last executing test programs: 1m5.016542156s ago: executing program 2 (id=96): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m3.656488669s ago: executing program 2 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) 1m3.546341455s ago: executing program 4 (id=106): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa34e]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 1m2.260095947s ago: executing program 4 (id=110): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a0000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916840000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r7 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x15, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007055090100000000009500000000000000851000000500000018540000070000000000000000000000184a1f00fbffffff000000000000000039a52000f0ffffffbf91008500000084000000b7000000000000009500"/142], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x80000000, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0x200000e, 0xa}, {0x5, 0x5, 0x1, 0x9}, {0x0, 0x1, 0xe, 0x3}, {0x4, 0x3, 0x9, 0x5}], 0x10, 0x92}, 0x94) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, 0x0) 1m2.230384791s ago: executing program 2 (id=112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1m0.896074914s ago: executing program 2 (id=113): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 59.284449111s ago: executing program 2 (id=118): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 59.045263654s ago: executing program 4 (id=119): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) 58.845011505s ago: executing program 2 (id=120): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa34e]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 58.338043759s ago: executing program 32 (id=120): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa34e]}, 0x8) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 56.334118816s ago: executing program 4 (id=128): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 56.02115153s ago: executing program 4 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r1, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) 55.599814088s ago: executing program 1 (id=134): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 54.661718007s ago: executing program 1 (id=138): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x92000000000048c0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvfrom$x25(r0, &(0x7f00000004c0)=""/243, 0xf3, 0x40012020, 0x0, 0x0) 54.528408694s ago: executing program 1 (id=140): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005"], 0x4c}}, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(r0) r6 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x3a, 0x44, 0x0, 0x0) 53.640455189s ago: executing program 1 (id=141): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 53.543332307s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000000)={0x13824400, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000071103c000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 53.088316377s ago: executing program 4 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 52.457358559s ago: executing program 33 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 52.434515481s ago: executing program 1 (id=146): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) 52.434042885s ago: executing program 34 (id=146): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) 22.622234949s ago: executing program 6 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x4c}}, 0x0) 21.594192079s ago: executing program 6 (id=263): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(0xffffffffffffffff, 0x9, 0x2, 0x7000003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) chown(&(0x7f0000000040)='./file1\x00', r3, r4) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0)=0x0, 0x0, &(0x7f0000000480)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) r8 = msgget$private(0x0, 0xffffffffffffffdc) msgrcv(r8, 0x0, 0x0, 0x1, 0x3000) msgrcv(r8, 0x0, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getpid() getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000680)={{0x3, r10, r12, r10, r11, 0x80, 0x8}, 0x0, 0x0, 0xb, 0x15, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x6, 0x9, r9, r9}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1a24418, &(0x7f0000000880)={[{@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@gid={'gid', 0x3d, r6}}, {@uid={'uid', 0x3d, r7}}], [{@pcr={'pcr', 0x3d, 0x29}}, {@appraise_type}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@hash}]}) r13 = socket$netlink(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r14, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x804) 14.987806353s ago: executing program 6 (id=282): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad) 13.78091261s ago: executing program 6 (id=285): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) 10.448202431s ago: executing program 3 (id=297): socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, 0x0) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 8.864438836s ago: executing program 5 (id=300): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 8.187082796s ago: executing program 5 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c0, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) socket$inet(0x2, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 7.399623012s ago: executing program 5 (id=303): syslog(0x4, &(0x7f0000000400)=""/192, 0x64075da62934d5c2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.940184866s ago: executing program 0 (id=307): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000280)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 4.860756211s ago: executing program 3 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0xbe, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000003550000000", @ANYRES32, @ANYBLOB="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"], 0x0, 0xfffffff8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='ext4_load_inode\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$eJzs3U9oXNUaAPDvziR5SZv30j4ej9fyHi/QRQuPpklfserGti7somDBLkRcNDRJDZ3+oUnBxoIJuFBQEHEr0o3g2r10704EdedaqCIVBZWO3Jk77SSZSaZJZm6S+/vBzdxz7p0555s7Z+659+bMDaCwRtM/pYgDEQ8vJhEjTcuGo75wNFvvwU93LqVTEtXqSz8mkWR5jfWT7HFvlhiMiC/PRPy9vLrcudsLVyYr1bo3I47NX71xbO72wtHZq5OXpy9PX5s4/vSJk+PPTJyY2JI492aPZ8+9+O/33nrtqZmvKkeTOBUX+t+YihVxbJXRGI2HWYjN+X0RcTKdafG+7DS7IIRCK2efx/6I+GeMRLmWqhuJ2XdzrRzQVdVyRBUoqGQz7f/TBV8fsGM1+gGNY/vOjoMvdLlX0jv3T9cPgFbH31c/NxKDtWOjPQ+SpiOj+rmNfVtQflrGH3cOfpROsew8xK+Ptk7fFpTTzuJSRPyrVfxJrW77apGm8ZeW1SOJiPGIGMjq9/wm6pA0zXfjPMxaNhp/KSJOZY9p/pkNlj+6It3r+AEopnunsx35Ypp6vP9L+x6N/k+06P8Mt9h3bUTe+7/2/b/G/n6wdo68tKIflvZZzrd+yf6VGd+9c/aDduU39//SKS2/0RfshftLEQdXxP92GmzW/0njT1ps/3SVi6c6K+OFr384225Z3vFX70Ycbnn887hXms6tcX3y2MxsZXq8/rdlGZ9/8eon7crPO/50++9pE3/T9i+tfF76ntzosIzPzt+92m7Z8Lrxl74fSOrHmwNZzuuT8/M3JyIGknPZKk35x9euS2Odxmuk8R851Lr9L/v8Ly1/naHGV2YHbrx85UG7Zc3bP0nq9Vhv+zddTH5Y7bAO7aTxT62//Ve1/zTv/Q7L+OWVW/9pt2ytz//QZgIDAAAAAACAAirVrsEmpbFH86XS2Fh9vOw/Yk+pcn1u/n8z129dm4o4Uvt/yP5S40r3SD2dpOmJ7P9hG+njK9L/j4j9EfFheaiWHrt0vTKVd/AAAAAAAAAAAAAAAAAAAACwTezNxv837lP9c7k+/h8oiG7eYA7Y3rR/KK5a+191iyegCNrt/+d6XA+g9/T/obi0fygu7R+KS/uH4tL+obi0fygu7R8AAAAAdqX9/733bRIRi88O1abUQLbMiCDY3frzrgCQm3LeFQBy8+jSv84+FE5H/f/fsh8H7H51gBwkrTJrnYPq2o3/XstnAgAAAAAAAAAAAABdcPhA+/H/xgbD7vYEw/6WulkPoPc2Mf7fTwfADuen/6G4NnyMP7i19QDys94o/rbN3fh/AAAAAAAAAAAAAOiZ4dqUlMayscDDUSqNjUX8NSL2RX8yM1uZHo+Iv0XEN+X+v6TpibwrDQAAAAAAAAAAAAAAAAAAALvM3O2FK5OVyvTN5pnfV+Xs7pnGXVB7UNZz8YTPiqT3b8tQROS+Ubo209eUk0Qsplt+W1Ts5lxsj2rUZnL+YgIAAAAAAAAAAAAAAAAAgAJqGnvc2sGPe1wjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi9x/f/f9KZQx2vnHeMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDO9GcAAAD//4+rO+Q=") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000008000000", @ANYRES32], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) listen(0xffffffffffffffff, 0xda90) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r8 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="02443adb129d4156fd9f58bbcdffbf5f155263f7d01c125e7baf5afe15d2a54aa43586066776b071c28a25ae60de4a9427960e95403ee639f74abf66b42b06dc0af0bfc6d6a87ef2ac420b4a7c381018c0769d4734d28ed8b52c3d5e7b44402b1c99118fecc586f20c2d918b6e7a211f279f79ae568c986d51b7176e1432ecd28ca453dc", @ANYRESHEX=r8, @ANYBLOB=',\x00']) 4.844065097s ago: executing program 0 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180)="38f83fb62f3b211d796892fecc737188b85edbd91c9f541a081c68303a35e47d185a1d90dfb48d15f28474ca39e21d1eb967362d51e357e7b249cf0608fe705dc5732f63c089b0f1e1350fc52717"}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 4.733119568s ago: executing program 5 (id=311): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8010, r1, 0x2b062000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, r2}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r0, &(0x7f0000000000), 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, 0x0, 0x0, 0x0) semop(r6, 0x0, 0x0) semctl$GETNCNT(r6, 0x2, 0xe, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x57, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x1}]}) 4.36557796s ago: executing program 7 (id=312): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) pipe(&(0x7f0000000380)={0xffffffffffffffff}) fsopen(&(0x7f0000000080)='9p\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14005c0011"], 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000004900)=""/4068, 0xfe4}], 0x1) r3 = io_uring_setup(0x590b, &(0x7f0000000600)={0x0, 0x1e05, 0x2, 0x4000004, 0x2ef, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) dup(r4) 4.014164773s ago: executing program 7 (id=313): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000800) 3.380140407s ago: executing program 3 (id=314): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005"], 0x4c}}, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(r0) r7 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x3a, 0x44, 0x0, 0x0) 3.081073875s ago: executing program 5 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.016427493s ago: executing program 0 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2.071974224s ago: executing program 6 (id=319): socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, 0x0) r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1.912566949s ago: executing program 3 (id=320): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) io_setup(0x4, &(0x7f0000000040)) eventfd(0x6) fallocate(r2, 0x0, 0x0, 0x1000f4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 1.812223329s ago: executing program 7 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x2f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.010487343s ago: executing program 0 (id=322): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 756.411029ms ago: executing program 7 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 717.083911ms ago: executing program 3 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48) 683.961768ms ago: executing program 5 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180)="38f83fb62f3b211d796892fecc737188b85edbd91c9f541a081c68303a35e47d185a1d90dfb48d15f28474ca39e21d1eb967362d51e357e7b249cf0608fe705dc5732f63c089b0f1e1350fc52717"}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) 376.577939ms ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 275.717922ms ago: executing program 7 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) 89.84545ms ago: executing program 0 (id=328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x9, 0x3}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 0s ago: executing program 7 (id=329): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005"], 0x4c}}, 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(r0) r7 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x3a, 0x44, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. [ 68.678182][ T5848] cgroup: Unknown subsys name 'net' [ 68.828729][ T5848] cgroup: Unknown subsys name 'cpuset' [ 68.837461][ T5848] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.214933][ T5848] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.499044][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.505542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.615523][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.628609][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.631132][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.644234][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.652905][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.666452][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.674423][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.696568][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.709388][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.725590][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.734508][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.737471][ T5877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.746051][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.748729][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.764129][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.764777][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.773161][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.787274][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.788438][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.795291][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.802596][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.809914][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.823789][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.830975][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.839549][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.422268][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 74.490921][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 74.623574][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 74.763335][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.771543][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.779479][ T5872] bridge_slave_0: entered allmulticast mode [ 74.787463][ T5872] bridge_slave_0: entered promiscuous mode [ 74.796736][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.803887][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.811183][ T5872] bridge_slave_1: entered allmulticast mode [ 74.818799][ T5872] bridge_slave_1: entered promiscuous mode [ 74.859404][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 74.883290][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 74.983444][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.001696][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.009333][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.018510][ T5858] bridge_slave_0: entered allmulticast mode [ 75.026613][ T5858] bridge_slave_0: entered promiscuous mode [ 75.038713][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.045997][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.053144][ T5859] bridge_slave_0: entered allmulticast mode [ 75.060535][ T5859] bridge_slave_0: entered promiscuous mode [ 75.070766][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.099114][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.106602][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.114021][ T5858] bridge_slave_1: entered allmulticast mode [ 75.121521][ T5858] bridge_slave_1: entered promiscuous mode [ 75.133672][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.141672][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.148976][ T5859] bridge_slave_1: entered allmulticast mode [ 75.156695][ T5859] bridge_slave_1: entered promiscuous mode [ 75.276399][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.289373][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.300425][ T5872] team0: Port device team_slave_0 added [ 75.321540][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.334878][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.345741][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.353320][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.361215][ T5873] bridge_slave_0: entered allmulticast mode [ 75.368497][ T5873] bridge_slave_0: entered promiscuous mode [ 75.392441][ T5872] team0: Port device team_slave_1 added [ 75.428592][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.436512][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.443695][ T5873] bridge_slave_1: entered allmulticast mode [ 75.452903][ T5873] bridge_slave_1: entered promiscuous mode [ 75.474951][ T5859] team0: Port device team_slave_0 added [ 75.493062][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.500318][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.508082][ T5863] bridge_slave_0: entered allmulticast mode [ 75.515069][ T5863] bridge_slave_0: entered promiscuous mode [ 75.549141][ T5859] team0: Port device team_slave_1 added [ 75.568347][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.576732][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.584070][ T5863] bridge_slave_1: entered allmulticast mode [ 75.592062][ T5863] bridge_slave_1: entered promiscuous mode [ 75.600829][ T5858] team0: Port device team_slave_0 added [ 75.648719][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.656255][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.682989][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.707522][ T5858] team0: Port device team_slave_1 added [ 75.729842][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.742547][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.749661][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.776242][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.789634][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.796687][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.822898][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.852486][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.864428][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.874468][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.881517][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.908951][ T5875] Bluetooth: hci3: command tx timeout [ 75.908955][ T5878] Bluetooth: hci4: command tx timeout [ 75.909194][ T5878] Bluetooth: hci1: command tx timeout [ 75.914626][ T5875] Bluetooth: hci2: command tx timeout [ 75.920482][ T5862] Bluetooth: hci0: command tx timeout [ 75.937248][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.968415][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.975681][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.002331][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.017297][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.063749][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.070900][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.097330][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.153558][ T5863] team0: Port device team_slave_0 added [ 76.162763][ T5863] team0: Port device team_slave_1 added [ 76.171053][ T5873] team0: Port device team_slave_0 added [ 76.233305][ T5873] team0: Port device team_slave_1 added [ 76.244890][ T5859] hsr_slave_0: entered promiscuous mode [ 76.252119][ T5859] hsr_slave_1: entered promiscuous mode [ 76.278258][ T5872] hsr_slave_0: entered promiscuous mode [ 76.284803][ T5872] hsr_slave_1: entered promiscuous mode [ 76.291926][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 76.297951][ T5872] Cannot create hsr debugfs directory [ 76.348423][ T5858] hsr_slave_0: entered promiscuous mode [ 76.355764][ T5858] hsr_slave_1: entered promiscuous mode [ 76.361876][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 76.367708][ T5858] Cannot create hsr debugfs directory [ 76.373901][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.380991][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.407523][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.452719][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.459996][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.486374][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.497963][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.504983][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.531549][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.601638][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.609299][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.636827][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.771570][ T5863] hsr_slave_0: entered promiscuous mode [ 76.778264][ T5863] hsr_slave_1: entered promiscuous mode [ 76.784524][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 76.790575][ T5863] Cannot create hsr debugfs directory [ 76.908413][ T5873] hsr_slave_0: entered promiscuous mode [ 76.914961][ T5873] hsr_slave_1: entered promiscuous mode [ 76.922387][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 76.928219][ T5873] Cannot create hsr debugfs directory [ 77.286959][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.301390][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.325033][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.363958][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.450818][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.473718][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.502923][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.513884][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.602082][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.633054][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.644471][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.670597][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.761951][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.774141][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.788877][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.807353][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.853311][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.942770][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.952791][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.975753][ T5878] Bluetooth: hci2: command tx timeout [ 77.975779][ T5875] Bluetooth: hci1: command tx timeout [ 77.981179][ T5878] Bluetooth: hci0: command tx timeout [ 77.986699][ T5862] Bluetooth: hci3: command tx timeout [ 77.992141][ T5878] Bluetooth: hci4: command tx timeout [ 78.011211][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.023214][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.044681][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.060132][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.102862][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.110161][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.121980][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.129145][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.144621][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.219247][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.226724][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.239231][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.246492][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.276071][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.340284][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.396983][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.404118][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.449166][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.456485][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.472262][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.580610][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.642570][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.670163][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.677518][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.741325][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.748544][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.806702][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.860770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.868046][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.883068][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.890276][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.914001][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.988114][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.030936][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.248927][ T5872] veth0_vlan: entered promiscuous mode [ 79.284996][ T5859] veth0_vlan: entered promiscuous mode [ 79.300266][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.333182][ T5859] veth1_vlan: entered promiscuous mode [ 79.353546][ T5872] veth1_vlan: entered promiscuous mode [ 79.448106][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.472541][ T5859] veth0_macvtap: entered promiscuous mode [ 79.491277][ T5872] veth0_macvtap: entered promiscuous mode [ 79.529238][ T5872] veth1_macvtap: entered promiscuous mode [ 79.543486][ T5859] veth1_macvtap: entered promiscuous mode [ 79.557000][ T5858] veth0_vlan: entered promiscuous mode [ 79.631184][ T5858] veth1_vlan: entered promiscuous mode [ 79.651423][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.678657][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.691599][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.727467][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.758754][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.767429][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.777001][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.792887][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.833262][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.876026][ T5858] veth0_macvtap: entered promiscuous mode [ 79.923493][ T61] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.944625][ T61] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.967388][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982134][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.998378][ T5858] veth1_macvtap: entered promiscuous mode [ 80.056356][ T5878] Bluetooth: hci3: command tx timeout [ 80.061806][ T5878] Bluetooth: hci1: command tx timeout [ 80.067879][ T5869] Bluetooth: hci0: command tx timeout [ 80.068114][ T5862] Bluetooth: hci2: command tx timeout [ 80.073324][ T5869] Bluetooth: hci4: command tx timeout [ 80.133726][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.148154][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.163588][ T5873] veth0_vlan: entered promiscuous mode [ 80.182846][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.203416][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.213405][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.262455][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.279055][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.298324][ T5873] veth1_vlan: entered promiscuous mode [ 80.318839][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.329073][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.337450][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.409039][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.420700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.440349][ T5863] veth0_vlan: entered promiscuous mode [ 80.475604][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.483453][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.497181][ T5873] veth0_macvtap: entered promiscuous mode [ 80.507840][ T5873] veth1_macvtap: entered promiscuous mode [ 80.528219][ T5863] veth1_vlan: entered promiscuous mode [ 80.541704][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.564116][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.624724][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.636850][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.661234][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.676747][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.720510][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.770274][ T5863] veth0_macvtap: entered promiscuous mode [ 80.797612][ T1335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.828715][ T1335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.879690][ T5863] veth1_macvtap: entered promiscuous mode [ 80.893675][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933676][ T1335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.980413][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.027690][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.162165][ T30] audit: type=1326 audit(1757481102.348:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 81.251450][ T30] audit: type=1326 audit(1757481102.368:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 81.312358][ T30] audit: type=1326 audit(1757481102.368:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 81.320143][ T5231] udevd[5231]: worker [5912] terminated by signal 33 (Unknown signal 33) [ 81.337407][ T30] audit: type=1326 audit(1757481102.378:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 81.390145][ T5231] udevd[5231]: worker [5912] failed while handling '/devices/virtual/block/loop3' [ 81.401582][ T30] audit: type=1326 audit(1757481102.378:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5991 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 81.443019][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.469620][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.485119][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 81.500209][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.502519][ T5997] Mount JFS Failure: -22 [ 81.509022][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.541583][ T5997] jfs_mount failed w/return code = -22 [ 81.569333][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.595623][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.638497][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.656481][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.687819][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.703396][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.914907][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.959338][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.050483][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.117727][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.135510][ T5869] Bluetooth: hci4: command tx timeout [ 82.141139][ T5869] Bluetooth: hci2: command tx timeout [ 82.144797][ T5862] Bluetooth: hci0: command tx timeout [ 82.147027][ T5878] Bluetooth: hci1: command tx timeout [ 82.152438][ T5877] Bluetooth: hci3: command tx timeout [ 82.342573][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.388891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.617342][ T30] audit: type=1326 audit(1757481103.808:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d278eba9 code=0x7ffc0000 [ 82.728294][ T30] audit: type=1326 audit(1757481103.808:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d278eba9 code=0x7ffc0000 [ 82.849744][ T30] audit: type=1326 audit(1757481103.818:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fb8d278eba9 code=0x7ffc0000 [ 82.967091][ T30] audit: type=1326 audit(1757481103.818:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d278eba9 code=0x7ffc0000 [ 83.062114][ T30] audit: type=1326 audit(1757481103.818:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6011 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb8d278eba9 code=0x7ffc0000 [ 83.202646][ T6023] loop4: detected capacity change from 0 to 1024 [ 83.266403][ T6024] 9pnet_virtio: no channels available for device [ 83.321157][ T6023] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.357135][ T6023] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.476905][ T6023] JBD2: no valid journal superblock found [ 83.505263][ T6023] EXT4-fs (loop4): Could not load journal inode [ 84.128148][ T6029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.282058][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 84.323091][ T6032] netlink: 'syz.4.19': attribute type 13 has an invalid length. [ 84.382982][ T6036] netlink: 148 bytes leftover after parsing attributes in process `syz.4.19'. [ 84.555550][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.564119][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.713827][ T6041] netlink: 'syz.3.21': attribute type 13 has an invalid length. [ 84.918424][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.966402][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.737132][ T6041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.795603][ T1335] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.825009][ T1335] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.858274][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.888315][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.000441][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.020842][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.045285][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.064739][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.089760][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.122342][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.159871][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.182139][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.391292][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.399019][ T5926] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.413703][ T5926] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 86.959659][ T981] cfg80211: failed to load regulatory.db [ 87.336460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.345327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.622562][ T6074] Mount JFS Failure: -22 [ 87.623823][ T6064] fido_id[6064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.656829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.681441][ T6074] jfs_mount failed w/return code = -22 [ 87.686265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.728350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.805653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.814500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.823146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.505471][ T6114] netlink: 'syz.4.33': attribute type 13 has an invalid length. [ 88.516506][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 88.567708][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 88.682555][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.691593][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 88.701542][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.715369][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 88.814232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.875623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.890386][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.903558][ T6119] Zero length message leads to an empty skb [ 88.916431][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.178936][ T6125] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 89.653887][ T6134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.560548][ T5927] IPVS: starting estimator thread 0... [ 90.690389][ T6167] IPVS: using max 35 ests per chain, 84000 per kthread [ 91.057252][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 92.886418][ T6201] netlink: 'syz.1.50': attribute type 2 has an invalid length. [ 92.894273][ T6201] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 93.271589][ T6206] loop1: detected capacity change from 0 to 512 [ 93.859336][ T6236] Mount JFS Failure: -22 [ 93.863629][ T6236] jfs_mount failed w/return code = -22 [ 94.414904][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.559309][ T6206] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.776850][ T5934] IPVS: starting estimator thread 0... [ 94.831499][ T5873] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.885428][ T6247] IPVS: using max 51 ests per chain, 122400 per kthread [ 95.648240][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 95.648256][ T30] audit: type=1326 audit(1757481116.838:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 95.708927][ T30] audit: type=1326 audit(1757481116.838:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 95.831124][ T30] audit: type=1326 audit(1757481116.838:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 95.860640][ T30] audit: type=1326 audit(1757481116.838:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 95.884941][ T30] audit: type=1326 audit(1757481116.838:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 95.977735][ T30] audit: type=1326 audit(1757481116.838:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 96.084329][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 96.217163][ T30] audit: type=1326 audit(1757481116.838:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 96.240637][ T30] audit: type=1326 audit(1757481116.838:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 96.263812][ T30] audit: type=1326 audit(1757481116.838:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 96.286427][ T30] audit: type=1326 audit(1757481116.838:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e738eba9 code=0x7ffc0000 [ 98.093407][ T5926] IPVS: starting estimator thread 0... [ 98.235974][ T6296] IPVS: using max 34 ests per chain, 81600 per kthread [ 98.517464][ T6304] netlink: 'syz.2.74': attribute type 13 has an invalid length. [ 98.882573][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.890499][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.675383][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.698163][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.925064][ T6116] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.953250][ T6116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.977464][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.997640][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.020661][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.052581][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.084023][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.108921][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.662355][ T5927] IPVS: starting estimator thread 0... [ 100.787758][ T6344] IPVS: using max 28 ests per chain, 67200 per kthread [ 100.812220][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.82'. [ 101.670172][ T6355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.859922][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 102.859939][ T30] audit: type=1326 audit(1757481124.048:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1dd8eba9 code=0x7ffc0000 [ 102.930948][ T30] audit: type=1326 audit(1757481124.068:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6363 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b1dd8eba9 code=0x7ffc0000 [ 105.325232][ T6393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.421652][ T5926] IPVS: starting estimator thread 0... [ 105.600876][ T6402] IPVS: using max 33 ests per chain, 79200 per kthread [ 105.640641][ T30] audit: type=1326 audit(1757481126.828:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.666729][ T6409] loop1: detected capacity change from 0 to 512 [ 105.684360][ T6409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.697607][ T30] audit: type=1326 audit(1757481126.838:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.697655][ T30] audit: type=1326 audit(1757481126.838:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.697694][ T30] audit: type=1326 audit(1757481126.838:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.697733][ T30] audit: type=1326 audit(1757481126.848:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.697771][ T30] audit: type=1326 audit(1757481126.848:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.697816][ T30] audit: type=1326 audit(1757481126.848:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 105.849625][ T6409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.873847][ T6409] EXT4-fs (loop1): 1 truncate cleaned up [ 105.927652][ T6409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.135540][ T6409] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.264364][ T6422] lo speed is unknown, defaulting to 1000 [ 106.284147][ T6422] lo speed is unknown, defaulting to 1000 [ 106.304113][ T6422] lo speed is unknown, defaulting to 1000 [ 106.825942][ T6422] infiniband sz1: set down [ 106.830586][ T6422] infiniband sz1: added lo [ 106.864047][ T5926] lo speed is unknown, defaulting to 1000 [ 106.902096][ T6422] RDS/IB: sz1: added [ 106.906579][ T6422] smc: adding ib device sz1 with port count 1 [ 106.912895][ T6422] smc: ib device sz1 port 1 has no pnetid [ 106.921505][ T6422] lo speed is unknown, defaulting to 1000 [ 107.052105][ T6422] lo speed is unknown, defaulting to 1000 [ 107.160317][ T5926] lo speed is unknown, defaulting to 1000 [ 107.181173][ T6418] loop0: detected capacity change from 0 to 512 [ 107.239949][ T6422] lo speed is unknown, defaulting to 1000 [ 107.260148][ T6418] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.332896][ T6418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 107.383684][ T6418] System zones: 1-12 [ 107.405785][ T6418] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.111: corrupted in-inode xattr: e_value size too large [ 107.461649][ T6418] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.111: couldn't read orphan inode 15 (err -117) [ 107.468613][ T6422] lo speed is unknown, defaulting to 1000 [ 107.491712][ T6418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.701487][ T6422] lo speed is unknown, defaulting to 1000 [ 107.745981][ T30] audit: type=1326 audit(1757481128.868:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 108.027053][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 108.027069][ T30] audit: type=1326 audit(1757481129.028:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc832ada9 code=0x7ffc0000 [ 108.059085][ T30] audit: type=1326 audit(1757481129.168:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddc8385b67 code=0x7ffc0000 [ 108.086578][ T30] audit: type=1326 audit(1757481129.178:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc832ada9 code=0x7ffc0000 [ 108.114059][ T30] audit: type=1326 audit(1757481129.178:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddc8385b67 code=0x7ffc0000 [ 108.186569][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 108.685036][ T30] audit: type=1326 audit(1757481129.178:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc832ada9 code=0x7ffc0000 [ 108.710326][ T30] audit: type=1326 audit(1757481129.178:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddc8385b67 code=0x7ffc0000 [ 108.751082][ T30] audit: type=1326 audit(1757481129.178:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc832ada9 code=0x7ffc0000 [ 108.808813][ T30] audit: type=1326 audit(1757481129.178:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 108.859801][ T30] audit: type=1326 audit(1757481129.178:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 109.096615][ T30] audit: type=1326 audit(1757481129.178:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc838eba9 code=0x7ffc0000 [ 109.354453][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.273069][ T6469] netlink: 'syz.1.125': attribute type 13 has an invalid length. [ 110.553486][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.560977][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.622642][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.633845][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.705795][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.714361][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.722518][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.346150][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 111.647479][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.831881][ T6469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.182316][ T6501] loop0: detected capacity change from 0 to 2048 [ 112.226712][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.347699][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.471042][ T36] bridge_slave_1: left allmulticast mode [ 112.491454][ T36] bridge_slave_1: left promiscuous mode [ 112.509677][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.522270][ T36] bridge_slave_0: left allmulticast mode [ 112.538842][ T36] bridge_slave_0: left promiscuous mode [ 112.555484][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.777329][ T5877] Bluetooth: hci4: command tx timeout [ 113.916299][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 114.603898][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.639867][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.684914][ T36] bond0 (unregistering): Released all slaves [ 114.706234][ T6116] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.720941][ T6116] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.862489][ T5877] Bluetooth: hci4: command tx timeout [ 115.158239][ T6116] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.189386][ T6116] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.328382][ T6477] lo speed is unknown, defaulting to 1000 [ 117.055324][ T5877] Bluetooth: hci4: command tx timeout [ 117.124961][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 117.800941][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.818943][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.827060][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.837117][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.844847][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.976368][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.986829][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.994313][ T36] hsr_slave_0: left promiscuous mode [ 118.004453][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.013685][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.021821][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.021853][ T36] hsr_slave_1: left promiscuous mode [ 118.067457][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.077823][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.650541][ T36] team0 (unregistering): Port device team_slave_1 removed [ 118.723847][ T36] team0 (unregistering): Port device team_slave_0 removed [ 119.098608][ T5862] Bluetooth: hci4: command tx timeout [ 119.411394][ T6582] lo speed is unknown, defaulting to 1000 [ 119.523222][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 119.752222][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 119.905786][ T5862] Bluetooth: hci2: command tx timeout [ 120.057604][ T5862] Bluetooth: hci3: command tx timeout [ 120.611093][ T6590] lo speed is unknown, defaulting to 1000 [ 120.855547][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.886651][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.893914][ T6477] bridge_slave_0: entered allmulticast mode [ 120.944552][ T6477] bridge_slave_0: entered promiscuous mode [ 120.979760][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.997198][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.014671][ T6477] bridge_slave_1: entered allmulticast mode [ 121.055695][ T6477] bridge_slave_1: entered promiscuous mode [ 121.243228][ T36] IPVS: stop unused estimator thread 0... [ 121.320158][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.382242][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.599283][ T6477] team0: Port device team_slave_0 added [ 121.664507][ T6477] team0: Port device team_slave_1 added [ 121.985640][ T5862] Bluetooth: hci2: command tx timeout [ 122.135575][ T5862] Bluetooth: hci3: command tx timeout [ 122.261700][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.268986][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.297181][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.311173][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.322653][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.350096][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.389254][ T6652] syz_tun: entered allmulticast mode [ 122.857088][ T6477] hsr_slave_0: entered promiscuous mode [ 122.863774][ T6477] hsr_slave_1: entered promiscuous mode [ 122.898395][ T6477] debugfs: 'hsr0' already exists in 'hsr' [ 122.926927][ T6477] Cannot create hsr debugfs directory [ 122.989053][ T6582] chnl_net:caif_netlink_parms(): no params data found [ 123.651042][ T6590] chnl_net:caif_netlink_parms(): no params data found [ 124.055250][ T5862] Bluetooth: hci2: command tx timeout [ 124.151937][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.175450][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.193901][ T6582] bridge_slave_0: entered allmulticast mode [ 124.231641][ T6582] bridge_slave_0: entered promiscuous mode [ 124.300791][ T5862] Bluetooth: hci3: command tx timeout [ 124.379775][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.391635][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.401108][ T6582] bridge_slave_1: entered allmulticast mode [ 124.418392][ T6582] bridge_slave_1: entered promiscuous mode [ 124.594525][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 124.626627][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.751629][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.788281][ T6714] syz.0.181 uses obsolete (PF_INET,SOCK_PACKET) [ 124.855052][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.872661][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.888551][ T6590] bridge_slave_0: entered allmulticast mode [ 124.902152][ T6590] bridge_slave_0: entered promiscuous mode [ 124.971935][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.995927][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.005051][ T6590] bridge_slave_1: entered allmulticast mode [ 125.017896][ T6590] bridge_slave_1: entered promiscuous mode [ 125.083607][ T6582] team0: Port device team_slave_0 added [ 125.144581][ T6582] team0: Port device team_slave_1 added [ 125.153639][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 125.176955][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 125.223952][ T6590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.315419][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 125.333391][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 125.397804][ T6590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.461852][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.479094][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.521137][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.552857][ T6104] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.571738][ T6104] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.760288][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.817398][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.853275][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.886027][ T6104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.924840][ T36] bridge_slave_1: left allmulticast mode [ 126.021776][ T36] bridge_slave_1: left promiscuous mode [ 126.055676][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.071701][ T36] bridge_slave_0: left allmulticast mode [ 126.085485][ T36] bridge_slave_0: left promiscuous mode [ 126.095504][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.110584][ T36] bridge_slave_1: left allmulticast mode [ 126.122091][ T36] bridge_slave_1: left promiscuous mode [ 126.128833][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.136204][ T5862] Bluetooth: hci2: command tx timeout [ 126.154001][ T36] bridge_slave_0: left allmulticast mode [ 126.159901][ T36] bridge_slave_0: left promiscuous mode [ 126.167864][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.375527][ T5862] Bluetooth: hci3: command tx timeout [ 126.403478][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.187'. [ 126.550894][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.561215][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.572056][ T36] bond0 (unregistering): Released all slaves [ 126.862786][ T6752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.189'. [ 126.880266][ T6752] unsupported nlmsg_type 40 [ 126.911283][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.922903][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.932714][ T36] bond0 (unregistering): Released all slaves [ 126.957599][ T6590] team0: Port device team_slave_0 added [ 126.966828][ T6590] team0: Port device team_slave_1 added [ 126.980531][ T6115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.032368][ T6751] syz_tun: entered allmulticast mode [ 127.041688][ T6477] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.139679][ T6477] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.157100][ T6749] syz_tun: left allmulticast mode [ 127.209258][ T6477] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.268134][ T6477] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.307878][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.314903][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.342596][ T6590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.852060][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.860907][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.899001][ T6590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.938007][ T6582] hsr_slave_0: entered promiscuous mode [ 127.950352][ T6582] hsr_slave_1: entered promiscuous mode [ 127.957068][ T6582] debugfs: 'hsr0' already exists in 'hsr' [ 127.962919][ T6582] Cannot create hsr debugfs directory [ 128.320605][ T6590] hsr_slave_0: entered promiscuous mode [ 128.349972][ T6590] hsr_slave_1: entered promiscuous mode [ 128.370078][ T6590] debugfs: 'hsr0' already exists in 'hsr' [ 128.389397][ T6590] Cannot create hsr debugfs directory [ 128.685895][ T6789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.479118][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.681266][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.792321][ T36] hsr_slave_0: left promiscuous mode [ 129.801157][ T36] hsr_slave_1: left promiscuous mode [ 129.812838][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.828314][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.842736][ T36] hsr_slave_0: left promiscuous mode [ 129.855334][ T36] hsr_slave_1: left promiscuous mode [ 129.865448][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.877384][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.031567][ T6805] netlink: 60 bytes leftover after parsing attributes in process `syz.3.198'. [ 130.232159][ T36] team0 (unregistering): Port device team_slave_1 removed [ 130.264846][ T36] team0 (unregistering): Port device team_slave_0 removed [ 130.881951][ T36] team0 (unregistering): Port device team_slave_1 removed [ 130.915437][ T36] team0 (unregistering): Port device team_slave_0 removed [ 131.231802][ T6104] smc: removing ib device sz1 [ 131.307189][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.314385][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.345214][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.352462][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.430552][ T6582] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.544840][ T6582] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.608982][ T6582] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.702073][ T6582] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 132.707330][ T6590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.754796][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 132.786453][ T6590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.797982][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 132.834845][ T6590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.889644][ T6590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.933480][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 132.959806][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966306][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 132.967619][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.450368][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.672804][ T6582] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.751378][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.758692][ T6046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.802656][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.809892][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.893491][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.950154][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.008991][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.120665][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.127867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.204959][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.212218][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.504732][ T36] IPVS: stop unused estimator thread 0... [ 134.528803][ T36] IPVS: stop unused estimator thread 0... [ 135.312472][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.447693][ T6477] veth0_vlan: entered promiscuous mode [ 135.530291][ T6477] veth1_vlan: entered promiscuous mode [ 135.572951][ T6590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.693672][ T6477] veth0_macvtap: entered promiscuous mode [ 135.750037][ T6477] veth1_macvtap: entered promiscuous mode [ 135.858847][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.911999][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.010804][ T6101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.042171][ T6101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.081661][ T6101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.112183][ T6101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.407172][ T6582] veth0_vlan: entered promiscuous mode [ 136.488564][ T6582] veth1_vlan: entered promiscuous mode [ 136.541860][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.576635][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.653772][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.671976][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.740693][ T6582] veth0_macvtap: entered promiscuous mode [ 136.765498][ T6590] veth0_vlan: entered promiscuous mode [ 136.809348][ T6590] veth1_vlan: entered promiscuous mode [ 136.820580][ T6937] loop3: detected capacity change from 0 to 512 [ 136.846103][ T6582] veth1_macvtap: entered promiscuous mode [ 136.851968][ T6937] EXT4-fs: Ignoring removed oldalloc option [ 136.865300][ T6937] EXT4-fs: Ignoring removed bh option [ 136.930507][ T6937] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.218: corrupted in-inode xattr: e_value size too large [ 136.987407][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.028579][ T6937] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.218: couldn't read orphan inode 15 (err -117) [ 137.030287][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.122'. [ 137.084050][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.114435][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.122901][ T6590] veth0_macvtap: entered promiscuous mode [ 137.186860][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.199668][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.223566][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.233902][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.269159][ T6590] veth1_macvtap: entered promiscuous mode [ 137.269714][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.404757][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.462627][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.550658][ T6164] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.565055][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.589713][ T6164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.600936][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.648775][ T6164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.669127][ T6164] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.830034][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.868506][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.015386][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.047774][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.641664][ T6115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.675297][ T6115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.714011][ T6995] bridge_slave_0: left allmulticast mode [ 139.754795][ T6995] bridge_slave_0: left promiscuous mode [ 139.784424][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.858234][ T6995] bridge_slave_1: left allmulticast mode [ 139.868502][ T6995] bridge_slave_1: left promiscuous mode [ 139.874550][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.920104][ T6995] bond0: (slave bond_slave_0): Releasing backup interface [ 140.005805][ T6995] bond0: (slave bond_slave_1): Releasing backup interface [ 140.182193][ T6995] team0: Failed to send options change via netlink (err -105) [ 140.207991][ T6995] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 140.229762][ T6995] team0: Port device team_slave_0 removed [ 140.298890][ T6995] team0: Failed to send options change via netlink (err -105) [ 140.333980][ T6995] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 140.370986][ T6995] team0: Port device team_slave_1 removed [ 140.502412][ T6999] team0: Mode changed to "activebackup" [ 140.813449][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.233'. [ 141.909813][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 141.909831][ T30] audit: type=1326 audit(1757481163.098:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5118eba9 code=0x7ffc0000 [ 142.093359][ T30] audit: type=1326 audit(1757481163.148:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5d5118eba9 code=0x7ffc0000 [ 142.236517][ T30] audit: type=1326 audit(1757481163.148:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.5.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5118eba9 code=0x7ffc0000 [ 142.368080][ T7061] loop6: detected capacity change from 0 to 128 [ 142.558946][ T30] audit: type=1800 audit(1757481163.748:254): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.244" name="bus" dev="loop6" ino=1048620 res=0 errno=0 [ 142.681709][ T7066] syz.6.244: attempt to access beyond end of device [ 142.681709][ T7066] loop6: rw=2049, sector=609, nr_sectors = 432 limit=128 [ 143.240693][ T7077] loop6: detected capacity change from 0 to 1024 [ 143.308014][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 143.353449][ T7077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.377182][ T7079] netlink: 348 bytes leftover after parsing attributes in process `syz.5.247'. [ 143.448824][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 143.522499][ T7079] netlink: 348 bytes leftover after parsing attributes in process `syz.5.247'. [ 143.533957][ T7077] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 143.575598][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 143.719021][ T6590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.811518][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.248'. [ 146.235851][ T7125] sd 0:0:1:0: device reset [ 146.454638][ T7129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.667968][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 147.478096][ T7141] netlink: 'syz.5.266': attribute type 13 has an invalid length. [ 148.110977][ T7138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.654257][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.662085][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.100621][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.211755][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.646255][ T7138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.809663][ T1335] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.853554][ T1335] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.919892][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.7.275'. [ 152.014666][ T1335] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.388184][ T7138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.424448][ T1335] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.661130][ T7138] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.860599][ T7219] loop7: detected capacity change from 0 to 128 [ 152.867392][ T7220] Mount JFS Failure: -22 [ 152.871651][ T7220] jfs_mount failed w/return code = -22 [ 152.918005][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.954800][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.063109][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.106135][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.205068][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 154.773605][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 154.806406][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 154.906235][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 155.535316][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 156.264240][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 157.855498][ T7295] gtp0: entered promiscuous mode [ 157.860545][ T7295] gtp0: entered allmulticast mode [ 160.183935][ T7338] loop5: detected capacity change from 0 to 256 [ 160.244982][ T7336] Mount JFS Failure: -22 [ 160.257633][ T7336] jfs_mount failed w/return code = -22 [ 160.335426][ T7338] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.465683][ T7338] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.556533][ T30] audit: type=1800 audit(1757481181.708:255): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.301" name="bus" dev="loop5" ino=1048622 res=0 errno=0 [ 160.584735][ T7338] netlink: 'syz.5.301': attribute type 27 has an invalid length. [ 160.686628][ T30] audit: type=1804 audit(1757481181.738:256): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.301" name="/newroot/17/file0/bus" dev="loop5" ino=1048622 res=1 errno=0 [ 161.241484][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.7.304'. [ 163.494086][ T7368] loop3: detected capacity change from 0 to 1024 [ 163.526248][ T7368] ======================================================= [ 163.526248][ T7368] WARNING: The mand mount option has been deprecated and [ 163.526248][ T7368] and is ignored by this kernel. Remove the mand [ 163.526248][ T7368] option from the mount to silence this warning. [ 163.526248][ T7368] ======================================================= [ 163.613073][ T7370] loop5: detected capacity change from 0 to 512 [ 163.632107][ T7370] EXT4-fs: Ignoring removed nobh option [ 163.641415][ T7368] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.697501][ T7370] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.311: iget: bad i_size value: 38620345925642 [ 163.790229][ T7370] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.311: couldn't read orphan inode 15 (err -117) [ 163.827462][ T7368] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.309: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.959063][ T7370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.983972][ T7368] Quota error (device loop3): write_blk: dquota write failed [ 164.045292][ T7368] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 164.117319][ T7368] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.309: Failed to acquire dquot type 0 [ 164.166044][ T7368] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.309: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.231869][ T7368] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.309: Invalid inode bitmap blk 0 in block_group 0 [ 164.253409][ T13] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 164.298425][ T13] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 164.336769][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 164.369129][ T7368] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 164.380246][ T7378] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.311: iget: bad i_size value: 38620345925642 [ 164.417986][ T7368] EXT4-fs (loop3): 1 orphan inode deleted [ 164.440086][ T7368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.596803][ T7368] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.309: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 164.695484][ T7368] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.309: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 164.831757][ T5859] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.982880][ T7391] netlink: 'syz.0.315': attribute type 3 has an invalid length. [ 165.017193][ T7372] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 165.345980][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.316'. [ 165.941338][ T7405] process 'syz.3.314' launched '/dev/fd/3' with NULL argv: empty string added [ 165.956110][ T6240] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 166.105401][ T6240] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.105401][ T6240] [ 166.115081][ T6240] EXT4-fs (loop5): Total free blocks count 0 [ 166.307423][ T6240] EXT4-fs (loop5): Free/Dirty block details [ 166.313805][ T6240] EXT4-fs (loop5): free_blocks=0 [ 166.318885][ T6240] EXT4-fs (loop5): dirty_blocks=2256 [ 166.324295][ T6240] EXT4-fs (loop5): Block reservation details [ 166.362139][ T6240] EXT4-fs (loop5): i_reserved_data_blocks=2256 [ 167.139634][ T7428] loop3: detected capacity change from 0 to 128 [ 167.249267][ T6240] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 204 with error 28 [ 167.369908][ T7424] Mount JFS Failure: -22 [ 167.395976][ T7424] jfs_mount failed w/return code = -22 [ 167.546762][ T7438] netlink: 'syz.7.323': attribute type 13 has an invalid length. [ 167.754131][ T7438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.144070][ T7451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.151764][ T7451] IPv6: NLM_F_CREATE should be set when creating new route [ 168.159054][ T7451] IPv6: NLM_F_CREATE should be set when creating new route [ 168.245879][ T7451] ------------[ cut here ]------------ [ 168.251433][ T7451] WARNING: drivers/net/netdevsim/fib.c:831 at nsim_fib_event_nb+0xed8/0x1080, CPU#0: syz.0.328/7451 [ 168.262569][ T7451] Modules linked in: [ 168.266843][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT(full) [ 168.277649][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.289113][ T7451] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 168.294974][ T7451] Code: fa be 02 00 00 00 eb 0a e8 35 ff a3 fa be 01 00 00 00 4c 89 f7 e8 a8 8a ae fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 19 ff a3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 168.315064][ T7451] RSP: 0018:ffffc90002ef7008 EFLAGS: 00010283 [ 168.321355][ T7451] RAX: ffffffff871bacf7 RBX: 0000000000000001 RCX: 0000000000080000 [ 168.329453][ T7451] RDX: ffffc9000bd49000 RSI: 00000000000073af RDI: 00000000000073b0 [ 168.338003][ T7451] RBP: dffffc0000000000 R08: ffff888053adf42f R09: 1ffff1100a75be85 [ 168.346158][ T7451] R10: dffffc0000000000 R11: ffffed100a75be86 R12: ffff8880795bd000 [ 168.354245][ T7451] R13: ffffc90002ef7180 R14: 0000000000000000 R15: ffffc90002ef7198 [ 168.362337][ T7451] FS: 00007fddc91d36c0(0000) GS:ffff8881259f1000(0000) knlGS:0000000000000000 [ 168.371337][ T7451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.379446][ T7451] CR2: 0000001b2ea23ffc CR3: 00000000792e0000 CR4: 00000000003526f0 [ 168.388757][ T7451] Call Trace: [ 168.393270][ T7451] [ 168.396383][ T7451] notifier_call_chain+0x1b3/0x3e0 [ 168.401533][ T7451] ? atomic_notifier_call_chain+0x26/0x180 [ 168.407509][ T7451] atomic_notifier_call_chain+0xda/0x180 [ 168.413185][ T7451] call_fib_notifiers+0x31/0x60 [ 168.418134][ T7451] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 168.424585][ T7451] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 168.431706][ T7451] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 168.437069][ T7451] inet6_rtm_newroute+0x12f5/0x18c0 [ 168.442304][ T7451] ? kmem_cache_free+0x19a/0x690 [ 168.447345][ T7451] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 168.452922][ T7451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 168.458386][ T7451] ? __dev_queue_xmit+0x27b/0x3b50 [ 168.463526][ T7451] ? __dev_queue_xmit+0x1d79/0x3b50 [ 168.468895][ T7451] ? kasan_save_track+0x3e/0x80 [ 168.473790][ T7451] ? __kasan_slab_alloc+0x6c/0x80 [ 168.478961][ T7451] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 168.486010][ T7451] rtnetlink_rcv_msg+0x7cc/0xb70 [ 168.492346][ T7451] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 168.497581][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.503070][ T7451] ? ref_tracker_free+0x63a/0x7d0 [ 168.508260][ T7451] ? __asan_memcpy+0x40/0x70 [ 168.512872][ T7451] ? __pfx_ref_tracker_free+0x10/0x10 [ 168.518413][ T7451] ? __skb_clone+0x63/0x7a0 [ 168.522975][ T7451] netlink_rcv_skb+0x205/0x470 [ 168.527899][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.533476][ T7451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.538951][ T7451] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.544192][ T7451] netlink_unicast+0x82c/0x9e0 [ 168.549065][ T7451] ? __pfx_netlink_unicast+0x10/0x10 [ 168.554377][ T7451] ? netlink_sendmsg+0x642/0xb30 [ 168.559410][ T7451] ? skb_put+0x11b/0x210 [ 168.563686][ T7451] netlink_sendmsg+0x805/0xb30 [ 168.568523][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.573823][ T7451] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.578822][ T7451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.585563][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.590876][ T7451] __sock_sendmsg+0x21c/0x270 [ 168.596956][ T7451] ____sys_sendmsg+0x505/0x830 [ 168.601759][ T7451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.607204][ T7451] ? import_iovec+0x74/0xa0 [ 168.612415][ T7451] ___sys_sendmsg+0x21f/0x2a0 [ 168.617367][ T7451] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.622629][ T7451] ? __fget_files+0x2a/0x420 [ 168.627389][ T7451] ? __fget_files+0x3a0/0x420 [ 168.632107][ T7451] __x64_sys_sendmsg+0x19b/0x260 [ 168.637138][ T7451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.642638][ T7451] ? do_syscall_64+0xbe/0xfa0 [ 168.647418][ T7451] do_syscall_64+0xfa/0xfa0 [ 168.651942][ T7451] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.657235][ T7451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.663335][ T7451] ? clear_bhb_loop+0x60/0xb0 [ 168.668122][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.674034][ T7451] RIP: 0033:0x7fddc838eba9 [ 168.678585][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.699986][ T7451] RSP: 002b:00007fddc91d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.709699][ T7451] RAX: ffffffffffffffda RBX: 00007fddc85d5fa0 RCX: 00007fddc838eba9 [ 168.717792][ T7451] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 168.725867][ T7451] RBP: 00007fddc8411e19 R08: 0000000000000000 R09: 0000000000000000 [ 168.733862][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.741942][ T7451] R13: 00007fddc85d6038 R14: 00007fddc85d5fa0 R15: 00007ffc845d8888 [ 168.750010][ T7451] [ 168.753083][ T7451] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.760367][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT(full) [ 168.769550][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.779623][ T7451] Call Trace: [ 168.782902][ T7451] [ 168.785828][ T7451] dump_stack_lvl+0x99/0x250 [ 168.790413][ T7451] ? __asan_memcpy+0x40/0x70 [ 168.794997][ T7451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.800178][ T7451] ? __pfx__printk+0x10/0x10 [ 168.804760][ T7451] vpanic+0x237/0x6d0 [ 168.808741][ T7451] ? __pfx_vpanic+0x10/0x10 [ 168.813255][ T7451] ? is_bpf_text_address+0x292/0x2b0 [ 168.818533][ T7451] ? is_bpf_text_address+0x26/0x2b0 [ 168.823798][ T7451] panic+0xb9/0xc0 [ 168.827591][ T7451] ? __pfx_panic+0x10/0x10 [ 168.832031][ T7451] __warn+0x334/0x4c0 [ 168.836004][ T7451] ? nsim_fib_event_nb+0xed8/0x1080 [ 168.841197][ T7451] ? nsim_fib_event_nb+0xed8/0x1080 [ 168.846379][ T7451] report_bug+0x2be/0x4f0 [ 168.850697][ T7451] ? nsim_fib_event_nb+0xed8/0x1080 [ 168.855902][ T7451] ? nsim_fib_event_nb+0xed8/0x1080 [ 168.861125][ T7451] ? nsim_fib_event_nb+0xeda/0x1080 [ 168.866324][ T7451] handle_bug+0x84/0x160 [ 168.870558][ T7451] exc_invalid_op+0x1a/0x50 [ 168.875061][ T7451] asm_exc_invalid_op+0x1a/0x20 [ 168.879927][ T7451] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 168.885745][ T7451] Code: fa be 02 00 00 00 eb 0a e8 35 ff a3 fa be 01 00 00 00 4c 89 f7 e8 a8 8a ae fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 19 ff a3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 168.905438][ T7451] RSP: 0018:ffffc90002ef7008 EFLAGS: 00010283 [ 168.911505][ T7451] RAX: ffffffff871bacf7 RBX: 0000000000000001 RCX: 0000000000080000 [ 168.919470][ T7451] RDX: ffffc9000bd49000 RSI: 00000000000073af RDI: 00000000000073b0 [ 168.927426][ T7451] RBP: dffffc0000000000 R08: ffff888053adf42f R09: 1ffff1100a75be85 [ 168.935381][ T7451] R10: dffffc0000000000 R11: ffffed100a75be86 R12: ffff8880795bd000 [ 168.943338][ T7451] R13: ffffc90002ef7180 R14: 0000000000000000 R15: ffffc90002ef7198 [ 168.951303][ T7451] ? nsim_fib_event_nb+0xed7/0x1080 [ 168.956506][ T7451] ? nsim_fib_event_nb+0xed7/0x1080 [ 168.961795][ T7451] notifier_call_chain+0x1b3/0x3e0 [ 168.966901][ T7451] ? atomic_notifier_call_chain+0x26/0x180 [ 168.972697][ T7451] atomic_notifier_call_chain+0xda/0x180 [ 168.978324][ T7451] call_fib_notifiers+0x31/0x60 [ 168.983159][ T7451] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 168.989567][ T7451] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 168.996584][ T7451] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 169.001900][ T7451] inet6_rtm_newroute+0x12f5/0x18c0 [ 169.007092][ T7451] ? kmem_cache_free+0x19a/0x690 [ 169.012028][ T7451] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 169.017564][ T7451] ? __local_bh_enable_ip+0x12d/0x1c0 [ 169.022936][ T7451] ? __dev_queue_xmit+0x27b/0x3b50 [ 169.028032][ T7451] ? __dev_queue_xmit+0x1d79/0x3b50 [ 169.033212][ T7451] ? kasan_save_track+0x3e/0x80 [ 169.038065][ T7451] ? __kasan_slab_alloc+0x6c/0x80 [ 169.043101][ T7451] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 169.048630][ T7451] rtnetlink_rcv_msg+0x7cc/0xb70 [ 169.053564][ T7451] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 169.058666][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.064113][ T7451] ? ref_tracker_free+0x63a/0x7d0 [ 169.069123][ T7451] ? __asan_memcpy+0x40/0x70 [ 169.073722][ T7451] ? __pfx_ref_tracker_free+0x10/0x10 [ 169.079083][ T7451] ? __skb_clone+0x63/0x7a0 [ 169.083597][ T7451] netlink_rcv_skb+0x205/0x470 [ 169.088354][ T7451] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.093894][ T7451] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.099183][ T7451] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.104387][ T7451] netlink_unicast+0x82c/0x9e0 [ 169.109250][ T7451] ? __pfx_netlink_unicast+0x10/0x10 [ 169.114528][ T7451] ? netlink_sendmsg+0x642/0xb30 [ 169.119557][ T7451] ? skb_put+0x11b/0x210 [ 169.123789][ T7451] netlink_sendmsg+0x805/0xb30 [ 169.128550][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.133825][ T7451] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.138759][ T7451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.144031][ T7451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.149302][ T7451] __sock_sendmsg+0x21c/0x270 [ 169.153972][ T7451] ____sys_sendmsg+0x505/0x830 [ 169.158745][ T7451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.164052][ T7451] ? import_iovec+0x74/0xa0 [ 169.168561][ T7451] ___sys_sendmsg+0x21f/0x2a0 [ 169.173238][ T7451] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.178478][ T7451] ? __fget_files+0x2a/0x420 [ 169.183060][ T7451] ? __fget_files+0x3a0/0x420 [ 169.187768][ T7451] __x64_sys_sendmsg+0x19b/0x260 [ 169.192698][ T7451] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.198162][ T7451] ? do_syscall_64+0xbe/0xfa0 [ 169.202912][ T7451] do_syscall_64+0xfa/0xfa0 [ 169.207399][ T7451] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.212620][ T7451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.218673][ T7451] ? clear_bhb_loop+0x60/0xb0 [ 169.223358][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.229270][ T7451] RIP: 0033:0x7fddc838eba9 [ 169.233684][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.253299][ T7451] RSP: 002b:00007fddc91d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.261707][ T7451] RAX: ffffffffffffffda RBX: 00007fddc85d5fa0 RCX: 00007fddc838eba9 [ 169.269843][ T7451] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 169.277813][ T7451] RBP: 00007fddc8411e19 R08: 0000000000000000 R09: 0000000000000000 [ 169.285868][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.293865][ T7451] R13: 00007fddc85d6038 R14: 00007fddc85d5fa0 R15: 00007ffc845d8888 [ 169.301878][ T7451] [ 169.305136][ T7451] Kernel Offset: disabled [ 169.309451][ T7451] Rebooting in 86400 seconds..