode [ 833.263712][T12334] chnl_net:caif_netlink_parms(): no params data found [ 833.293610][T12180] hsr_slave_0: entered promiscuous mode [ 833.300961][T12180] hsr_slave_1: entered promiscuous mode [ 833.308473][T12180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.316366][T12180] Cannot create hsr debugfs directory [ 833.784011][ T5838] Bluetooth: hci5: command tx timeout [ 834.496989][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.545608][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.991162][T12471] vlan2: entered allmulticast mode [ 835.022521][T12471] bridge_slave_0: entered allmulticast mode [ 835.647146][T12260] team0: Port device team_slave_0 added [ 835.686668][T12260] team0: Port device team_slave_1 added [ 836.198605][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.218498][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.992949][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.301908][ T30] audit: type=1326 audit(1746257927.507:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 837.421571][ T30] audit: type=1326 audit(1746257927.507:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 837.492674][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.542286][ T30] audit: type=1326 audit(1746257927.517:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 837.654122][ T30] audit: type=1326 audit(1746257927.517:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 838.515719][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.530244][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.593680][ T30] audit: type=1326 audit(1746257927.517:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 838.606301][T12334] bridge_slave_0: entered allmulticast mode [ 838.674575][ T30] audit: type=1326 audit(1746257927.517:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 838.709869][T12525] delete_channel: no stack [ 838.717606][T12334] bridge_slave_0: entered promiscuous mode [ 838.828693][T12334] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.946572][ T30] audit: type=1326 audit(1746257927.517:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 838.969464][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.010083][T12334] bridge_slave_1: entered allmulticast mode [ 839.018719][T12334] bridge_slave_1: entered promiscuous mode [ 839.039158][ T30] audit: type=1326 audit(1746257927.557:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 839.101654][ T30] audit: type=1326 audit(1746257927.567:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 839.124963][T12531] netlink: '+}[@': attribute type 30 has an invalid length. [ 839.132736][ T30] audit: type=1326 audit(1746257927.567:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.5.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 839.208565][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.259055][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.445508][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.536513][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.805206][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.898227][T12334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.095400][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.156070][T12334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.397220][T12260] hsr_slave_0: entered promiscuous mode [ 841.418907][T12260] hsr_slave_1: entered promiscuous mode [ 841.425473][T12260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.481735][T12260] Cannot create hsr debugfs directory [ 841.594114][T12556] loop5: detected capacity change from 0 to 512 [ 841.601259][T12556] ext4: Unknown parameter 'seclabel' [ 841.722920][T12556] loop5: detected capacity change from 0 to 512 [ 842.828413][T12556] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1629: bg 0: block 248: padding at end of block bitmap is not set [ 842.854922][T12556] __quota_error: 2 callbacks suppressed [ 842.854945][T12556] Quota error (device loop5): write_blk: dquota write failed [ 842.939595][T12556] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 842.959709][T12556] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1629: Failed to acquire dquot type 1 [ 843.001742][T12556] EXT4-fs (loop5): 1 truncate cleaned up [ 843.009580][T12556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.023308][T12556] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.110624][T12556] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.189330][T12334] team0: Port device team_slave_0 added [ 844.474951][T12334] team0: Port device team_slave_1 added [ 844.836678][T12594] loop5: detected capacity change from 0 to 2048 [ 845.023862][T12594] EXT4-fs: Ignoring removed oldalloc option [ 845.196425][T12594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 845.254844][T12334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.284917][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.352040][T12594] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.1636: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 845.376877][T12334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.421583][T12594] EXT4-fs (loop5): Remounting filesystem read-only [ 845.568903][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.943469][T12334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.960519][T12334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.002523][T12334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.143117][T12622] delete_channel: no stack [ 846.269775][T12623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1640'. [ 846.598472][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 846.629562][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'. [ 846.897129][T12334] hsr_slave_0: entered promiscuous mode [ 846.916778][T12334] hsr_slave_1: entered promiscuous mode [ 846.973332][T12334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.002288][T12334] Cannot create hsr debugfs directory [ 847.446377][ T83] bridge_slave_1: left allmulticast mode [ 847.459318][ T83] bridge_slave_1: left promiscuous mode [ 847.480446][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.518853][ T83] bridge_slave_0: left allmulticast mode [ 847.525471][ T83] bridge_slave_0: left promiscuous mode [ 847.533474][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.570387][ T83] bridge_slave_1: left allmulticast mode [ 847.587073][ T83] bridge_slave_1: left promiscuous mode [ 847.609674][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.662934][ T83] bridge_slave_0: left allmulticast mode [ 847.668608][ T83] bridge_slave_0: left promiscuous mode [ 847.690386][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.964497][ T30] audit: type=1326 audit(1746257938.197:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.083788][ T30] audit: type=1326 audit(1746257938.197:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.202383][ T30] audit: type=1326 audit(1746257938.227:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.306597][ T30] audit: type=1326 audit(1746257938.227:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.379811][ T30] audit: type=1326 audit(1746257938.227:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.527965][ T30] audit: type=1326 audit(1746257938.227:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.678394][ T30] audit: type=1326 audit(1746257938.237:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 848.755960][ T30] audit: type=1326 audit(1746257938.237:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 849.011950][ T30] audit: type=1326 audit(1746257938.247:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 849.034561][ T30] audit: type=1326 audit(1746257938.247:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12650 comm="syz.5.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 849.266452][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1653'. [ 850.766728][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.782374][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.793871][ T83] bond0 (unregistering): Released all slaves [ 850.989302][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.032110][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.074601][ T83] bond0 (unregistering): Released all slaves [ 851.183432][T12676] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 851.204897][T12676] gretap2: entered promiscuous mode [ 851.210146][T12676] gretap2: entered allmulticast mode [ 851.261800][T12675] IPv6: NLM_F_CREATE should be specified when creating new route [ 851.509029][T12697] loop5: detected capacity change from 0 to 1024 [ 851.518565][T12699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 851.539481][T12697] EXT4-fs: Ignoring removed oldalloc option [ 851.554182][T12697] EXT4-fs (loop5): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 851.671018][T12697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.038966][T12180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.219991][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.327649][T12180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 852.341113][T12180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 852.421938][T12720] delete_channel: no stack [ 852.625566][ T83] hsr_slave_0: left promiscuous mode [ 852.727160][ T83] hsr_slave_1: left promiscuous mode [ 852.737351][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.908081][T12727] loop1: detected capacity change from 0 to 512 [ 853.722377][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.751709][T12727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.765053][T12727] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.834244][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1667'. [ 854.849725][T12726] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'. [ 855.587750][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.618687][ T83] hsr_slave_0: left promiscuous mode [ 855.685350][ T83] hsr_slave_1: left promiscuous mode [ 855.772369][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.779842][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.852643][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.860102][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.937391][T12732] loop1: detected capacity change from 0 to 512 [ 856.068091][ T83] veth0_macvtap: left promiscuous mode [ 856.101839][ T83] veth1_vlan: left promiscuous mode [ 856.107220][ T83] veth0_vlan: left promiscuous mode [ 856.142105][ T83] veth1_macvtap: left promiscuous mode [ 856.147680][ T83] veth0_macvtap: left promiscuous mode [ 856.737671][ T83] veth1_vlan: left promiscuous mode [ 856.744526][ T83] veth0_vlan: left promiscuous mode [ 858.383498][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 859.246904][T12759] loop1: detected capacity change from 0 to 512 [ 859.383982][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1680'. [ 859.517714][T12764] loop1: detected capacity change from 0 to 2048 [ 859.608658][T12764] loop1: p1 < > p3 [ 859.732280][T12764] loop1: p3 size 134217728 extends beyond EOD, truncated [ 859.844758][ T83] team0 (unregistering): Port device team_slave_1 removed [ 860.001402][ T83] team0 (unregistering): Port device team_slave_0 removed [ 860.192988][T12774] delete_channel: no stack [ 861.986535][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 862.801878][T12789] loop1: detected capacity change from 0 to 512 [ 862.819968][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 862.819990][ T30] audit: type=1326 audit(1746257953.047:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 863.028920][ T30] audit: type=1326 audit(1746257953.047:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 863.129093][ T30] audit: type=1326 audit(1746257953.047:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 863.239921][ T83] team0 (unregistering): Port device team_slave_1 removed [ 863.355554][ T83] team0 (unregistering): Port device team_slave_0 removed [ 863.756325][T12798] overlayfs: failed to resolve './file0': -2 [ 865.870968][T12808] netlink: 'syz.2.1696': attribute type 10 has an invalid length. [ 865.895797][T12808] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1696'. [ 866.335407][T12180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 866.365242][T12808] team0: entered promiscuous mode [ 866.383885][T12808] team_slave_0: entered promiscuous mode [ 866.409488][T12808] team_slave_1: entered promiscuous mode [ 866.435029][T12808] bridge0: port 3(team0) entered blocking state [ 866.460556][T12808] bridge0: port 3(team0) entered disabled state [ 866.489645][T12808] team0: entered allmulticast mode [ 866.517079][T12808] team_slave_0: entered allmulticast mode [ 866.536105][T12808] team_slave_1: entered allmulticast mode [ 866.563322][T12808] bridge0: port 3(team0) entered blocking state [ 866.569766][T12808] bridge0: port 3(team0) entered forwarding state [ 866.955528][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1699'. [ 867.535658][ T30] audit: type=1326 audit(1746257957.767:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 867.688444][ T30] audit: type=1326 audit(1746257957.787:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 867.818881][ T30] audit: type=1326 audit(1746257957.787:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 867.900682][T12834] netlink: '+}[@': attribute type 30 has an invalid length. [ 868.043751][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.136146][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.319532][T12843] overlayfs: failed to resolve './file0': -2 [ 869.078814][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.086070][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.204459][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.211707][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.625121][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 869.657458][T12858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1707'. [ 869.733888][T12858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1707'. [ 870.539496][T12180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.650365][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 871.491580][T12260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 871.500195][T12887] loop5: detected capacity change from 0 to 512 [ 871.544975][T12260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 871.578748][ T30] audit: type=1326 audit(1746257961.807:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12886 comm="syz.5.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 871.631514][T12260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 871.704412][ T30] audit: type=1326 audit(1746257961.817:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12886 comm="syz.5.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 871.716301][T12260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 871.791490][ T30] audit: type=1326 audit(1746257961.817:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12886 comm="syz.5.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 871.981232][T12900] netlink: '+}[@': attribute type 30 has an invalid length. [ 872.320107][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1714'. [ 872.395338][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1714'. [ 872.439747][T12910] overlayfs: failed to resolve './file0': -2 [ 872.932613][T12334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 873.051699][T12334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 873.223414][T12334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 873.312117][T12334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 873.927660][T10158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.936584][T10158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.944893][T10158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.954217][T10158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.973444][T10158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 874.058674][T12260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.488882][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.582077][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 874.734574][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.741833][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.882552][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.889796][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.226650][T12961] netlink: '+}[@': attribute type 30 has an invalid length. [ 876.013122][ T5838] Bluetooth: hci0: command tx timeout [ 876.383445][T12978] loop5: detected capacity change from 0 to 2048 [ 876.428261][T12978] EXT4-fs: inline encryption not supported [ 876.435159][T12985] fuse: Unknown parameter 'fd0x0000000000000004' [ 876.462845][T12978] EXT4-fs: Ignoring removed mblk_io_submit option [ 876.469350][T12978] ext4: Unknown parameter 'audit' [ 876.485268][T12334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.510913][T12932] chnl_net:caif_netlink_parms(): no params data found [ 876.570619][ T5979] bridge_slave_1: left allmulticast mode [ 876.576536][ T5979] bridge_slave_1: left promiscuous mode [ 876.585686][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.653676][ T5979] bridge_slave_0: left allmulticast mode [ 876.668332][ T5979] bridge_slave_0: left promiscuous mode [ 876.685104][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.336542][T13006] syz.5.1739 uses obsolete (PF_INET,SOCK_PACKET) [ 878.128601][ T5838] Bluetooth: hci0: command tx timeout [ 878.558988][T13019] loop1: detected capacity change from 0 to 512 [ 878.646273][ T30] audit: type=1326 audit(1746257968.887:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 878.741525][ T30] audit: type=1326 audit(1746257968.907:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 878.807755][ T30] audit: type=1326 audit(1746257968.907:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 878.921937][T13024] netlink: '+}[@': attribute type 30 has an invalid length. [ 879.018137][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.051089][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.083750][ T5979] bond0 (unregistering): Released all slaves [ 879.196301][ T30] audit: type=1326 audit(1746257969.427:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 879.298181][T10158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 879.312603][ T30] audit: type=1326 audit(1746257969.457:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 879.336315][T10158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 879.371684][T10158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 879.384049][ T30] audit: type=1326 audit(1746257969.457:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 879.406693][ T30] audit: type=1326 audit(1746257969.457:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3da838e9a3 code=0x7ffc0000 [ 879.432105][ T30] audit: type=1326 audit(1746257969.467:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3da838d41f code=0x7ffc0000 [ 879.455409][ T30] audit: type=1326 audit(1746257969.527:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3da838e9f7 code=0x7ffc0000 [ 879.477825][ T30] audit: type=1326 audit(1746257969.547:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13029 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3da838d2d0 code=0x7ffc0000 [ 879.513378][T10158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 879.525450][T10158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 879.857421][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.864098][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.960659][ T5979] hsr_slave_0: left promiscuous mode [ 879.990089][ T5979] hsr_slave_1: left promiscuous mode [ 879.997082][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.033408][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.177148][ T5838] Bluetooth: hci0: command tx timeout [ 880.269854][T13053] loop5: detected capacity change from 0 to 128 [ 880.283518][T13053] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 880.302419][T13053] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 881.612061][ T5838] Bluetooth: hci6: command tx timeout [ 882.482297][ T5838] Bluetooth: hci0: command tx timeout [ 883.150950][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 883.701613][ T5838] Bluetooth: hci6: command tx timeout [ 883.889504][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 885.030956][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.052037][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.075939][T12932] bridge_slave_0: entered allmulticast mode [ 885.182830][T12932] bridge_slave_0: entered promiscuous mode [ 885.226716][T13105] loop5: detected capacity change from 0 to 8192 [ 885.245205][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.275968][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.285198][T13105] loop5: p1 p2 p3 p4 [ 885.289342][T13105] loop5: p1 size 108922248 extends beyond EOD, truncated [ 885.314778][T13105] loop5: p2 start 861536256 is beyond EOD, truncated [ 885.324847][T12932] bridge_slave_1: entered allmulticast mode [ 885.331847][T13105] loop5: p3 start 851968 is beyond EOD, truncated [ 885.348518][T13105] loop5: p4 size 65536 extends beyond EOD, truncated [ 885.353304][T12932] bridge_slave_1: entered promiscuous mode [ 885.404653][T13108] netlink: 'syz.1.1760': attribute type 4 has an invalid length. [ 885.485378][T13109] netlink: 'syz.1.1760': attribute type 4 has an invalid length. [ 885.572963][T10158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 885.589258][T10158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 885.606556][T10158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 885.627927][T10158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 885.644532][T10158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 885.687846][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 885.687872][ T30] audit: type=1326 audit(1746257975.917:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.5.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 885.723127][ T30] audit: type=1326 audit(1746257975.917:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.5.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 885.745882][ T30] audit: type=1326 audit(1746257975.917:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.5.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 885.762307][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.773378][ T30] audit: type=1326 audit(1746257975.917:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.5.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 885.781932][ T5838] Bluetooth: hci6: command tx timeout [ 885.884522][ T30] audit: type=1326 audit(1746257975.917:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.5.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99938e969 code=0x7ffc0000 [ 885.908241][ T30] audit: type=1326 audit(1746257976.117:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 885.932140][ T30] audit: type=1326 audit(1746257976.117:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 885.960648][ T30] audit: type=1326 audit(1746257976.117:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 885.990090][ T30] audit: type=1326 audit(1746257976.117:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 886.168158][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.340582][ T30] audit: type=1326 audit(1746257976.117:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13115 comm="syz.1.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f4f6718e969 code=0x7ffc0000 [ 886.372382][T13122] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 886.489314][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'. [ 887.399055][T12932] team0: Port device team_slave_0 added [ 887.480160][T12932] team0: Port device team_slave_1 added [ 887.701776][ T5838] Bluetooth: hci2: command tx timeout [ 887.852050][ T5838] Bluetooth: hci6: command tx timeout [ 887.939391][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.969581][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.009723][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.069292][T13155] netlink: 'syz.1.1771': attribute type 4 has an invalid length. [ 888.095163][T13155] netlink: 'syz.1.1771': attribute type 4 has an invalid length. [ 888.115575][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.132948][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.191467][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.493191][T13170] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 888.660509][T12932] hsr_slave_0: entered promiscuous mode [ 888.680820][T12932] hsr_slave_1: entered promiscuous mode [ 889.772514][ T5838] Bluetooth: hci2: command tx timeout [ 890.219856][T13032] chnl_net:caif_netlink_parms(): no params data found [ 890.509578][T13213] netlink: 'syz.5.1785': attribute type 4 has an invalid length. [ 890.558829][T13208] netlink: 'syz.5.1785': attribute type 4 has an invalid length. [ 890.658704][T13219] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 891.751747][T13032] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.843973][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 891.860167][ T5838] Bluetooth: hci2: command tx timeout [ 892.528467][T13032] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.536886][T13032] bridge_slave_0: entered allmulticast mode [ 892.545617][T13032] bridge_slave_0: entered promiscuous mode [ 892.686116][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.694654][T13032] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.711635][T13032] bridge_slave_1: entered allmulticast mode [ 892.719680][T13032] bridge_slave_1: entered promiscuous mode [ 892.998713][T13110] chnl_net:caif_netlink_parms(): no params data found [ 893.200965][T13032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.233122][T13032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.421632][T13267] netlink: 'syz.2.1797': attribute type 4 has an invalid length. [ 893.473334][T13268] netlink: 'syz.2.1797': attribute type 4 has an invalid length. [ 893.568014][T13032] team0: Port device team_slave_0 added [ 893.716312][T13032] team0: Port device team_slave_1 added [ 893.931673][ T5838] Bluetooth: hci2: command tx timeout [ 894.064050][T13032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.101437][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.135457][T13032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.247078][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.263924][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.283228][T13110] bridge_slave_0: entered allmulticast mode [ 894.300795][T13110] bridge_slave_0: entered promiscuous mode [ 894.307086][T13280] nft_compat: unsupported protocol 1 [ 894.407257][T13032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.436141][T13032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.488768][T13032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.530770][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.594097][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 894.691288][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.717947][T13110] bridge_slave_1: entered allmulticast mode [ 894.747654][T13110] bridge_slave_1: entered promiscuous mode [ 895.845104][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.960144][T13304] netlink: 'syz.1.1807': attribute type 4 has an invalid length. [ 896.013031][T13307] netlink: 'syz.1.1807': attribute type 4 has an invalid length. [ 896.096538][T13032] hsr_slave_0: entered promiscuous mode [ 896.125556][T13032] hsr_slave_1: entered promiscuous mode [ 896.135024][T13032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.161513][T13032] Cannot create hsr debugfs directory [ 896.193403][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.337056][T12932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 896.535886][T12932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 897.422001][T13110] team0: Port device team_slave_0 added [ 897.468901][T13110] team0: Port device team_slave_1 added [ 897.494258][T12932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 897.545041][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 897.747767][T13335] delete_channel: no stack [ 897.819405][T12932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 898.115258][ T5979] bridge_slave_1: left allmulticast mode [ 898.120961][ T5979] bridge_slave_1: left promiscuous mode [ 898.139914][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.425753][ T5979] bridge_slave_0: left allmulticast mode [ 898.436142][ T5979] bridge_slave_0: left promiscuous mode [ 898.445368][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.461049][ T5979] bridge_slave_1: left allmulticast mode [ 898.469997][ T5979] bridge_slave_1: left promiscuous mode [ 898.480565][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.497863][ T5979] bridge_slave_0: left allmulticast mode [ 898.513330][ T5979] bridge_slave_0: left promiscuous mode [ 898.519268][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.366005][T13354] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 900.442811][T13355] netlink: 'syz.1.1819': attribute type 4 has an invalid length. [ 900.596436][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.628641][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.650441][ T5979] bond0 (unregistering): Released all slaves [ 900.899610][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.920605][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.940662][ T5979] bond0 (unregistering): Released all slaves [ 901.208403][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.261862][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.352996][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.376322][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.391640][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.426316][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.559865][T13363] loop1: detected capacity change from 0 to 512 [ 901.582535][T13363] EXT4-fs: inline encryption not supported [ 901.582779][ T5979] hsr_slave_0: left promiscuous mode [ 901.588496][T13363] ext4: Unknown parameter 'nouser_xattr' [ 901.630361][ T5979] hsr_slave_1: left promiscuous mode [ 901.912537][T13363] loop1: detected capacity change from 0 to 512 [ 901.922722][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.933753][T13363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 901.946067][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.957175][T13363] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1821: corrupted xattr entries [ 901.968970][T13363] EXT4-fs (loop1): Remounting filesystem read-only [ 901.976469][T13363] EXT4-fs (loop1): 1 truncate cleaned up [ 901.985031][T13363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.090343][ T5979] hsr_slave_0: left promiscuous mode [ 902.118587][ T5979] hsr_slave_1: left promiscuous mode [ 902.139616][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.159342][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.178330][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.232228][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 903.232276][ T30] audit: type=1326 audit(1746257993.457:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.411735][ T30] audit: type=1326 audit(1746257993.497:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.474936][ T30] audit: type=1326 audit(1746257993.607:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.544683][ T30] audit: type=1326 audit(1746257993.607:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.587727][ T30] audit: type=1326 audit(1746257993.607:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.618229][ T30] audit: type=1326 audit(1746257993.607:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.649668][ T30] audit: type=1326 audit(1746257993.607:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.683403][ T30] audit: type=1326 audit(1746257993.607:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.707719][ T30] audit: type=1326 audit(1746257993.607:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.738681][ T30] audit: type=1326 audit(1746257993.607:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da838e969 code=0x7ffc0000 [ 903.876528][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 903.945275][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 903.992807][T13395] random: crng reseeded on system resumption [ 904.776551][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 904.856957][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 904.902299][T13405] netlink: 'syz.1.1830': attribute type 4 has an invalid length. [ 905.280145][T13388] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1826'. [ 905.810107][T13110] hsr_slave_0: entered promiscuous mode [ 905.853315][T13110] hsr_slave_1: entered promiscuous mode [ 906.427102][T13419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 906.682870][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.719713][T13110] Cannot create hsr debugfs directory [ 909.039324][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 909.049801][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1838'. [ 909.655236][T13440] loop1: detected capacity change from 0 to 2048 [ 909.790458][T13440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.854578][T13447] loop5: detected capacity change from 0 to 256 [ 910.043355][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.118897][T13452] netlink: 'syz.2.1841': attribute type 4 has an invalid length. [ 910.243711][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.435400][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.503217][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.510420][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.453227][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.461524][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.801183][T13032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 911.887323][T13032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.078963][T13032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 912.131801][T13032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 913.342462][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 913.377198][T13494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1849'. [ 913.675509][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 914.010269][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.084027][T13511] delete_channel: no stack [ 914.091130][T13032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.209750][T13032] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.291345][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.298580][T13084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.726951][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.734194][ T9738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.958559][T13517] netlink: 'syz.1.1853': attribute type 4 has an invalid length. [ 915.038793][T13110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.147609][T13110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.305578][T13110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.388709][T13110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 917.383274][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.402854][T12932] veth0_vlan: entered promiscuous mode [ 917.514112][T12932] veth1_vlan: entered promiscuous mode [ 917.537839][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.606251][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.613471][T13084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.795065][T12932] veth0_macvtap: entered promiscuous mode [ 917.864662][T12932] veth1_macvtap: entered promiscuous mode [ 919.783782][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.790983][T13084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.197378][T13032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.218656][T12932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.964804][T12932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.326572][T12932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.337445][T12932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.349076][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.230012][T12932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.251562][T12932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.262139][T12932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.281788][T12932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.095747][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.264190][T12932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.286302][T12932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.326665][T12932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.359024][T12932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.610374][T13032] veth0_vlan: entered promiscuous mode [ 925.721322][T13602] delete_channel: no stack [ 925.996539][T13032] veth1_vlan: entered promiscuous mode [ 926.022454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.053410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.224931][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.279750][ T9738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.311640][ T9738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.359610][T13032] veth0_macvtap: entered promiscuous mode [ 926.419123][T13032] veth1_macvtap: entered promiscuous mode [ 926.599702][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.690340][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.905737][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.916311][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.943193][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.187530][T13616] loop5: detected capacity change from 0 to 512 [ 927.929252][T13616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.941971][T13616] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.947584][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.951461][T13619] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 928.952383][T13032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.967130][T13110] veth0_vlan: entered promiscuous mode [ 929.901301][T13110] veth1_vlan: entered promiscuous mode [ 929.903853][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.987725][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.008520][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.225877][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.237012][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.247850][T13032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.261063][T13032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.274333][T13032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.313593][T13032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.362164][T13032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.370937][T13032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.427969][T13032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.833967][T13110] veth0_macvtap: entered promiscuous mode [ 932.016361][T13110] veth1_macvtap: entered promiscuous mode [ 933.311861][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.319735][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.985416][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.039874][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.081598][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.128375][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.187050][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.316260][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.326158][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.337578][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.353344][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.410374][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.427495][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.437880][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.448658][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.459121][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.470170][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.480299][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.491088][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.573834][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.663929][T13661] netlink: '+}[@': attribute type 30 has an invalid length. [ 935.803584][T13110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.813563][T13664] loop4: detected capacity change from 0 to 256 [ 935.822079][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.842762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.853123][T13110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.876224][T13110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.899183][T13110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.923188][T13664] FAT-fs (loop4): Directory bread(block 64) failed [ 935.970292][T13664] FAT-fs (loop4): Directory bread(block 65) failed [ 936.225770][T13664] FAT-fs (loop4): Directory bread(block 66) failed [ 936.232694][T13664] FAT-fs (loop4): Directory bread(block 67) failed [ 936.242157][T13664] FAT-fs (loop4): Directory bread(block 68) failed [ 936.249226][T13664] FAT-fs (loop4): Directory bread(block 69) failed [ 936.436256][T13664] FAT-fs (loop4): Directory bread(block 70) failed [ 936.629710][T13664] FAT-fs (loop4): Directory bread(block 71) failed [ 936.681592][T13664] FAT-fs (loop4): Directory bread(block 72) failed [ 936.688187][T13664] FAT-fs (loop4): Directory bread(block 73) failed [ 937.104571][T12932] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 937.145877][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.199120][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.221428][T12932] FAT-fs (loop4): Filesystem has been set read-only [ 937.658534][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.691005][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.377726][ T83] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.436026][ T83] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.708679][ T83] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.302466][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.309094][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.542775][T13724] delete_channel: no stack [ 941.979612][ T83] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.566980][ T83] bridge_slave_1: left allmulticast mode [ 942.580319][ T83] bridge_slave_1: left promiscuous mode [ 942.714408][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.789884][ T83] bridge_slave_0: left allmulticast mode [ 942.827328][ T83] bridge_slave_0: left promiscuous mode [ 942.868972][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.599012][T13747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 943.610366][T13747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 943.618878][T13747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 943.804544][T13747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 943.845520][T13747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.997244][T13758] loop1: detected capacity change from 0 to 256 [ 945.523077][T13758] FAT-fs (loop1): Directory bread(block 64) failed [ 945.555685][T13758] FAT-fs (loop1): Directory bread(block 65) failed [ 945.641091][T13758] FAT-fs (loop1): Directory bread(block 66) failed [ 945.667941][T13758] FAT-fs (loop1): Directory bread(block 67) failed [ 945.678600][T13758] FAT-fs (loop1): Directory bread(block 68) failed [ 945.690696][T13758] FAT-fs (loop1): Directory bread(block 69) failed [ 945.708035][T13758] FAT-fs (loop1): Directory bread(block 70) failed [ 945.741492][T13758] FAT-fs (loop1): Directory bread(block 71) failed [ 945.786091][T13758] FAT-fs (loop1): Directory bread(block 72) failed [ 945.827873][T13758] FAT-fs (loop1): Directory bread(block 73) failed [ 945.932814][ T5838] Bluetooth: hci0: command tx timeout [ 946.371771][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.471061][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.508577][ T83] bond0 (unregistering): Released all slaves [ 948.012083][ T5838] Bluetooth: hci0: command tx timeout [ 950.091642][ T5838] Bluetooth: hci0: command tx timeout [ 951.790608][T13817] loop3: detected capacity change from 0 to 512 [ 951.926822][T13817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.940408][T13817] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.524969][ T5838] Bluetooth: hci0: command tx timeout [ 952.618303][T13820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 953.611359][ T83] hsr_slave_0: left promiscuous mode [ 953.767672][ T83] hsr_slave_1: left promiscuous mode [ 953.806336][T13823] loop5: detected capacity change from 0 to 1024 [ 953.820820][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.834822][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.853221][T13823] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 953.891582][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.903503][T13823] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 953.920463][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.193748][T13823] JBD2: no valid journal superblock found [ 954.208309][ T83] veth1_macvtap: left promiscuous mode [ 954.221940][T13823] EXT4-fs (loop5): Could not load journal inode [ 954.278893][ T83] veth0_macvtap: left promiscuous mode [ 954.311709][ T83] veth1_vlan: left promiscuous mode [ 954.317092][ T83] veth0_vlan: left promiscuous mode [ 959.962166][T13876] loop1: detected capacity change from 0 to 256 [ 960.009980][T13876] FAT-fs (loop1): Directory bread(block 64) failed [ 960.024330][T13876] FAT-fs (loop1): Directory bread(block 65) failed [ 960.031157][T13876] FAT-fs (loop1): Directory bread(block 66) failed [ 960.050048][T13876] FAT-fs (loop1): Directory bread(block 67) failed [ 960.066917][T13876] FAT-fs (loop1): Directory bread(block 68) failed [ 960.075900][T13876] FAT-fs (loop1): Directory bread(block 69) failed [ 960.082452][ T83] team0 (unregistering): Port device team_slave_1 removed [ 960.109088][T13876] FAT-fs (loop1): Directory bread(block 70) failed [ 960.119059][T13876] FAT-fs (loop1): Directory bread(block 71) failed [ 960.130344][T13876] FAT-fs (loop1): Directory bread(block 72) failed [ 960.148302][T13876] FAT-fs (loop1): Directory bread(block 73) failed [ 960.158772][ T83] team0 (unregistering): Port device team_slave_0 removed [ 962.469196][T13745] chnl_net:caif_netlink_parms(): no params data found [ 962.490554][T13032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.087821][T13745] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.163209][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.243839][T13745] bridge_slave_0: entered allmulticast mode [ 966.423065][T13745] bridge_slave_0: entered promiscuous mode [ 966.633304][T13745] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.640491][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.710361][T13745] bridge_slave_1: entered allmulticast mode [ 966.745808][T13745] bridge_slave_1: entered promiscuous mode [ 966.989145][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.059909][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.090565][T13923] loop0: detected capacity change from 0 to 512 [ 967.162822][T13923] EXT4-fs: inline encryption not supported [ 967.180777][T13923] ext4: Unknown parameter 'nouser_xattr' [ 967.407821][T13927] loop5: detected capacity change from 0 to 1024 [ 967.917900][T13927] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 968.214591][T13927] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 968.333679][T13927] JBD2: no valid journal superblock found [ 968.346319][T13931] loop0: detected capacity change from 0 to 512 [ 968.361488][T13927] EXT4-fs (loop5): Could not load journal inode [ 968.411609][T13931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 968.498660][T13931] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.1935: corrupted xattr entries [ 968.567165][T13931] EXT4-fs (loop0): Remounting filesystem read-only [ 968.615117][T13931] EXT4-fs (loop0): 1 truncate cleaned up [ 968.638989][T13745] team0: Port device team_slave_0 added [ 968.685314][T13931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.713649][T13745] team0: Port device team_slave_1 added [ 969.106612][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.161553][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.871607][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.934549][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.973888][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.058902][T13110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.113461][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.759367][T13745] hsr_slave_0: entered promiscuous mode [ 971.588111][T13745] hsr_slave_1: entered promiscuous mode [ 972.026956][T13960] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 972.055924][T13960] netlink: '+}[@': attribute type 30 has an invalid length. [ 972.574983][T13965] loop1: detected capacity change from 0 to 256 [ 972.795356][T13965] FAT-fs (loop1): Directory bread(block 64) failed [ 972.802967][T13965] FAT-fs (loop1): Directory bread(block 65) failed [ 972.809591][T13965] FAT-fs (loop1): Directory bread(block 66) failed [ 972.852749][T13965] FAT-fs (loop1): Directory bread(block 67) failed [ 972.888308][T13965] FAT-fs (loop1): Directory bread(block 68) failed [ 972.918113][T13965] FAT-fs (loop1): Directory bread(block 69) failed [ 972.950847][T13965] FAT-fs (loop1): Directory bread(block 70) failed [ 972.981816][T13965] FAT-fs (loop1): Directory bread(block 71) failed [ 973.000890][T13965] FAT-fs (loop1): Directory bread(block 72) failed [ 973.027606][T13965] FAT-fs (loop1): Directory bread(block 73) failed [ 974.654640][T13980] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1950'. [ 975.289969][T13745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 975.349241][T13745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 975.503508][T13745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 975.592622][T13745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 975.720278][T13987] loop3: detected capacity change from 0 to 512 [ 975.799027][T13987] EXT4-fs: inline encryption not supported [ 975.862962][T13987] ext4: Unknown parameter 'nouser_xattr' [ 975.990085][T13745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.136382][T13745] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.265776][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.273082][ T9738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.323035][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.330256][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.476176][T13997] loop3: detected capacity change from 0 to 512 [ 976.571622][T13997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 976.712343][T13997] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.1954: corrupted xattr entries [ 976.831313][T13997] EXT4-fs (loop3): Remounting filesystem read-only [ 976.923596][T13997] EXT4-fs (loop3): 1 truncate cleaned up [ 977.018006][T13997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.768818][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.923679][T14016] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 977.962365][T14020] loop1: detected capacity change from 0 to 256 [ 977.968822][T14016] netlink: '+}[@': attribute type 30 has an invalid length. [ 978.206784][T14020] FAT-fs (loop1): Directory bread(block 64) failed [ 978.225320][T14020] FAT-fs (loop1): Directory bread(block 65) failed [ 978.255747][T14020] FAT-fs (loop1): Directory bread(block 66) failed [ 978.291585][T14020] FAT-fs (loop1): Directory bread(block 67) failed [ 978.364467][T14020] FAT-fs (loop1): Directory bread(block 68) failed [ 978.371041][T14020] FAT-fs (loop1): Directory bread(block 69) failed [ 978.446413][T14020] FAT-fs (loop1): Directory bread(block 70) failed [ 978.501609][T14020] FAT-fs (loop1): Directory bread(block 71) failed [ 978.548590][T14020] FAT-fs (loop1): Directory bread(block 72) failed [ 978.598049][T14020] FAT-fs (loop1): Directory bread(block 73) failed [ 980.010234][T14047] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1966'. [ 980.727367][T13745] veth0_vlan: entered promiscuous mode [ 980.749876][T13745] veth1_vlan: entered promiscuous mode [ 980.802996][T13745] veth0_macvtap: entered promiscuous mode [ 980.825151][T13745] veth1_macvtap: entered promiscuous mode [ 980.942740][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.014676][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.070110][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.133307][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.180019][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.190651][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.200530][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.212123][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.223813][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.274452][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.331521][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.377522][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.421577][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.463161][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.492882][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.540855][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.580099][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.626865][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.664654][T13745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.696163][T13745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.769324][T13745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.797695][T13745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.059604][T14066] loop0: detected capacity change from 0 to 1024 [ 982.106666][T14066] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 982.151775][T14066] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 982.169392][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.239317][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.246759][T14066] JBD2: no valid journal superblock found [ 982.293489][T14066] EXT4-fs (loop0): Could not load journal inode [ 982.381833][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.399870][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.859043][T14096] loop6: detected capacity change from 0 to 512 [ 983.950840][T14096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.963922][T14096] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.433224][T13745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.535944][T14116] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1981'. [ 991.050346][T14177] loop0: detected capacity change from 0 to 256 [ 991.229592][T14177] FAT-fs (loop0): Directory bread(block 64) failed [ 991.281218][T14177] FAT-fs (loop0): Directory bread(block 65) failed [ 991.421591][T14177] FAT-fs (loop0): Directory bread(block 66) failed [ 991.428183][T14177] FAT-fs (loop0): Directory bread(block 67) failed [ 991.545684][T14177] FAT-fs (loop0): Directory bread(block 68) failed [ 991.601653][T14177] FAT-fs (loop0): Directory bread(block 69) failed [ 991.619275][T14177] FAT-fs (loop0): Directory bread(block 70) failed [ 991.660107][T14177] FAT-fs (loop0): Directory bread(block 71) failed [ 991.694801][T14186] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1996'. [ 991.775388][T14177] FAT-fs (loop0): Directory bread(block 72) failed [ 991.939015][T14177] FAT-fs (loop0): Directory bread(block 73) failed [ 994.095991][T13993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.101505][ T9715] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 994.334002][ T9715] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 994.364801][ T9715] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 994.464977][ T9715] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 994.538819][T13747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 994.548683][T13747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 994.557552][T13747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 994.565406][ T9715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.574424][T13747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 994.619200][T13747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.934227][T13747] Bluetooth: hci5: command tx timeout [ 997.748762][T14209] chnl_net:caif_netlink_parms(): no params data found [ 998.740832][T14248] netlink: '+}[@': attribute type 30 has an invalid length. [ 998.831929][T14209] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.839171][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.896743][T14209] bridge_slave_0: entered allmulticast mode [ 998.950584][T14209] bridge_slave_0: entered promiscuous mode [ 998.971497][T13747] Bluetooth: hci5: command tx timeout [ 999.121642][T14209] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.181710][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.251681][T14209] bridge_slave_1: entered allmulticast mode [ 999.290200][T14209] bridge_slave_1: entered promiscuous mode [ 1000.157349][ T9715] usb 2-1: can't set config #27, error -110 [ 1000.268077][ T9738] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.572151][T14209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.629407][T11595] usb 2-1: USB disconnect, device number 16 [ 1000.646618][T14187] delete_channel: no stack [ 1001.160748][T14269] netlink: 300 bytes leftover after parsing attributes in process `syz.6.2012'. [ 1001.176679][T13747] Bluetooth: hci5: command tx timeout [ 1001.810025][ T9738] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.854821][T14209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.024115][T14209] team0: Port device team_slave_0 added [ 1002.085862][T14209] team0: Port device team_slave_1 added [ 1002.177764][T14279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1002.180524][T14277] loop6: detected capacity change from 0 to 1024 [ 1002.285462][ T9738] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.311043][T14277] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1002.350738][T14277] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1002.377982][T14277] JBD2: no valid journal superblock found [ 1002.407487][T14277] EXT4-fs (loop6): Could not load journal inode [ 1002.700407][ T9738] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.752198][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.758548][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.903215][T14209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.910216][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.950338][T14291] loop1: detected capacity change from 0 to 512 [ 1003.041427][T14209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.104324][T14209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.111308][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.214500][T13747] Bluetooth: hci5: command tx timeout [ 1003.259797][T14209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.294780][T14291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.308493][T14291] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.642417][T14296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 1003.849022][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.037698][T14209] hsr_slave_0: entered promiscuous mode [ 1004.072574][T14209] hsr_slave_1: entered promiscuous mode [ 1004.085027][T14209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1004.125330][T14209] Cannot create hsr debugfs directory [ 1004.752173][T14315] netlink: '+}[@': attribute type 30 has an invalid length. [ 1005.260326][T14331] netlink: 'syz.0.2028': attribute type 4 has an invalid length. [ 1005.410681][ T9738] bridge_slave_1: left allmulticast mode [ 1005.444414][ T9738] bridge_slave_1: left promiscuous mode [ 1005.450228][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.507808][ T9738] bridge_slave_0: left allmulticast mode [ 1005.561608][ T9738] bridge_slave_0: left promiscuous mode [ 1005.567430][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.674902][T14339] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2030'. [ 1005.912894][T14343] loop0: detected capacity change from 0 to 1024 [ 1005.979069][T14343] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1006.036710][T14343] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1006.093190][T14343] JBD2: no valid journal superblock found [ 1006.120413][T14343] EXT4-fs (loop0): Could not load journal inode [ 1007.576548][T14363] loop0: detected capacity change from 0 to 512 [ 1007.618122][T14363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.631696][T14363] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.656399][T14382] netlink: 'syz.6.2042': attribute type 4 has an invalid length. [ 1008.771471][ T9738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.796010][ T9738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.970771][T14388] netlink: '+}[@': attribute type 30 has an invalid length. [ 1009.097295][ T9738] bond0 (unregistering): Released all slaves [ 1009.296430][T14392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2045'. [ 1009.428652][T13110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.061488][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 1010.783764][T14404] loop0: detected capacity change from 0 to 1024 [ 1010.933768][T14404] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1011.021593][T14404] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1011.189056][T14404] JBD2: no valid journal superblock found [ 1011.195728][T14404] EXT4-fs (loop0): Could not load journal inode [ 1013.531840][T14453] netlink: 'syz.5.2059': attribute type 4 has an invalid length. [ 1013.602867][T14454] loop0: detected capacity change from 0 to 512 [ 1013.660898][ T9738] hsr_slave_0: left promiscuous mode [ 1013.692885][T14454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.705523][T14454] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.811500][ T9738] hsr_slave_1: left promiscuous mode [ 1013.831729][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.848210][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.869884][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.894267][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.959098][ T9738] veth1_macvtap: left promiscuous mode [ 1013.991063][ T9738] veth0_macvtap: left promiscuous mode [ 1014.009414][ T9738] veth1_vlan: left promiscuous mode [ 1014.036268][ T9738] veth0_vlan: left promiscuous mode [ 1015.109685][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2062'. [ 1016.692425][T14459] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 1017.333117][T14503] delete_channel: no stack [ 1017.821902][T14511] loop6: detected capacity change from 0 to 1024 [ 1017.866027][T14511] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1017.899593][T14511] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1017.939156][T14511] JBD2: no valid journal superblock found [ 1017.953095][T14511] EXT4-fs (loop6): Could not load journal inode [ 1018.594783][ T9738] team0 (unregistering): Port device team_slave_1 removed [ 1019.409948][ T9738] team0 (unregistering): Port device team_slave_0 removed [ 1022.785333][T13110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.165178][T14580] netlink: '+}[@': attribute type 30 has an invalid length. [ 1025.195521][T14209] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1025.733962][T14209] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1025.796741][T14209] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1025.918226][T14209] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1027.663624][T14209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.755111][T14209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.899309][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.906559][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.952616][T14640] loop1: detected capacity change from 0 to 1024 [ 1028.998209][T14640] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1029.026689][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.033913][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.034342][T14640] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1029.069211][T14643] netlink: 'syz.5.2095': attribute type 4 has an invalid length. [ 1029.088883][T14640] JBD2: no valid journal superblock found [ 1029.104421][T14640] EXT4-fs (loop1): Could not load journal inode [ 1029.351543][T11595] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1031.023195][T14665] netlink: 'syz.6.2100': attribute type 30 has an invalid length. [ 1031.960228][T14209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.672515][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 1032.836185][T14691] loop6: detected capacity change from 0 to 512 [ 1032.946791][T14691] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1033.314647][T14691] EXT4-fs (loop6): 1 truncate cleaned up [ 1033.397673][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 1034.173268][T14691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.717796][T11595] usb 1-1: device descriptor read/64, error -110 [ 1035.021583][T11595] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1035.222615][T14616] delete_channel: no stack [ 1035.237098][T11595] usb 1-1: device descriptor read/64, error -32 [ 1035.351904][T11595] usb usb1-port1: attempt power cycle [ 1035.363872][T14209] veth0_vlan: entered promiscuous mode [ 1035.426406][T14209] veth1_vlan: entered promiscuous mode [ 1035.432191][T14713] EXT4-fs: Ignoring removed orlov option [ 1035.501033][T14209] veth0_macvtap: entered promiscuous mode [ 1035.526568][T14209] veth1_macvtap: entered promiscuous mode [ 1035.588167][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.776709][T14713] EXT4-fs (loop6): can't enable nombcache during remount [ 1035.784030][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.797114][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.723167][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.821896][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.923517][T14752] netlink: 'syz.1.2111': attribute type 4 has an invalid length. [ 1036.951544][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.036838][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1037.121086][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.200794][T14209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.501251][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.581536][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.611507][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.662750][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.691921][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.731844][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.779201][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1037.802608][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1037.869353][T14209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.957432][T13745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.979845][T14209] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.076179][T14209] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.085016][T14209] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.101433][T14209] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.529371][T14792] netlink: 'syz.2.2118': attribute type 30 has an invalid length. [ 1039.775685][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.775947][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.801690][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.809704][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.458235][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 1041.566732][T14819] netlink: 'syz.0.2124': attribute type 4 has an invalid length. [ 1041.696492][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2126'. [ 1043.234071][ C0] hrtimer: interrupt took 96836200 ns [ 1148.351300][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1148.358294][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14841/1:b.el [ 1148.366888][ C1] rcu: (detected by 1, t=10504 jiffies, g=71797, q=1236 ncpus=2) [ 1148.374795][ C1] task:syz.0.2132 state:R running task stack:26632 pid:14841 tgid:14840 ppid:13110 task_flags:0x40054c flags:0x00004000 [ 1148.389159][ C1] Call Trace: [ 1148.392451][ C1] [ 1148.395398][ C1] __schedule+0x116f/0x5de0 [ 1148.399960][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.405627][ C1] ? mark_held_locks+0x49/0x80 [ 1148.410436][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1148.415669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.421350][ C1] ? __pfx___schedule+0x10/0x10 [ 1148.426232][ C1] ? page_table_check_clear+0xa03/0xb30 [ 1148.431818][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.437504][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.443169][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1148.448591][ C1] preempt_schedule_common+0x44/0xc0 [ 1148.453923][ C1] preempt_schedule_thunk+0x16/0x30 [ 1148.459180][ C1] _raw_spin_unlock+0x3e/0x50 [ 1148.463886][ C1] unmap_page_range+0xf08/0x4390 [ 1148.468893][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1148.474295][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1148.479276][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.484940][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.490604][ C1] ? uprobe_munmap+0x20/0x5c0 [ 1148.495316][ C1] unmap_single_vma+0x194/0x2a0 [ 1148.500208][ C1] unmap_vmas+0x22c/0x490 [ 1148.504571][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1148.509444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.515119][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.520781][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1148.525794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.531485][ C1] exit_mmap+0x1b9/0xb90 [ 1148.535758][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.541432][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1148.546238][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.551902][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1148.556925][ C1] __mmput+0x12a/0x410 [ 1148.561035][ C1] mmput+0x62/0x70 [ 1148.564796][ C1] do_exit+0x9d1/0x2c30 [ 1148.569001][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1148.574343][ C1] ? __pfx_do_exit+0x10/0x10 [ 1148.578972][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.584632][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1148.589679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.595341][ C1] ? find_held_lock+0x2b/0x80 [ 1148.600058][ C1] do_group_exit+0xd3/0x2a0 [ 1148.604606][ C1] get_signal+0x2673/0x26d0 [ 1148.609147][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.614821][ C1] ? __pfx_get_signal+0x10/0x10 [ 1148.619707][ C1] ? do_futex+0x122/0x350 [ 1148.624100][ C1] ? __pfx_do_futex+0x10/0x10 [ 1148.628834][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1148.634434][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1148.640641][ C1] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1148.645619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.651294][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1148.656970][ C1] do_syscall_64+0xda/0x260 [ 1148.661516][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.667432][ C1] RIP: 0033:0x7f1c2658e969 [ 1148.671865][ C1] RSP: 002b:00007f1c273610e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1148.680306][ C1] RAX: fffffffffffffe00 RBX: 00007f1c267b5fa8 RCX: 00007f1c2658e969 [ 1148.688298][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1c267b5fa8 [ 1148.696286][ C1] RBP: 00007f1c267b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.704273][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c267b5fac [ 1148.712259][ C1] R13: 0000000000000000 R14: 00007ffd66771570 R15: 00007ffd66771658 [ 1148.720275][ C1] [ 1148.723305][ C1] rcu: rcu_preempt kthread starved for 8857 jiffies! g71797 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1148.734436][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1148.744413][ C1] rcu: RCU grace-period kthread stack dump: [ 1148.750305][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1148.763881][ C1] Call Trace: [ 1148.767168][ C1] [ 1148.770116][ C1] __schedule+0x116f/0x5de0 [ 1148.774656][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.780320][ C1] ? find_held_lock+0x2b/0x80 [ 1148.785034][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 1148.790025][ C1] ? __pfx___schedule+0x10/0x10 [ 1148.794916][ C1] ? find_held_lock+0x2b/0x80 [ 1148.799627][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.805302][ C1] schedule+0xe7/0x3a0 [ 1148.809402][ C1] schedule_timeout+0x123/0x290 [ 1148.814277][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1148.819674][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1148.824999][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.830661][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1148.836498][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.842158][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1148.847666][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1148.852477][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1148.857803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.863473][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.869133][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1148.874035][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1148.879881][ C1] rcu_gp_kthread+0x270/0x380 [ 1148.884601][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1148.889847][ C1] ? rcu_is_watching+0x12/0xc0 [ 1148.894641][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1148.899881][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.905546][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.911209][ C1] ? __kthread_parkme+0x19e/0x250 [ 1148.916275][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1148.921516][ C1] kthread+0x3c5/0x780 [ 1148.925606][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.930214][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.934825][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.939438][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.944046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.949708][ C1] ? rcu_is_watching+0x12/0xc0 [ 1148.954500][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.959111][ C1] ret_from_fork+0x48/0x80 [ 1148.963550][ C1] ? __pfx_kthread+0x10/0x10 [ 1148.968160][ C1] ret_from_fork_asm+0x1a/0x30 [ 1148.972990][ C1] [ 1148.976023][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1148.982357][ C1] CPU: 1 UID: 0 PID: 14780 Comm: syz.6.2115 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 1148.994445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1149.004519][ C1] RIP: 0010:smp_call_function_many_cond+0x4aa/0x1290 [ 1149.011225][ C1] Code: 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 bd 17 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 ff 83 e0 01 41 [ 1149.030860][ C1] RSP: 0018:ffffc9000b8277c8 EFLAGS: 00000293 [ 1149.036953][ C1] RAX: 0000000000000000 RBX: ffff8880b84415e0 RCX: ffffffff81af1aa9 [ 1149.044949][ C1] RDX: ffff888046345a00 RSI: ffffffff81af1a83 RDI: 0000000000000005 [ 1149.052937][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1149.060919][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882bd [ 1149.068907][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b180 [ 1149.076893][ C1] FS: 0000000000000000(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 1149.085844][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1149.092443][ C1] CR2: 00007ff726381c78 CR3: 000000000e180000 CR4: 0000000000350ef0 [ 1149.100430][ C1] Call Trace: [ 1149.103718][ C1] [ 1149.106677][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1149.111920][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1149.117062][ C1] flush_tlb_mm_range+0x322/0x1780 [ 1149.122226][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1149.127358][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1149.132338][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.138004][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1149.143606][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 1149.148325][ C1] exit_mmap+0x403/0xb90 [ 1149.152605][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1149.157411][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.163073][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1149.168090][ C1] __mmput+0x12a/0x410 [ 1149.172197][ C1] mmput+0x62/0x70 [ 1149.175953][ C1] do_exit+0x9d1/0x2c30 [ 1149.180145][ C1] ? __pfx___might_resched+0x10/0x10 [ 1149.185477][ C1] ? __pfx_do_exit+0x10/0x10 [ 1149.190107][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.195769][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1149.200816][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.206482][ C1] ? find_held_lock+0x2b/0x80 [ 1149.211199][ C1] do_group_exit+0xd3/0x2a0 [ 1149.215747][ C1] get_signal+0x2673/0x26d0 [ 1149.220288][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1149.225259][ C1] ? __pfx_get_signal+0x10/0x10 [ 1149.230141][ C1] ? do_futex+0x122/0x350 [ 1149.234516][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1149.240112][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1149.246320][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1149.251892][ C1] ? rcu_is_watching+0x12/0xc0 [ 1149.256695][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1149.262367][ C1] do_syscall_64+0xda/0x260 [ 1149.266914][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.272833][ C1] RIP: 0033:0x7fb64518e969 [ 1149.277266][ C1] Code: Unable to access opcode bytes at 0x7fb64518e93f. [ 1149.284294][ C1] RSP: 002b:00007fb645f3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1149.292731][ C1] RAX: 0000000000010106 RBX: 00007fb6453b5fa0 RCX: 00007fb64518e969 [ 1149.300719][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1149.308704][ C1] RBP: 00007fb645210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1149.316689][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1149.324674][ C1] R13: 0000000000000000 R14: 00007fb6453b5fa0 R15: 00007fff2cd81618 [ 1149.332696][ C1] [ 1299.984145][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 224s! [syz.6.2115:14780] [ 1299.984180][ C1] Modules linked in: [ 1299.984196][ C1] irq event stamp: 836518 [ 1299.984209][ C1] hardirqs last enabled at (836517): [] irqentry_exit+0x3b/0x90 [ 1299.984267][ C1] hardirqs last disabled at (836518): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1299.984318][ C1] softirqs last enabled at (836516): [] handle_softirqs+0x5be/0x8e0 [ 1299.984369][ C1] softirqs last disabled at (836479): [] __irq_exit_rcu+0x109/0x170 [ 1299.984423][ C1] CPU: 1 UID: 0 PID: 14780 Comm: syz.6.2115 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 1299.984466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1299.984486][ C1] RIP: 0010:smp_call_function_many_cond+0x4a3/0x1290 [ 1299.984528][ C1] Code: e5 01 89 ee e8 1e 13 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 bd 17 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 [ 1299.984562][ C1] RSP: 0018:ffffc9000b8277c8 EFLAGS: 00000293 [ 1299.984589][ C1] RAX: 0000000000000000 RBX: ffff8880b84415e0 RCX: ffffffff81af1aa9 [ 1299.984612][ C1] RDX: ffff888046345a00 RSI: ffffffff81af1a83 RDI: 0000000000000005 [ 1299.984635][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1299.984656][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882bd [ 1299.984678][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b180 [ 1299.984704][ C1] FS: 0000000000000000(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 1299.984734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.984757][ C1] CR2: 00007ff726381c78 CR3: 000000000e180000 CR4: 0000000000350ef0 [ 1299.984780][ C1] Call Trace: [ 1299.984790][ C1] [ 1299.984822][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1299.984878][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1299.984921][ C1] flush_tlb_mm_range+0x322/0x1780 [ 1299.984982][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1299.985014][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1299.985068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.985113][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1299.985179][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 1299.985234][ C1] exit_mmap+0x403/0xb90 [ 1299.985281][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1299.985333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.985374][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1299.985463][ C1] __mmput+0x12a/0x410 [ 1299.985510][ C1] mmput+0x62/0x70 [ 1299.985552][ C1] do_exit+0x9d1/0x2c30 [ 1299.985600][ C1] ? __pfx___might_resched+0x10/0x10 [ 1299.985656][ C1] ? __pfx_do_exit+0x10/0x10 [ 1299.985706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.985747][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1299.985781][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1299.985821][ C1] ? find_held_lock+0x2b/0x80 [ 1299.985871][ C1] do_group_exit+0xd3/0x2a0 [ 1299.985927][ C1] get_signal+0x2673/0x26d0 [ 1299.985975][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1299.986022][ C1] ? __pfx_get_signal+0x10/0x10 [ 1299.986069][ C1] ? do_futex+0x122/0x350 [ 1299.986126][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1299.986179][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1299.986244][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1299.986282][ C1] ? rcu_is_watching+0x12/0xc0 [ 1299.986332][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1299.986383][ C1] do_syscall_64+0xda/0x260 [ 1299.986436][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.986471][ C1] RIP: 0033:0x7fb64518e969 [ 1299.986496][ C1] Code: Unable to access opcode bytes at 0x7fb64518e93f. [ 1299.986512][ C1] RSP: 002b:00007fb645f3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1299.986545][ C1] RAX: 0000000000010106 RBX: 00007fb6453b5fa0 RCX: 00007fb64518e969 [ 1299.986568][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1299.986590][ C1] RBP: 00007fb645210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1299.986612][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1299.986633][ C1] R13: 0000000000000000 R14: 00007fb6453b5fa0 R15: 00007fff2cd81618 [ 1299.986680][ C1] [ 1299.986693][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1300.397851][ C0] NMI backtrace for cpu 0 [ 1300.397873][ C0] CPU: 0 UID: 0 PID: 5981 Comm: kworker/u8:12 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 1300.397915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1300.397936][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1300.397992][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x1d/0x80 [ 1300.398035][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 fe 2a f6 48 89 df 8e 52 2b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 bf 01 [ 1300.398067][ C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000086 [ 1300.398090][ C0] RAX: 0000000000000000 RBX: ffffffff9acbd238 RCX: ffffc90000007ccc [ 1300.398112][ C0] RDX: 0000000000000005 RSI: ffffffff8dbb775f RDI: ffffffff9acbd238 [ 1300.398132][ C0] RBP: 0000000000000012 R08: 0000000000000001 R09: fffff52000000f92 [ 1300.398152][ C0] R10: 0000000000000012 R11: ffffffff9acbd238 R12: 0000000000000002 [ 1300.398173][ C0] R13: ffff88805e0e2340 R14: dffffc0000000000 R15: 1ffff92000000fa8 [ 1300.398197][ C0] FS: 0000000000000000(0000) GS:ffff8881249e6000(0000) knlGS:0000000000000000 [ 1300.398224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1300.398245][ C0] CR2: 00007f430909807b CR3: 0000000053613000 CR4: 0000000000350ef0 [ 1300.398266][ C0] Call Trace: [ 1300.398281][ C0] [ 1300.398295][ C0] debug_object_activate+0x2ec/0x4c0 [ 1300.398332][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1300.398367][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.398406][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1300.398441][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1300.398479][ C0] enqueue_hrtimer+0x23/0x3b0 [ 1300.398510][ C0] __hrtimer_run_queues+0x8ff/0xad0 [ 1300.398551][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1300.398584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.398626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.398663][ C0] ? rcu_is_watching+0x12/0xc0 [ 1300.398703][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1300.398751][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1300.398791][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1300.398833][ C0] [ 1300.398843][ C0] [ 1300.398855][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1300.398890][ C0] RIP: 0010:unwind_next_frame+0xd7/0x20a0 [ 1300.398929][ C0] Code: 00 31 d2 45 31 c9 45 31 c0 48 8d 05 00 00 00 00 50 b9 02 00 00 00 31 f6 48 c7 c7 c0 f5 3b 8e e8 8f 47 2e 00 e8 9a 9c 00 0a 5a <85> c0 0f 85 57 09 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8d 65 50 [ 1300.398960][ C0] RSP: 0018:ffffc900031c6e48 EFLAGS: 00000246 [ 1300.398983][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000022e7b0d1 [ 1300.399002][ C0] RDX: ffffffff8169c9dd RSI: ffffffff8dbb775f RDI: ffffffff8bf46da0 [ 1300.399023][ C0] RBP: ffffc900031c6f00 R08: f31d1380d75d2e3a R09: 0000000000000000 [ 1300.399043][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff81a6f3c0 [ 1300.399064][ C0] R13: ffffc900031c6eb8 R14: 0000000000000000 R15: ffff88802ffd0000 [ 1300.399087][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1300.399133][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1300.399176][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1300.399213][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1300.399263][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1300.399314][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1300.399356][ C0] arch_stack_walk+0x94/0x100 [ 1300.399401][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1300.399451][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1300.399500][ C0] stack_trace_save+0x8e/0xc0 [ 1300.399540][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.399588][ C0] kasan_save_stack+0x33/0x60 [ 1300.399631][ C0] ? kasan_save_stack+0x33/0x60 [ 1300.399672][ C0] ? kasan_save_track+0x14/0x30 [ 1300.399714][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1300.399755][ C0] ? __kmalloc_noprof+0x223/0x510 [ 1300.399798][ C0] ? cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1300.399846][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1300.399931][ C0] kasan_save_track+0x14/0x30 [ 1300.399974][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1300.400017][ C0] __kmalloc_noprof+0x223/0x510 [ 1300.400062][ C0] ? __entry_text_end+0x1020c6/0x1020c9 [ 1300.400100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.400142][ C0] cfg80211_inform_single_bss_data+0x53e/0x1df0 [ 1300.400192][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.400237][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1300.400309][ C0] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 1300.400348][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.400386][ C0] ? stack_trace_save+0x8e/0xc0 [ 1300.400425][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1300.400464][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.400501][ C0] ? stack_depot_save_flags+0x28/0xa50 [ 1300.400554][ C0] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 1300.400600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.400638][ C0] cfg80211_inform_bss_data+0x224/0x3bd0 [ 1300.400686][ C0] ? __kmalloc_noprof+0x223/0x510 [ 1300.400728][ C0] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 1300.400767][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 1300.400803][ C0] ? ieee80211_iface_work+0xbf4/0x1020 [ 1300.400840][ C0] ? process_one_work+0x9cf/0x1b70 [ 1300.400874][ C0] ? ret_from_fork+0x48/0x80 [ 1300.400903][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1300.400957][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1300.401011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401048][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1300.401104][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401141][ C0] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 1300.401199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401237][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1300.401294][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401332][ C0] ? ieee802_11_parse_elems_full+0x145/0x3780 [ 1300.401378][ C0] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 1300.401436][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 1300.401476][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1300.401521][ C0] ? find_held_lock+0x2b/0x80 [ 1300.401559][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401602][ C0] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 1300.401653][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1300.401699][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401786][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 1300.401814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401855][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.401898][ C0] ieee80211_iface_work+0xbf4/0x1020 [ 1300.401938][ C0] ? rcu_is_watching+0x12/0xc0 [ 1300.401976][ C0] cfg80211_wiphy_work+0x3df/0x550 [ 1300.402031][ C0] process_one_work+0x9cf/0x1b70 [ 1300.402075][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1300.402109][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.402153][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.402191][ C0] ? assign_work+0x1a0/0x250 [ 1300.402223][ C0] worker_thread+0x6c8/0xf10 [ 1300.402267][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1300.402304][ C0] kthread+0x3c5/0x780 [ 1300.402333][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402360][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402387][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402414][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1300.402479][ C0] ? rcu_is_watching+0x12/0xc0 [ 1300.402516][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402546][ C0] ret_from_fork+0x48/0x80 [ 1300.402574][ C0] ? __pfx_kthread+0x10/0x10 [ 1300.402603][ C0] ret_from_fork_asm+0x1a/0x30 [ 1300.402662][ C0] [ 1300.402845][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 1301.153153][ C1] CPU: 1 UID: 0 PID: 14780 Comm: syz.6.2115 Tainted: G L 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 1301.166819][ C1] Tainted: [L]=SOFTLOCKUP [ 1301.171148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1301.181217][ C1] Call Trace: [ 1301.184507][ C1] [ 1301.187366][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1301.192001][ C1] panic+0x71c/0x800 [ 1301.195942][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.201617][ C1] ? __pfx_panic+0x10/0x10 [ 1301.206076][ C1] ? __pfx__printk+0x10/0x10 [ 1301.210714][ C1] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1301.216463][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.222131][ C1] ? irq_work_queue+0xce/0x100 [ 1301.226920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.232581][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 1301.237715][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 1301.242857][ C1] watchdog_timer_fn+0x603/0x7d0 [ 1301.247823][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1301.253305][ C1] __hrtimer_run_queues+0x5ed/0xad0 [ 1301.258548][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1301.264293][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.269996][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1301.274988][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1301.281007][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1301.286677][ C1] [ 1301.289615][ C1] [ 1301.292559][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1301.298564][ C1] RIP: 0010:smp_call_function_many_cond+0x4a3/0x1290 [ 1301.305267][ C1] Code: e5 01 89 ee e8 1e 13 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 bd 17 0c 00 90 41 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 [ 1301.324899][ C1] RSP: 0018:ffffc9000b8277c8 EFLAGS: 00000293 [ 1301.330992][ C1] RAX: 0000000000000000 RBX: ffff8880b84415e0 RCX: ffffffff81af1aa9 [ 1301.338986][ C1] RDX: ffff888046345a00 RSI: ffffffff81af1a83 RDI: 0000000000000005 [ 1301.346979][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1301.354971][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882bd [ 1301.362958][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b180 [ 1301.370966][ C1] ? smp_call_function_many_cond+0x4c9/0x1290 [ 1301.377064][ C1] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1301.383169][ C1] ? smp_call_function_many_cond+0x4a3/0x1290 [ 1301.389282][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1301.394526][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1301.399671][ C1] flush_tlb_mm_range+0x322/0x1780 [ 1301.404831][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1301.409964][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1301.414943][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.420607][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1301.426209][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 1301.430931][ C1] exit_mmap+0x403/0xb90 [ 1301.435211][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1301.440015][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.445681][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1301.450697][ C1] __mmput+0x12a/0x410 [ 1301.454803][ C1] mmput+0x62/0x70 [ 1301.458556][ C1] do_exit+0x9d1/0x2c30 [ 1301.462749][ C1] ? __pfx___might_resched+0x10/0x10 [ 1301.468077][ C1] ? __pfx_do_exit+0x10/0x10 [ 1301.472706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.478369][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1301.483414][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1301.489076][ C1] ? find_held_lock+0x2b/0x80 [ 1301.493793][ C1] do_group_exit+0xd3/0x2a0 [ 1301.498346][ C1] get_signal+0x2673/0x26d0 [ 1301.502885][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1301.507859][ C1] ? __pfx_get_signal+0x10/0x10 [ 1301.512744][ C1] ? do_futex+0x122/0x350 [ 1301.517120][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1301.522708][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1301.528914][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1301.534487][ C1] ? rcu_is_watching+0x12/0xc0 [ 1301.539290][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1301.544965][ C1] do_syscall_64+0xda/0x260 [ 1301.549517][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.555436][ C1] RIP: 0033:0x7fb64518e969 [ 1301.559866][ C1] Code: Unable to access opcode bytes at 0x7fb64518e93f. [ 1301.566895][ C1] RSP: 002b:00007fb645f3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1301.575337][ C1] RAX: 0000000000010106 RBX: 00007fb6453b5fa0 RCX: 00007fb64518e969 [ 1301.583325][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1301.591312][ C1] RBP: 00007fb645210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1301.599297][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1301.607283][ C1] R13: 0000000000000000 R14: 00007fb6453b5fa0 R15: 00007fff2cd81618 [ 1301.615298][ C1] [ 1302.785184][ C1] Shutting down cpus with NMI [ 1302.790108][ C1] Kernel Offset: disabled [ 1302.794439][ C1] Rebooting in 86400 seconds..