last executing test programs: 8m50.567352703s ago: executing program 3 (id=218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d48", 0x39}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0xbc, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0xa4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}]}, {0x16, 0x6, "b2d786fcaf23af7c6c63fc7a5de831320def"}, {0xc}, {0xc}}}]}, {0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000280), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8m49.101577922s ago: executing program 3 (id=219): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000022000103780000000000000001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m47.440129551s ago: executing program 3 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025ffff0000002020207b1af8ff000000c94d5a9201cee82c91984438010300bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x30, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f809d3af1ed2a674fa5000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xffff, 0xe5, 0xfffff800, 0xc000000, 0x12, 0x7, 0xc}, &(0x7f0000000280)=0x9c) 8m42.022786253s ago: executing program 3 (id=231): pwrite64(0xffffffffffffffff, &(0x7f0000000180)="f3a25d88c824cc54ed8f9674f50c25e222cf42c0c8b848d2689c1fe23f0ed85c9eed1977a42e08b3dfc566443f04dc7c97931ef28b0b7ad0c3b13251e47d532efae5eb8fb8e3e1b57e97ce47beb37c155d2cab4f80733afea53c6ccae32781fc8477e3fa24e67c24f00102d3f120bd3e2256adc663e741d599", 0x79, 0xfffff9b2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0xd, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) msgget(0x0, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8m38.858281247s ago: executing program 3 (id=238): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, &(0x7f0000000680), 0x0, 0x401}}, 0x30) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/227) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 8m35.37956397s ago: executing program 3 (id=243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000300), 0x8400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) bind$alg(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20044881) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0x1000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 8m18.97393281s ago: executing program 32 (id=243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000300), 0x8400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x6) bind$alg(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20044881) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4, 0x7fffffff, 0x0, 0x1000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) 6m23.783212759s ago: executing program 0 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m21.131866145s ago: executing program 0 (id=449): gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x7809, 0x3, 0x7, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x5, [{@empty, 0x140}, {@multicast2, 0xc6}, {@local, 0x6}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYBLOB="5ab79df02170a9a8e786983bb52f6d0feb278a13ff95fc81388954dbe6c72fa4021b00e921caaa0f853737753917a93554f7d8f1dbcdc7f9ef946c897190a7070ab6e59ee7e24b49174eceaba4da2b0e236d0db1a7f101f1", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000500)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000400)}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020100c0"]) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=r7, @ANYRES64, @ANYRESOCT=r6], 0x48) ppoll(0x0, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6m16.309977741s ago: executing program 4 (id=455): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() keyctl$set_reqkey_keyring(0xe, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 6m15.701456065s ago: executing program 0 (id=458): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 6m15.48266882s ago: executing program 0 (id=459): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX], 0x1, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") getgid() 6m13.759768288s ago: executing program 4 (id=462): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 6m12.443147396s ago: executing program 0 (id=463): epoll_create(0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x401}}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00ff0095e2e026c29d66a4509067245a3a1af55690ec41880b157bb9a8faa7b4fac2ac9a09bad62539f3aa462b3f8625b18910aee08ea41f6b41ba85"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7f, 0x3a, ')+\'&\'\\%+', 0x3a, 'smackfsroot', 0x3a, './file0', 0x3a, [0x43]}, 0x3b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x29, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x80, 0x800) sendmsg$inet(r3, &(0x7f0000000b80)={&(0x7f0000000500)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000600)}, {&(0x7f00000006c0)="8869f7f9c5642d8cffa7962d224074ad694557aa6cb21e58978e852a772cedf8d485ec4f8bd3a6b10b4fe0268abf31df19335367c079a4fb16ef39dec870f7ed6d036e549d24b6bd7d06c4537d4197051096cca92a030449d22d546b486f7c73946f97d8c02b5fcdd41d8c4116c41e62738811b5dc0c2651a47cfb95d7f2123f", 0x80}, {&(0x7f00000009c0)="a946e04f635a6c97b14db26e31611202b6d060f19de5e97ccd2bdeb889ac4e566c87966ef997d6a6f43f220c942ee4147e5d96dd4260162b1c2546eedf5afa70bbe00d5eaf0bf7f1f580e52f0787", 0x4e}, {&(0x7f0000000840)="05e4bdccc1ba27d9a51b31524a72e83d94baed78dcd7b2c6d14c1941774c", 0x1e}, {&(0x7f0000000a80)="677757edfa7693e75157df6dcbe3373149959ee02a46216056a2134b4adac08971048e04956c5c57e0cdf6c02aa53face5d6c9110d4f5f5c5307453b2318003691c6502a338be95c172222c951ce144430159e8af164705c0545ea4dc39ca045de2c3be45c402a9c8c67d64ca3b638eee1ae107eb6187604e443caafbd745985535027fe5403d698ddc30399", 0x8c}], 0x5, &(0x7f0000000b40)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}], 0x10}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r5 = openat$vimc2(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r5, 0xc0245629, &(0x7f0000000400)={0x0, 0x4, 0x5, '\x00', &(0x7f0000000240)=0x1}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x20000004, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="03000063328b071f2405356fb7a6b0d8e70c4553906cb9ad04b00038bd7673300601a648cc16ef67f7740000000038ae8ee0000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6m12.015979144s ago: executing program 4 (id=465): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x36a) ioctl$VIDIOC_ENUMINPUT(r2, 0xc04c561a, &(0x7f0000000380)={0x1, "497aa4ec7afa5ae757b46c4184492f8c3de6b2624e208c9905349b9adfc31671", 0x1, 0x9, 0x2, 0x320000, 0x20800, 0x4}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x23d) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 6m9.981452645s ago: executing program 0 (id=468): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d48", 0x39}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0xbc, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0xa4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}]}, {0x16, 0x6, "b2d786fcaf23af7c6c63fc7a5de831320def"}, {0xc}, {0xc}}}]}, {0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000280), &(0x7f0000000680)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6m5.256449124s ago: executing program 4 (id=474): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX], 0x1, 0x14ee, &(0x7f0000004000)="$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") getgid() 6m3.64608289s ago: executing program 4 (id=476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r6, 0x4bfb, &(0x7f0000000000)) 6m1.858565589s ago: executing program 4 (id=480): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, &(0x7f0000000680), 0x0, 0x401}}, 0x30) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x5e9d252172e48d3a, @fd_index}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/227) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 5m54.623212397s ago: executing program 33 (id=468): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d48", 0x39}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0xbc, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0xa4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}]}, {0x16, 0x6, "b2d786fcaf23af7c6c63fc7a5de831320def"}, {0xc}, {0xc}}}]}, {0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000280), &(0x7f0000000680)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5m46.385914704s ago: executing program 34 (id=480): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x14, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, &(0x7f0000000680), 0x0, 0x401}}, 0x30) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x5e9d252172e48d3a, @fd_index}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/227) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 2m9.9065973s ago: executing program 7 (id=841): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) clock_gettime(0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) 2m3.470328967s ago: executing program 7 (id=855): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 2m0.618179541s ago: executing program 7 (id=862): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='selinuxfs\x00', 0x1008001, &(0x7f0000000200)='\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m57.066351854s ago: executing program 7 (id=868): io_uring_setup(0x1e0b, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x100, 0x1, 0x10027d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x3) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x1}, 0x0) 1m2.562796812s ago: executing program 7 (id=868): io_uring_setup(0x1e0b, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x100, 0x1, 0x10027d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x3) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x1}, 0x0) 32.550509354s ago: executing program 7 (id=868): io_uring_setup(0x1e0b, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x100, 0x1, 0x10027d}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x3) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="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", 0x427}], 0x1}, 0x0) 18.659893791s ago: executing program 2 (id=1040): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() keyctl$set_reqkey_keyring(0xe, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 16.520976758s ago: executing program 1 (id=1043): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0xfffffffd, 0x7}) preadv(r3, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getrlimit(0x3, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 16.236979091s ago: executing program 1 (id=1044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffd8) 16.092513874s ago: executing program 2 (id=1045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {}, {}, {}, {}, {}, {0x100}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x10010, r3, 0xb5e9f000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x400}) r7 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xc, 0x0, &(0x7f0000000240)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000002c0)={0x2, 0x0, 0x40000002}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14.414457316s ago: executing program 1 (id=1048): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x5, 0x6, 0x5}) 12.908839211s ago: executing program 1 (id=1049): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, 0x0, 0x9801) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/nf_conntrack_expect\x00') read$FUSE(r4, &(0x7f0000000780)={0x2020}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)}, 0x10000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='contention_end\x00', r6}, 0x18) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000300)={0x0, 'vxcan1\x00'}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'bridge0\x00', 0x3}) 12.772399424s ago: executing program 2 (id=1051): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00'}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001c) socket$inet6_udp(0xa, 0x2, 0x0) 12.494246442s ago: executing program 5 (id=1053): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x1d7f, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x1794, &(0x7f0000000080)={0x0, 0xf133, 0x0, 0x80000000, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 11.527085465s ago: executing program 2 (id=1054): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvebNmaNGmXrZn5fOC259x70nNP7v2enpOTkACG1mT2oxDxakR8m0Qcajk2GvnByY1y6w+uzWVbEvX6Z38lkeT7muWT/Pd4nnklIn77OuJEYXO91dW1xVK5nC7n+ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dvbX3z3D8/fHrno9PfHFv//pd7h28lcSYO5sda2/EUrrdmJmMyf07G4swTBaf7UNkgSXb7BNiRkTzOxyLrAw7FSB71wP/fVxFRB4ZUIv5hSDXHAc25fZ/mwS+M+x9uTIA2tz/ZeG0k9jXmRgfWk8dmRtl8d6IP9Wd1/Prn7VvZFv17HQKgq+s3IuLU6Gjn/m/nTvVQ5sk69H/w/NzJxj9vtRv/FB6Of6LN+Ge8TezuRPf4L9zrQzUdZeO/D9qOfx8uWk2M5LmXGmO+seTCxXKa9W0vR8TxGNub5bdazzm9frfe6Vjr+C/bsvqbY8H8PO6N7n38MfOlWulp2tzq/o2I17qMf5M21z97Ps71WMfR9PbrnY51b/+zVf854o221//Rilay9frkVON+mGreFZv9ffPo753q3+32Z9f/wNbtn0ha12ur26/jp33/pp2OTSb5ouk27/89yeeN9J5839VSrbY8HbEn+WTz/plHj23mm+Wz9h8/tnX/1+7+3x8RX/TY/ptHbnYsOgjXf35b13/7ibsff/ljp/p76//ebqSO53t66f96PcGnee4AAAAAAABg0BQi4mAkheLDdKFQLG68v+NIHCiUK9XaiQuVlUvz0fis7ESMFZor3eMt74eYzt8P28zPPJGfjYjDEfHdyP5GvjhXKc/vduMBAAAAAAAAAAAAAAAAAABgQIx3+Px/5o+R3T474Jnzld8wvLrGfz++6QkYSP7/w/AS/zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXXu7Nlsq68/uDaX5eevrK4sVq6cnE+ri8WllbniXGX5cnGhUlkop8W5ylK3v1euVC5Pz8TK1alaWq1NVVfXzi9VVi7Vzl9cKi2k59Ox59IqAAAAAAAAAAAAAAAAAAAAeLFUV9cWS+VyuiwhsaPE6GCchkSfE7vdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8FAAD//wZvNao=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 10.343588957s ago: executing program 2 (id=1056): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) 10.112809585s ago: executing program 5 (id=1057): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0xb, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) unshare(0x40050340) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x18b801, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000240), 0x8180, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x5e9d252172e48d3a, @fd_index}) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/227) 8.571987831s ago: executing program 5 (id=1060): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x5, 0x6, 0x5}) 7.057166728s ago: executing program 5 (id=1061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r6, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.97741201s ago: executing program 6 (id=1062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) tkill(0x0, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x541b, &(0x7f0000000000)={0x0, @default, @bpq0, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = io_uring_setup(0x320c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="e600"/20, @ANYRES32=0x0, @ANYBLOB="e802a17636c3e30df1ac001000000000000000000000000000000000000000000000000000000000000eab399fa7b65e0c2c587873617592708bcb72c0811556faf464f9924a78e544d6d3167506c60ed6c38188f14a683bbeafeed94aa98d0e37e650ee498cb41cc2dd5a4c48114bf9d900646ca65ae26732"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r8, 0x40047452, &(0x7f0000000100)) 5.93448416s ago: executing program 6 (id=1063): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.754370843s ago: executing program 6 (id=1064): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6(0xa, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00'}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001c) socket$inet6_udp(0xa, 0x2, 0x0) 4.729939229s ago: executing program 6 (id=1065): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d48", 0x39}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0xbc, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0xa4, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7}]}]}, {0x16, 0x6, "b2d786fcaf23af7c6c63fc7a5de831320def"}, {0xc}, {0xc}}}]}, {0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000080), 0xfffffe13) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000040000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000280), &(0x7f0000000680)}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x1e8640, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.639042255s ago: executing program 5 (id=1066): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r2 = syz_open_dev$vcsu(0x0, 0x9, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0x5}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r6}, 0x38) close(0x3) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000005c0), 0x34, 0x7, 0x1, 0xffff, 0x0, @void, @value}, 0x28) 4.268869892s ago: executing program 1 (id=1067): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x1d7f, &(0x7f00000004c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x1794, &(0x7f0000000080)={0x0, 0xf133, 0x0, 0x80000000, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.921612914s ago: executing program 2 (id=1068): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2) 3.372982937s ago: executing program 35 (id=1068): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000c80)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000004c0)='./bus/file0\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2) 1.384202563s ago: executing program 6 (id=1070): pwrite64(0xffffffffffffffff, &(0x7f0000000180)="f3a25d88c824cc54ed8f9674f50c25e222cf42c0c8b848d2689c1fe23f0ed85c9eed1977a42e08b3dfc566443f04dc7c97931ef28b0b7ad0c3b13251e4", 0x3d, 0xfffff9b2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0xd, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) msgget(0x0, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000095"]) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 321.005668ms ago: executing program 5 (id=1071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 251.084418ms ago: executing program 6 (id=1072): seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x5, 0x6, 0x5}) 0s ago: executing program 1 (id=1073): socket$kcm(0x2, 0x5, 0x84) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) close_range(r0, r3, 0x0) kernel console output (not intermixed with test programs): 621752][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.631850][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.643017][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.654234][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.708477][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.709611][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.717802][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.732060][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.738226][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.756678][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.815688][ T5828] veth0_vlan: entered promiscuous mode [ 80.816605][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.828399][ T5828] veth1_vlan: entered promiscuous mode [ 80.852808][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.899983][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.913933][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.966855][ T5828] veth0_macvtap: entered promiscuous mode [ 80.972256][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.980808][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.994508][ T5828] veth1_macvtap: entered promiscuous mode [ 81.001941][ T5830] Bluetooth: hci4: command tx timeout [ 81.007746][ T5830] Bluetooth: hci3: command tx timeout [ 81.010998][ T5833] Bluetooth: hci0: command tx timeout [ 81.070180][ T3900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.070206][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.084671][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.095179][ T5844] Bluetooth: hci2: command tx timeout [ 81.111230][ T5833] Bluetooth: hci1: command tx timeout [ 81.113936][ T3900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.123949][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.135709][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.147245][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.158021][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.169100][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.180075][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.191412][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.204185][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.239732][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.269782][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.287901][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.316876][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.329727][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.348212][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.359133][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.380281][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.392848][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.573649][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.584689][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.593877][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.604506][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.605936][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.892027][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.955203][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.034297][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.284573][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.315803][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.635388][ T5844] Bluetooth: hci0: command tx timeout [ 83.642764][ T5844] Bluetooth: hci3: command tx timeout [ 83.648659][ T5844] Bluetooth: hci4: command tx timeout [ 83.658021][ T5844] Bluetooth: hci2: command tx timeout [ 83.721113][ T5844] Bluetooth: hci1: command tx timeout [ 84.310799][ T5932] process 'syz.1.7' launched './file0' with NULL argv: empty string added [ 84.500592][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.511276][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.527256][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.535708][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.448822][ T5949] random: crng reseeded on system resumption [ 87.943663][ T25] cfg80211: failed to load regulatory.db [ 88.128276][ T5953] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 88.666872][ T46] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 89.268039][ T46] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 89.867508][ T5968] ISOFS: Unable to identify CD-ROM format. [ 90.717880][ T5969] ISOFS: Unable to identify CD-ROM format. [ 90.765089][ T5969] Process accounting resumed [ 90.783814][ T5969] Zero length message leads to an empty skb [ 91.463677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.383935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.384066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.402137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.486359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.588817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.588891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.687806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.691198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 92.721538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.782285][ T5981] loop2: detected capacity change from 0 to 256 [ 93.888656][ T5981] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 98.688975][ T6014] loop3: detected capacity change from 0 to 256 [ 98.725992][ T6014] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 98.811716][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.834090][ T6021] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 99.862044][ T6024] program syz.2.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.121202][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 100.567662][ T5881] usb 5-1: device descriptor read/all, error -71 [ 100.683486][ T6021] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.739127][ T6021] syz.0.30 (6021) used greatest stack depth: 18456 bytes left [ 100.880880][ T6032] loop0: detected capacity change from 0 to 16 [ 101.109472][ T6034] bridge0: port 3(syz_tun) entered blocking state [ 101.116536][ T6034] bridge0: port 3(syz_tun) entered disabled state [ 101.124116][ T6034] syz_tun: entered allmulticast mode [ 101.131274][ T6034] syz_tun: entered promiscuous mode [ 101.137924][ T6034] bridge0: port 3(syz_tun) entered blocking state [ 101.145981][ T6034] bridge0: port 3(syz_tun) entered forwarding state [ 101.208492][ T6032] erofs (device loop0): mounted with root inode @ nid 36. [ 101.375068][ T6036] program syz.2.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.389872][ T6041] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 102.411441][ T6041] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 105.861226][ T6066] loop0: detected capacity change from 0 to 2048 [ 105.959846][ T6066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.141190][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.479221][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.601154][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 107.612036][ T5917] usb 5-1: device descriptor read/all, error -71 [ 108.010351][ T6082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.38'. [ 109.468682][ T6093] random: crng reseeded on system resumption [ 110.465207][ T6099] loop0: detected capacity change from 0 to 16 [ 110.501998][ T6099] erofs (device loop0): mounted with root inode @ nid 36. [ 110.640541][ T6103] loop1: detected capacity change from 0 to 256 [ 110.933146][ T6106] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 110.952394][ T6106] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 112.011289][ T6110] program syz.2.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.131808][ T6111] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 112.677730][ T6103] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 112.978402][ T6111] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.468138][ T6121] bridge0: port 3(syz_tun) entered blocking state [ 113.475240][ T6121] bridge0: port 3(syz_tun) entered disabled state [ 113.484231][ T6121] syz_tun: entered allmulticast mode [ 113.491482][ T6121] syz_tun: entered promiscuous mode [ 113.499082][ T6121] bridge0: port 3(syz_tun) entered blocking state [ 113.505935][ T6121] bridge0: port 3(syz_tun) entered forwarding state [ 114.489070][ T6123] loop0: detected capacity change from 0 to 512 [ 114.642134][ T6123] ======================================================= [ 114.642134][ T6123] WARNING: The mand mount option has been deprecated and [ 114.642134][ T6123] and is ignored by this kernel. Remove the mand [ 114.642134][ T6123] option from the mount to silence this warning. [ 114.642134][ T6123] ======================================================= [ 115.398741][ T6123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.428984][ T6123] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.033354][ T6133] EXT4-fs error (device loop0): ext4_xattr_block_find:1877: inode #15: comm syz.0.52: corrupted xattr block 32: invalid header [ 116.292379][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.334135][ T6136] loop1: detected capacity change from 0 to 2048 [ 116.466502][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.793990][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.941107][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 117.406984][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.823974][ T5917] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 117.833847][ T5917] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 117.845967][ T5917] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.859599][ T5917] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 117.874350][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.581162][ T5917] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.590452][ T5917] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.775335][ T6165] loop4: detected capacity change from 0 to 16 [ 119.812319][ T6165] erofs (device loop4): mounted with root inode @ nid 36. [ 119.913120][ T5917] usb 4-1: Product: syz [ 119.977433][ T5917] usb 4-1: Manufacturer: syz [ 119.978120][ T6169] erofs (device loop4): corrupted dir block 0 @ nid 36 [ 120.036517][ T6169] erofs (device loop4): corrupted dir block 0 @ nid 36 [ 120.270031][ T5917] usb 4-1: config 0 descriptor?? [ 120.278760][ T5917] usb 4-1: can't set config #0, error -71 [ 120.290162][ T5917] usb 4-1: USB disconnect, device number 2 [ 121.069390][ T6177] ISOFS: Unable to identify CD-ROM format. [ 121.242167][ T6177] Process accounting resumed [ 128.545937][ T6222] loop0: detected capacity change from 0 to 16 [ 128.578471][ T6222] erofs (device loop0): mounted with root inode @ nid 36. [ 128.899380][ T6224] random: crng reseeded on system resumption [ 129.612540][ T6229] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 129.620098][ T6229] erofs (device loop0): corrupted dir block 0 @ nid 36 [ 131.524601][ T6252] loop3: detected capacity change from 0 to 512 [ 131.622834][ T6252] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.81: corrupted in-inode xattr: invalid ea_ino [ 131.662031][ T6252] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.81: couldn't read orphan inode 15 (err -117) [ 131.679096][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.787644][ T6256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.82'. [ 132.428674][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.534664][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.547776][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.601399][ T6275] loop2: detected capacity change from 0 to 16 [ 134.905636][ T6275] erofs (device loop2): mounted with root inode @ nid 36. [ 135.310718][ T6280] erofs (device loop2): corrupted dir block 0 @ nid 36 [ 135.530324][ T6282] erofs (device loop2): corrupted dir block 0 @ nid 36 [ 135.995028][ T6292] loop2: detected capacity change from 0 to 512 [ 136.887689][ T6292] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.94: corrupted in-inode xattr: invalid ea_ino [ 136.913958][ T6292] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.94: couldn't read orphan inode 15 (err -117) [ 136.932940][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.982794][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.482376][ T6304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.95'. [ 139.166988][ T6311] ISOFS: Unable to identify CD-ROM format. [ 139.327125][ T6311] Process accounting resumed [ 139.790625][ T6315] loop1: detected capacity change from 0 to 256 [ 139.857699][ T6315] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 141.801379][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.504225][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 143.904906][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 143.944038][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 143.966102][ T6338] loop4: detected capacity change from 0 to 512 [ 144.021432][ T6338] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.106: corrupted in-inode xattr: invalid ea_ino [ 144.039114][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 144.051341][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 144.064882][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.080072][ T6338] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.106: couldn't read orphan inode 15 (err -117) [ 144.096913][ T6338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.130853][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.140997][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.150949][ T9] usb 4-1: Product: syz [ 144.155381][ T9] usb 4-1: Manufacturer: syz [ 144.160030][ T9] usb 4-1: SerialNumber: syz [ 144.343068][ T9] usb 4-1: config 0 descriptor?? [ 144.349762][ T9] usb 4-1: can't set config #0, error -71 [ 144.351744][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.368997][ T9] usb 4-1: USB disconnect, device number 3 [ 144.451075][ T6346] program syz.2.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.373378][ T6352] netlink: 596 bytes leftover after parsing attributes in process `syz.2.110'. [ 145.572076][ T6355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.108'. [ 147.335006][ T6352] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.462636][ T6363] loop3: detected capacity change from 0 to 256 [ 147.519629][ T6363] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 149.819572][ T6377] random: crng reseeded on system resumption [ 151.695378][ T6392] loop0: detected capacity change from 0 to 512 [ 151.926007][ T6392] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.118: corrupted in-inode xattr: invalid ea_ino [ 151.955734][ T6392] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.118: couldn't read orphan inode 15 (err -117) [ 151.980874][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.079913][ T9] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 152.116019][ T9] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 152.182178][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.890922][ T6385] ISOFS: Unable to identify CD-ROM format. [ 155.461348][ T6421] loop4: detected capacity change from 0 to 256 [ 155.517310][ T6421] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 159.859927][ T6448] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'. [ 160.485652][ T6451] random: crng reseeded on system resumption [ 162.243049][ T6461] loop4: detected capacity change from 0 to 512 [ 162.318775][ T6461] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.131: corrupted in-inode xattr: invalid ea_ino [ 162.464372][ T6461] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.131: couldn't read orphan inode 15 (err -117) [ 162.478224][ T6461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.472202][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.396456][ T6501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'. [ 168.932671][ T6511] loop0: detected capacity change from 0 to 512 [ 169.366011][ T6511] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.150: corrupted in-inode xattr: invalid ea_ino [ 169.385853][ T6511] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.150: couldn't read orphan inode 15 (err -117) [ 169.406512][ T6511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.758247][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.825792][ T6523] random: crng reseeded on system resumption [ 175.785205][ T6562] ISOFS: Unable to identify CD-ROM format. [ 175.810913][ T6562] Process accounting resumed [ 178.445156][ T6574] bond0: entered promiscuous mode [ 178.450327][ T6574] bond_slave_0: entered promiscuous mode [ 178.460280][ T6574] bond_slave_1: entered promiscuous mode [ 178.718393][ T6576] loop4: detected capacity change from 0 to 512 [ 180.849604][ T6597] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 182.899820][ T6610] random: crng reseeded on system resumption [ 188.890795][ T6640] loop0: detected capacity change from 0 to 512 [ 188.920736][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.993658][ T6640] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.181: corrupted in-inode xattr: invalid ea_ino [ 189.008861][ T6640] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.181: couldn't read orphan inode 15 (err -117) [ 189.028992][ T6640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.079823][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.309802][ T6661] can0: slcan on ttyS3. [ 191.285371][ T6671] program syz.0.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.221369][ T6661] can0 (unregistered): slcan off ttyS3. [ 194.369101][ T6695] ISOFS: Unable to identify CD-ROM format. [ 194.791855][ T6700] can0: slcan on ttyS3. [ 194.920651][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.927276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.261366][ T6704] can0 (unregistered): slcan off ttyS3. [ 197.833633][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 197.924309][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 197.930565][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 197.940633][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 197.946860][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 202.373580][ T6767] sctp: failed to load transform for md5: -2 [ 203.013513][ T6790] can0: slcan on ttyS3. [ 205.261126][ T6794] can0 (unregistered): slcan off ttyS3. [ 205.744243][ T6817] program syz.3.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.179779][ T6802] program syz.1.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.331772][ T6854] netlink: 72 bytes leftover after parsing attributes in process `syz.2.220'. [ 211.215332][ T6872] random: crng reseeded on system resumption [ 212.208316][ T6877] overlayfs: failed to resolve './file1': -2 [ 213.233219][ T6895] random: crng reseeded on system resumption [ 213.354395][ T6883] bond0: entered promiscuous mode [ 213.359614][ T6883] bond_slave_0: entered promiscuous mode [ 213.365572][ T6883] bond_slave_1: entered promiscuous mode [ 213.371583][ T6883] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 219.352353][ T6948] netlink: 48 bytes leftover after parsing attributes in process `syz.1.236'. [ 219.662746][ T6955] program syz.0.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.491406][ T6956] random: crng reseeded on system resumption [ 222.793758][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 224.379732][ T6993] random: crng reseeded on system resumption [ 227.852478][ T7010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.249'. [ 229.192628][ T7025] can0: slcan on ttyS3. [ 231.431314][ T7025] can0 (unregistered): slcan off ttyS3. [ 233.532661][ T7063] can0: slcan on ttyS3. [ 234.282789][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.260'. [ 236.309693][ T7072] can0 (unregistered): slcan off ttyS3. [ 239.960823][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.971952][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.980190][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.989389][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.005138][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 240.012686][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.435073][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 240.856122][ T7122] capability: warning: `syz.4.270' uses deprecated v2 capabilities in a way that may be insecure [ 240.973867][ T7143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.272'. [ 242.072217][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.079435][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.095788][ T5883] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 242.113854][ T5840] Bluetooth: hci5: command tx timeout [ 242.136764][ T7126] bridge_slave_0: entered allmulticast mode [ 242.147056][ T7156] netlink: 1608 bytes leftover after parsing attributes in process `syz.1.274'. [ 242.176377][ T7126] bridge_slave_0: entered promiscuous mode [ 242.185107][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.202909][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.264991][ T7126] bridge_slave_1: entered allmulticast mode [ 242.271132][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 242.277755][ T5883] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 242.286278][ T5883] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 242.301839][ T7126] bridge_slave_1: entered promiscuous mode [ 242.354465][ T5883] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.406049][ T5883] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 242.426595][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 243.471526][ T5883] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 243.481783][ T5883] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 243.490296][ T5883] usb 3-1: Product: syz [ 243.541240][ T5883] usb 3-1: Manufacturer: syz [ 243.545865][ T5883] usb 3-1: SerialNumber: syz [ 243.584814][ T5883] usb 3-1: config 0 descriptor?? [ 243.612493][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.633933][ T5883] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 243.692225][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.766511][ T5883] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 244.942172][ T5840] Bluetooth: hci5: command tx timeout [ 245.449319][ T5883] usb 3-1: USB disconnect, device number 2 [ 245.460739][ T5883] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 245.657954][ T7126] team0: Port device team_slave_0 added [ 245.695847][ T7126] team0: Port device team_slave_1 added [ 247.102267][ T5840] Bluetooth: hci5: command tx timeout [ 247.191603][ T6975] bridge0: port 3(syz_tun) entered disabled state [ 248.737009][ T5879] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 248.745730][ T5879] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 248.837960][ T6975] syz_tun (unregistering): left allmulticast mode [ 249.058556][ T6975] syz_tun (unregistering): left promiscuous mode [ 249.065127][ T6975] bridge0: port 3(syz_tun) entered disabled state [ 249.361337][ T5840] Bluetooth: hci5: command tx timeout [ 250.761129][ T7205] random: crng reseeded on system resumption [ 251.638561][ T7212] loop1: detected capacity change from 0 to 512 [ 251.674562][ T7212] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 251.701500][ T7212] System zones: 1-12 [ 251.741490][ T7212] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.288: corrupted in-inode xattr: invalid ea_ino [ 251.775924][ T7212] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.288: couldn't read orphan inode 15 (err -117) [ 251.820427][ T7212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.634804][ T5831] syz-executor (5831) used greatest stack depth: 18160 bytes left [ 252.708658][ T1053] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.764779][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.774625][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.840605][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.884747][ T1053] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.910414][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.934447][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.049028][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.162802][ T1053] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.307782][ T1053] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.320082][ T7126] hsr_slave_0: entered promiscuous mode [ 254.361524][ T7126] hsr_slave_1: entered promiscuous mode [ 254.395218][ T7126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.450458][ T7126] Cannot create hsr debugfs directory [ 255.111317][ T1053] bridge_slave_1: left allmulticast mode [ 255.142807][ T1053] bridge_slave_1: left promiscuous mode [ 255.187316][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.330366][ T1053] bridge_slave_0: left allmulticast mode [ 255.367600][ T1053] bridge_slave_0: left promiscuous mode [ 255.397045][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.362292][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.368677][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.843042][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.463546][ T7257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.296'. [ 262.040285][ T5881] hid (null): unknown global tag 0xe [ 262.051195][ T5881] hid (null): unknown global tag 0xe [ 262.068160][ T5881] hid (null): unknown global tag 0xc [ 262.086590][ T5881] hid (null): unknown global tag 0xd [ 262.109390][ T5881] hid-generic 0000:0004:00A9.0004: unknown main item tag 0x0 [ 262.131274][ T5881] hid-generic 0000:0004:00A9.0004: unknown global tag 0xe [ 262.150072][ T5881] hid-generic 0000:0004:00A9.0004: item 0 2 1 14 parsing failed [ 262.169708][ T5881] hid-generic 0000:0004:00A9.0004: probe with driver hid-generic failed with error -22 [ 262.222883][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.249301][ T1053] bond_slave_0: left promiscuous mode [ 262.277814][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.336007][ T1053] bond_slave_1: left promiscuous mode [ 262.354602][ T1053] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 262.422198][ T1053] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 262.441684][ T1053] bond0 (unregistering): Released all slaves [ 263.328600][ T7293] loop2: detected capacity change from 0 to 512 [ 263.526900][ T7293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 263.551289][ T7293] System zones: 1-12 [ 263.727813][ T7126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.772377][ T7293] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.305: corrupted in-inode xattr: invalid ea_ino [ 264.008893][ T7126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.163638][ T7126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.502080][ T7126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.577070][ T7293] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.305: couldn't read orphan inode 15 (err -117) [ 264.617724][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.704439][ T1053] hsr_slave_0: left promiscuous mode [ 264.731158][ T1053] hsr_slave_1: left promiscuous mode [ 264.748170][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.786375][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.022351][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.045307][ T7312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.307'. [ 265.915840][ T7313] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.305: invalid indirect mapped block 234881024 (level 0) [ 266.039459][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.213939][ T1053] veth1_macvtap: left promiscuous mode [ 266.219997][ T1053] veth0_macvtap: left promiscuous mode [ 266.225692][ T1053] veth1_vlan: left promiscuous mode [ 266.231321][ T1053] veth0_vlan: left promiscuous mode [ 266.490751][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.785681][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 271.153217][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 272.480880][ T7362] loop1: detected capacity change from 0 to 512 [ 272.651224][ T7362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 272.659325][ T7362] System zones: 1-12 [ 272.751549][ T7362] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.317: corrupted in-inode xattr: invalid ea_ino [ 272.818546][ T7362] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.317: couldn't read orphan inode 15 (err -117) [ 272.878460][ T7362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.238511][ T7366] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.317: invalid indirect mapped block 234881024 (level 0) [ 273.698698][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.122490][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.207236][ T7381] program syz.4.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.044536][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.122202][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.129449][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.227720][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.235051][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.790767][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.274528][ T7440] loop1: detected capacity change from 0 to 256 [ 280.738188][ T7435] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 280.844627][ T7440] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 281.199519][ T7126] veth0_vlan: entered promiscuous mode [ 281.218889][ T7126] veth1_vlan: entered promiscuous mode [ 281.775559][ T7126] veth0_macvtap: entered promiscuous mode [ 281.790791][ T7126] veth1_macvtap: entered promiscuous mode [ 282.095007][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.142907][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.192003][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.243235][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.285284][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.571947][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.596759][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.634797][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.702025][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.769260][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.892572][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.975725][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.033664][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.096506][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.167561][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.227194][ T7126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.264176][ T7126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.303776][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.314914][ T7126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.323887][ T7126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.497939][ T7126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.523698][ T7126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.413530][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.535239][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.965741][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.983731][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.772795][ T7507] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 288.838561][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 290.703643][ T7544] random: crng reseeded on system resumption [ 294.031319][ T5840] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 295.167815][ T7579] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.027671][ T7608] random: crng reseeded on system resumption [ 300.024992][ T7620] ISOFS: Unable to identify CD-ROM format. [ 301.046823][ T7620] Process accounting resumed [ 303.015788][ T7648] random: crng reseeded on system resumption [ 305.121597][ T7658] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 306.570001][ T7664] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 306.879128][ T7674] Process accounting resumed [ 308.731655][ T7690] program syz.4.376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.119087][ T7703] bond0: entered promiscuous mode [ 310.124604][ T7703] bond_slave_0: entered promiscuous mode [ 310.131965][ T7703] bond_slave_1: entered promiscuous mode [ 311.216304][ T7711] loop1: detected capacity change from 0 to 256 [ 311.978518][ T7711] FAT-fs (loop1): Directory bread(block 64) failed [ 311.985638][ T7711] FAT-fs (loop1): Directory bread(block 65) failed [ 311.992770][ T7711] FAT-fs (loop1): Directory bread(block 66) failed [ 311.999442][ T7711] FAT-fs (loop1): Directory bread(block 67) failed [ 312.006524][ T7711] FAT-fs (loop1): Directory bread(block 68) failed [ 312.013267][ T7711] FAT-fs (loop1): Directory bread(block 69) failed [ 312.020252][ T7711] FAT-fs (loop1): Directory bread(block 70) failed [ 312.026979][ T7711] FAT-fs (loop1): Directory bread(block 71) failed [ 312.034138][ T7711] FAT-fs (loop1): Directory bread(block 72) failed [ 312.040840][ T7711] FAT-fs (loop1): Directory bread(block 73) failed [ 316.324444][ T7738] can0: slcan on ttyS3. [ 317.796747][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.804693][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.154447][ T7741] can0 (unregistered): slcan off ttyS3. [ 319.225353][ T7760] bond0: entered promiscuous mode [ 319.230501][ T7760] bond_slave_0: entered promiscuous mode [ 319.236416][ T7760] bond_slave_1: entered promiscuous mode [ 319.551499][ T7769] loop2: detected capacity change from 0 to 256 [ 319.779190][ T7769] FAT-fs (loop2): Directory bread(block 64) failed [ 319.786268][ T7769] FAT-fs (loop2): Directory bread(block 65) failed [ 319.793469][ T7769] FAT-fs (loop2): Directory bread(block 66) failed [ 319.800078][ T7769] FAT-fs (loop2): Directory bread(block 67) failed [ 319.807171][ T7769] FAT-fs (loop2): Directory bread(block 68) failed [ 319.813963][ T7769] FAT-fs (loop2): Directory bread(block 69) failed [ 319.820883][ T7769] FAT-fs (loop2): Directory bread(block 70) failed [ 319.827646][ T7769] FAT-fs (loop2): Directory bread(block 71) failed [ 319.834705][ T7769] FAT-fs (loop2): Directory bread(block 72) failed [ 319.841502][ T7769] FAT-fs (loop2): Directory bread(block 73) failed [ 321.580889][ T7777] random: crng reseeded on system resumption [ 325.125407][ T7787] program syz.2.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.057274][ T7866] Invalid source name [ 330.061385][ T7866] UBIFS error (pid: 7866): cannot open "./file0", error -22 [ 331.055636][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 333.489182][ T7909] Invalid source name [ 333.493341][ T7909] UBIFS error (pid: 7909): cannot open "./file0", error -22 [ 334.079378][ T7916] random: crng reseeded on system resumption [ 338.099734][ T7954] can0: slcan on ttyS3. [ 338.734940][ T7956] can0 (unregistered): slcan off ttyS3. [ 339.969074][ T7974] can0: slcan on ttyS3. [ 341.513389][ T7974] can0 (unregistered): slcan off ttyS3. [ 343.011650][ T8006] Process accounting resumed [ 344.490220][ T8029] program syz.5.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.550632][ T8082] loop4: detected capacity change from 0 to 256 [ 350.778071][ T8082] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 352.344580][ T8098] bridge0: port 3(syz_tun) entered blocking state [ 352.351411][ T8098] bridge0: port 3(syz_tun) entered disabled state [ 352.360988][ T8098] syz_tun: entered allmulticast mode [ 352.387820][ T8098] syz_tun: entered promiscuous mode [ 352.399033][ T8098] bridge0: port 3(syz_tun) entered blocking state [ 352.406600][ T8098] bridge0: port 3(syz_tun) entered forwarding state [ 353.747957][ T8109] program syz.1.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.248201][ T8116] netlink: 48 bytes leftover after parsing attributes in process `syz.0.448'. [ 356.557783][ T8132] random: crng reseeded on system resumption [ 361.539989][ T8166] Invalid source name [ 361.553885][ T8166] UBIFS error (pid: 8166): cannot open "./file0", error -22 [ 362.050968][ T8177] loop0: detected capacity change from 0 to 256 [ 362.065652][ T8177] exfat: Bad value for 'uid' [ 362.070297][ T8177] exfat: Bad value for 'uid' [ 362.550261][ T8185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'. [ 364.371398][ T8196] program syz.2.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.217563][ T8200] can0: slcan on ttyS3. [ 365.994398][ T8207] can0 (unregistered): slcan off ttyS3. [ 366.915260][ T8220] loop5: detected capacity change from 0 to 256 [ 367.035245][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 368.330383][ T8220] FAT-fs (loop5): Directory bread(block 64) failed [ 368.337334][ T8220] FAT-fs (loop5): Directory bread(block 65) failed [ 368.344370][ T8220] FAT-fs (loop5): Directory bread(block 66) failed [ 368.351088][ T8220] FAT-fs (loop5): Directory bread(block 67) failed [ 368.358017][ T8220] FAT-fs (loop5): Directory bread(block 68) failed [ 368.364738][ T8220] FAT-fs (loop5): Directory bread(block 69) failed [ 368.371715][ T8220] FAT-fs (loop5): Directory bread(block 70) failed [ 368.378336][ T8220] FAT-fs (loop5): Directory bread(block 71) failed [ 368.385398][ T8220] FAT-fs (loop5): Directory bread(block 72) failed [ 368.392270][ T8220] FAT-fs (loop5): Directory bread(block 73) failed [ 369.111936][ T8226] loop2: detected capacity change from 0 to 256 [ 369.226562][ T8226] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 369.638547][ T8231] bridge0: port 3(syz_tun) entered blocking state [ 369.645462][ T8231] bridge0: port 3(syz_tun) entered disabled state [ 369.652906][ T8231] syz_tun: entered allmulticast mode [ 369.664169][ T8231] syz_tun: entered promiscuous mode [ 369.671314][ T8231] bridge0: port 3(syz_tun) entered blocking state [ 369.677891][ T8231] bridge0: port 3(syz_tun) entered forwarding state [ 370.809299][ T8243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.471'. [ 372.302671][ T8256] loop4: detected capacity change from 0 to 256 [ 372.309755][ T8256] exfat: Bad value for 'uid' [ 372.314468][ T8256] exfat: Bad value for 'uid' [ 377.121176][ T8294] loop5: detected capacity change from 0 to 256 [ 379.012551][ T8286] random: crng reseeded on system resumption [ 379.206506][ T8294] FAT-fs (loop5): Directory bread(block 64) failed [ 379.213495][ T8294] FAT-fs (loop5): Directory bread(block 65) failed [ 379.220387][ T8294] FAT-fs (loop5): Directory bread(block 66) failed [ 379.227269][ T8294] FAT-fs (loop5): Directory bread(block 67) failed [ 379.235508][ T8294] FAT-fs (loop5): Directory bread(block 68) failed [ 379.242176][ T8294] FAT-fs (loop5): Directory bread(block 69) failed [ 379.249142][ T8294] FAT-fs (loop5): Directory bread(block 70) failed [ 379.255820][ T8294] FAT-fs (loop5): Directory bread(block 71) failed [ 379.262829][ T8294] FAT-fs (loop5): Directory bread(block 72) failed [ 379.269447][ T8294] FAT-fs (loop5): Directory bread(block 73) failed [ 379.732376][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.738722][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.358663][ T8315] loop5: detected capacity change from 0 to 512 [ 383.486299][ T8315] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.487: corrupted in-inode xattr: invalid ea_ino [ 383.524624][ T8315] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.487: couldn't read orphan inode 15 (err -117) [ 383.587684][ T8315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.205635][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.268180][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.277065][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.288725][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.306902][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.157997][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.165942][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.238756][ T5840] Bluetooth: hci0: command tx timeout [ 387.434977][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.470972][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.466935][ T5840] Bluetooth: hci0: command tx timeout [ 389.571534][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 390.874828][ T8365] loop1: detected capacity change from 0 to 512 [ 390.968337][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.104991][ T8365] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.498: corrupted in-inode xattr: invalid ea_ino [ 391.126732][ T8365] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.498: couldn't read orphan inode 15 (err -117) [ 391.140342][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.165765][ T8365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.172973][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.192665][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.225067][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.259066][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 391.279984][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.327928][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.349579][ T5828] bridge0: port 3(syz_tun) entered disabled state [ 391.383530][ T5828] syz_tun (unregistering): left allmulticast mode [ 391.390090][ T5828] syz_tun (unregistering): left promiscuous mode [ 391.400061][ T5828] bridge0: port 3(syz_tun) entered disabled state [ 391.497395][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.505775][ T8374] loop5: detected capacity change from 0 to 512 [ 391.506887][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.525651][ T8318] bridge_slave_0: entered allmulticast mode [ 391.537542][ T8318] bridge_slave_0: entered promiscuous mode [ 391.551425][ T5143] Bluetooth: hci0: command tx timeout [ 391.575507][ T8374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 391.596368][ T8374] System zones: 1-12 [ 391.612891][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.619916][ T8374] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.499: corrupted in-inode xattr: invalid ea_ino [ 391.621717][ T8374] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.499: couldn't read orphan inode 15 (err -117) [ 391.638926][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.670697][ T8374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.671626][ T8318] bridge_slave_1: entered allmulticast mode [ 391.690557][ T8318] bridge_slave_1: entered promiscuous mode [ 391.712224][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.773424][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.865429][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.004993][ T8379] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.499: invalid indirect mapped block 234881024 (level 0) [ 392.655184][ T8318] team0: Port device team_slave_0 added [ 392.665172][ T8318] team0: Port device team_slave_1 added [ 392.802885][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.845255][ T52] bridge_slave_1: left allmulticast mode [ 392.850976][ T52] bridge_slave_1: left promiscuous mode [ 392.929208][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.227603][ T52] bridge_slave_0: left allmulticast mode [ 393.313702][ T5143] Bluetooth: hci2: command tx timeout [ 393.631197][ T5143] Bluetooth: hci0: command tx timeout [ 393.691786][ T52] bridge_slave_0: left promiscuous mode [ 393.698951][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.830824][ T8396] Invalid source name [ 393.835741][ T8396] UBIFS error (pid: 8396): cannot open "./file0", error -22 [ 395.013339][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.041922][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.091507][ T52] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 395.104348][ T52] bond0 (unregistering): Released all slaves [ 395.357316][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.385056][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.411430][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.414350][ T5143] Bluetooth: hci2: command tx timeout [ 396.630445][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.652700][ T8425] loop2: detected capacity change from 0 to 512 [ 396.711468][ T8425] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.508: corrupted in-inode xattr: invalid ea_ino [ 396.740670][ T8425] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.508: couldn't read orphan inode 15 (err -117) [ 396.759902][ T8425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.781225][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.831247][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.299643][ T8435] random: crng reseeded on system resumption [ 398.023480][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.051416][ T5143] Bluetooth: hci2: command tx timeout [ 398.125242][ T8318] hsr_slave_0: entered promiscuous mode [ 398.142754][ T8318] hsr_slave_1: entered promiscuous mode [ 398.182989][ T8318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.190603][ T8318] Cannot create hsr debugfs directory [ 399.056637][ T8445] program syz.5.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.122477][ T8444] loop2: detected capacity change from 0 to 512 [ 399.143849][ T8444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 399.159187][ T8444] System zones: 1-12 [ 399.190742][ T8444] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.511: corrupted in-inode xattr: invalid ea_ino [ 399.215836][ T52] hsr_slave_0: left promiscuous mode [ 399.231666][ T8444] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.511: couldn't read orphan inode 15 (err -117) [ 399.255186][ T52] hsr_slave_1: left promiscuous mode [ 399.261193][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.268636][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.301748][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.309313][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.319888][ T8444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.622915][ T52] veth1_macvtap: left promiscuous mode [ 399.628626][ T52] veth0_macvtap: left promiscuous mode [ 399.636705][ T52] veth1_vlan: left promiscuous mode [ 399.642199][ T52] veth0_vlan: left promiscuous mode [ 400.191663][ T8459] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.511: invalid indirect mapped block 234881024 (level 0) [ 400.217523][ T5840] Bluetooth: hci2: command tx timeout [ 400.566466][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.031397][ T8468] loop2: detected capacity change from 0 to 256 [ 403.455470][ T8468] FAT-fs (loop2): Directory bread(block 64) failed [ 403.462245][ T8468] FAT-fs (loop2): Directory bread(block 65) failed [ 403.469198][ T8468] FAT-fs (loop2): Directory bread(block 66) failed [ 403.475978][ T8468] FAT-fs (loop2): Directory bread(block 67) failed [ 403.483006][ T8468] FAT-fs (loop2): Directory bread(block 68) failed [ 403.489689][ T8468] FAT-fs (loop2): Directory bread(block 69) failed [ 403.496689][ T8468] FAT-fs (loop2): Directory bread(block 70) failed [ 403.503406][ T8468] FAT-fs (loop2): Directory bread(block 71) failed [ 403.510341][ T8468] FAT-fs (loop2): Directory bread(block 72) failed [ 403.517048][ T8468] FAT-fs (loop2): Directory bread(block 73) failed [ 404.590415][ T52] team0 (unregistering): Port device team_slave_1 removed [ 404.669259][ T52] team0 (unregistering): Port device team_slave_0 removed [ 405.518041][ T8479] Invalid source name [ 405.525822][ T8479] UBIFS error (pid: 8479): cannot open "./file0", error -22 [ 407.176471][ T8367] chnl_net:caif_netlink_parms(): no params data found [ 407.305055][ T8493] loop2: detected capacity change from 0 to 512 [ 407.335930][ T8493] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.519: corrupted in-inode xattr: invalid ea_ino [ 407.350075][ T8493] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.519: couldn't read orphan inode 15 (err -117) [ 407.363103][ T8493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.887045][ T8505] ISOFS: Unable to identify CD-ROM format. [ 408.639622][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.756644][ T8318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 408.886901][ T8318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.647875][ T8318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.703987][ T8318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 410.137166][ T8367] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.259861][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.353466][ T8367] bridge_slave_0: entered allmulticast mode [ 410.443537][ T8367] bridge_slave_0: entered promiscuous mode [ 410.902366][ T8367] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.909598][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.971317][ T8367] bridge_slave_1: entered allmulticast mode [ 410.992611][ T8367] bridge_slave_1: entered promiscuous mode [ 411.519902][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.527'. [ 412.495540][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.583937][ T8367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.779170][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.830075][ T8367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.960480][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.025003][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.315605][ T8367] team0: Port device team_slave_0 added [ 414.971844][ T8367] team0: Port device team_slave_1 added [ 416.776048][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.830788][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.850906][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.886284][ T8367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.908583][ T8583] can0: slcan on ttyS3. [ 416.972603][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.019276][ T8367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.041404][ T8367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.162387][ T8367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.372712][ T8587] can0 (unregistered): slcan off ttyS3. [ 418.155301][ T8367] hsr_slave_0: entered promiscuous mode [ 418.162295][ T8367] hsr_slave_1: entered promiscuous mode [ 418.170087][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.177352][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.200124][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.207357][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.334398][ T8318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.370014][ T8318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.448981][ T8318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.489596][ T52] bridge_slave_1: left allmulticast mode [ 419.497020][ T52] bridge_slave_1: left promiscuous mode [ 419.505074][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.522642][ T52] bridge_slave_0: left allmulticast mode [ 419.534288][ T52] bridge_slave_0: left promiscuous mode [ 419.540276][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.409177][ T8618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.540'. [ 422.362526][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.378118][ T52] bond_slave_0: left promiscuous mode [ 422.387224][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.401908][ T52] bond_slave_1: left promiscuous mode [ 422.410768][ T52] bond0 (unregistering): Released all slaves [ 423.731293][ T8639] program syz.1.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.305601][ T8367] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 425.387916][ T8318] veth0_vlan: entered promiscuous mode [ 425.465857][ T52] hsr_slave_0: left promiscuous mode [ 425.559468][ T52] hsr_slave_1: left promiscuous mode [ 425.567475][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.597291][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.702059][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.709525][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.603842][ T52] veth1_macvtap: left promiscuous mode [ 426.609463][ T52] veth0_macvtap: left promiscuous mode [ 426.615212][ T52] veth1_vlan: left promiscuous mode [ 426.620599][ T52] veth0_vlan: left promiscuous mode [ 426.801332][ T8667] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 428.497998][ T52] team0 (unregistering): Port device team_slave_1 removed [ 428.558354][ T52] team0 (unregistering): Port device team_slave_0 removed [ 429.117533][ T8367] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 429.128594][ T8367] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 429.139862][ T8367] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.204935][ T8318] veth1_vlan: entered promiscuous mode [ 429.211710][ T8678] can0: slcan on ttyS3. [ 429.451836][ T8679] can0 (unregistered): slcan off ttyS3. [ 429.502080][ T8318] veth0_macvtap: entered promiscuous mode [ 429.649165][ T8318] veth1_macvtap: entered promiscuous mode [ 430.376920][ T8367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.436860][ T8367] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.478449][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.534445][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.551306][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.595704][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.605989][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.616641][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.627831][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.713712][ T8367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.724250][ T8367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.746573][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.753769][ T7341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.766061][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.773235][ T7341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.860760][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.881140][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.909613][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.920667][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.930690][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.242980][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.935311][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.387766][ T8318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.434091][ T8318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.474569][ T8318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.516034][ T8318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.649846][ T8367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.701485][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.709424][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.717191][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.725228][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.560942][ T8367] veth0_vlan: entered promiscuous mode [ 437.852526][ T8367] veth1_vlan: entered promiscuous mode [ 438.616142][ T8367] veth0_macvtap: entered promiscuous mode [ 439.375217][ T8367] veth1_macvtap: entered promiscuous mode [ 439.470510][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.886741][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.893187][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.001118][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.010982][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.185533][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.285301][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.295894][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.305876][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.316401][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.327539][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.069701][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.342852][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.372450][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.392528][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.950395][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.136327][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.164573][ T8367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.182432][ T8367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.296195][ T8367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.479491][ T8367] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.492793][ T8367] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.501801][ T8367] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.510625][ T8367] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.877850][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 446.587325][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.608268][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.889306][ T8808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.381838][ T8808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.032725][ T8902] program syz.5.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.241609][ T46] IPVS: starting estimator thread 0... [ 465.845126][ T8969] IPVS: using max 20 ests per chain, 48000 per kthread [ 465.886856][ T8974] loop6: detected capacity change from 0 to 512 [ 466.877267][ T8973] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 467.867176][ T8974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.891313][ T8974] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.374201][ T9001] EXT4-fs error (device loop6): ext4_xattr_block_find:1877: inode #15: comm syz.6.605: corrupted xattr block 32: invalid header [ 471.043965][ T8318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.547342][ T9042] can0: slcan on ttyS3. [ 474.842324][ T9048] can0 (unregistered): slcan off ttyS3. [ 478.503619][ T9088] loop2: detected capacity change from 0 to 256 [ 478.510639][ T9088] exfat: Bad value for 'uid' [ 478.515422][ T9088] exfat: Bad value for 'uid' [ 481.534562][ T9108] Invalid source name [ 481.538810][ T9108] UBIFS error (pid: 9108): cannot open "./file0", error -22 [ 483.695914][ T5917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 485.108530][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 485.135501][ T5917] usb 3-1: device descriptor read/all, error -71 [ 485.292269][ T9144] Invalid source name [ 485.296427][ T9144] UBIFS error (pid: 9144): cannot open "./file0", error -22 [ 485.945235][ T9153] loop7: detected capacity change from 0 to 256 [ 485.959690][ T9153] exfat: Bad value for 'uid' [ 485.964415][ T9153] exfat: Bad value for 'uid' [ 487.471688][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 488.190808][ T9172] infiniband syz0: set active [ 488.196047][ T9172] infiniband syz0: added bond0 [ 488.279233][ T9172] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 488.283280][ T9172] infiniband syz0: Couldn't open port 1 [ 488.315509][ T9172] RDS/IB: syz0: added [ 488.319999][ T9172] smc: adding ib device syz0 with port count 1 [ 488.326450][ T9172] smc: ib device syz0 port 1 has pnetid [ 490.236073][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.645'. [ 490.253831][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 490.331580][ T5879] usb 6-1: device descriptor read/all, error -71 [ 490.450078][ T9192] Invalid source name [ 490.454583][ T9192] UBIFS error (pid: 9192): cannot open "./file0", error -22 [ 492.449985][ T9211] loop1: detected capacity change from 0 to 256 [ 492.464428][ T9211] exfat: Bad value for 'uid' [ 492.469061][ T9211] exfat: Bad value for 'uid' [ 500.315205][ T9272] ISOFS: Unable to identify CD-ROM format. [ 500.386657][ T9272] Process accounting resumed [ 502.115528][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.129234][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.144594][ T9286] loop2: detected capacity change from 0 to 256 [ 502.152000][ T9286] exfat: Bad value for 'uid' [ 502.156625][ T9286] exfat: Bad value for 'uid' [ 504.351980][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 506.475350][ T9324] loop7: detected capacity change from 0 to 256 [ 506.850520][ T9324] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 509.329404][ T9352] ISOFS: Unable to identify CD-ROM format. [ 509.476243][ T9352] Process accounting resumed [ 509.966928][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 510.166523][ T9356] loop7: detected capacity change from 0 to 256 [ 510.174921][ T9356] exfat: Bad value for 'uid' [ 510.179549][ T9356] exfat: Bad value for 'uid' [ 510.564268][ T9364] loop6: detected capacity change from 0 to 256 [ 510.769896][ T9364] FAT-fs (loop6): Directory bread(block 64) failed [ 510.777155][ T9364] FAT-fs (loop6): Directory bread(block 65) failed [ 510.784364][ T9364] FAT-fs (loop6): Directory bread(block 66) failed [ 510.791131][ T9364] FAT-fs (loop6): Directory bread(block 67) failed [ 510.798111][ T9364] FAT-fs (loop6): Directory bread(block 68) failed [ 510.805021][ T9364] FAT-fs (loop6): Directory bread(block 69) failed [ 510.811959][ T9364] FAT-fs (loop6): Directory bread(block 70) failed [ 510.818663][ T9364] FAT-fs (loop6): Directory bread(block 71) failed [ 510.825661][ T9364] FAT-fs (loop6): Directory bread(block 72) failed [ 510.832418][ T9364] FAT-fs (loop6): Directory bread(block 73) failed [ 512.511552][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 512.648615][ T9376] netlink: 48 bytes leftover after parsing attributes in process `syz.7.680'. [ 513.621164][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 513.628135][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 513.636782][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 513.648505][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 513.978439][ T9388] ISOFS: Unable to identify CD-ROM format. [ 514.047366][ T9388] Process accounting resumed [ 514.658231][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 514.671488][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 514.693565][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 514.792767][ T9] usb 2-1: string descriptor 0 read error: -71 [ 514.801296][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 514.838797][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 514.925204][ T9] usb 2-1: config 0 descriptor?? [ 514.963825][ T9] usb 2-1: can't set config #0, error -71 [ 515.000945][ T9] usb 2-1: USB disconnect, device number 2 [ 516.241229][ T9405] program syz.5.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.120537][ T9411] loop5: detected capacity change from 0 to 256 [ 517.127402][ T9411] exfat: Bad value for 'uid' [ 517.132090][ T9411] exfat: Bad value for 'uid' [ 517.143902][ T9413] loop2: detected capacity change from 0 to 256 [ 517.176157][ T9413] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 519.108710][ T9438] netlink: 48 bytes leftover after parsing attributes in process `syz.7.694'. [ 520.363815][ T9444] loop1: detected capacity change from 0 to 256 [ 520.504927][ T9444] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 524.298531][ T9463] rdma_rxe: rxe_newlink: failed to add bond0 [ 525.189018][ T9479] loop2: detected capacity change from 0 to 256 [ 525.197019][ T9479] exfat: Bad value for 'uid' [ 525.201907][ T9479] exfat: Bad value for 'uid' [ 531.146344][ T9518] syz0: rxe_newlink: already configured on bond0 [ 531.147581][ T9523] program syz.7.710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 533.294357][ T9538] rdma_rxe: rxe_newlink: failed to add bond0 [ 533.441928][ T9534] program syz.6.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.479198][ T9548] loop7: detected capacity change from 0 to 256 [ 534.486354][ T9548] exfat: Bad value for 'uid' [ 534.490980][ T9548] exfat: Bad value for 'uid' [ 536.471921][ T9570] ISOFS: Unable to identify CD-ROM format. [ 536.538141][ T9570] Process accounting resumed [ 541.478054][ T9614] loop2: detected capacity change from 0 to 256 [ 541.485357][ T9614] exfat: Bad value for 'uid' [ 541.489992][ T9614] exfat: Bad value for 'uid' [ 543.113846][ T9633] random: crng reseeded on system resumption [ 544.156693][ T5917] hid (null): unknown global tag 0xe [ 544.167120][ T5917] hid (null): unknown global tag 0xe [ 544.374740][ T9649] program syz.1.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.782118][ T5917] hid (null): unknown global tag 0xc [ 544.787519][ T5917] hid (null): unknown global tag 0xd [ 544.812199][ T5917] hid-generic 0000:0004:00A9.0005: unknown main item tag 0x0 [ 544.819640][ T5917] hid-generic 0000:0004:00A9.0005: unknown global tag 0xe [ 544.830174][ T5917] hid-generic 0000:0004:00A9.0005: item 0 2 1 14 parsing failed [ 544.838426][ T5917] hid-generic 0000:0004:00A9.0005: probe with driver hid-generic failed with error -22 [ 546.533022][ T9670] netlink: 36 bytes leftover after parsing attributes in process `syz.7.739'. [ 548.586727][ T9684] loop7: detected capacity change from 0 to 256 [ 548.594111][ T9684] exfat: Bad value for 'uid' [ 548.598740][ T9684] exfat: Bad value for 'uid' [ 548.810542][ T9688] Process accounting resumed [ 550.046513][ T9695] syz0: rxe_newlink: already configured on bond0 [ 551.386414][ T9725] random: crng reseeded on system resumption [ 553.558792][ T9741] netlink: 596 bytes leftover after parsing attributes in process `syz.7.755'. [ 555.049853][ T9741] Driver unsupported XDP return value 0 on prog (id 243) dev N/A, expect packet loss! [ 557.051638][ T9769] loop6: detected capacity change from 0 to 256 [ 557.058659][ T9769] exfat: Bad value for 'uid' [ 557.063363][ T9769] exfat: Bad value for 'uid' [ 557.366839][ T9787] loop7: detected capacity change from 0 to 512 [ 558.074267][ T9787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 558.098696][ T9787] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.281878][ T9788] ISOFS: Unable to identify CD-ROM format. [ 559.432866][ T8367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 561.111204][ T9818] Invalid source name [ 561.115328][ T9818] UBIFS error (pid: 9818): cannot open "./file0", error -22 [ 561.513688][ T9808] Invalid source name [ 561.525060][ T9808] UBIFS error (pid: 9808): cannot open "./file0", error -22 [ 563.563414][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.584419][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.485396][ T9852] bond0: entered promiscuous mode [ 564.485474][ T9852] bond_slave_0: entered promiscuous mode [ 564.486243][ T9852] bond_slave_1: entered promiscuous mode [ 564.805521][ T9854] tty tty1: ldisc open failed (-12), clearing slot 0 [ 565.101426][ T5917] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 566.853558][ T9879] ISOFS: Unable to identify CD-ROM format. [ 567.474032][ T5917] usb 8-1: Using ep0 maxpacket: 8 [ 567.699871][ T5917] usb 8-1: device descriptor read/all, error -71 [ 567.774708][ T9889] syz0: rxe_newlink: already configured on bond0 [ 569.064214][ T9902] loop5: detected capacity change from 0 to 256 [ 569.071414][ T9902] exfat: Bad value for 'uid' [ 569.076035][ T9902] exfat: Bad value for 'uid' [ 570.849196][ T9911] Invalid source name [ 570.853549][ T9911] UBIFS error (pid: 9911): cannot open "./file0", error -22 [ 571.217241][ T9915] can0: slcan on ttyS3. [ 573.837817][ T9922] can0 (unregistered): slcan off ttyS3. [ 574.040303][ T9940] rdma_rxe: rxe_newlink: failed to add bond0 [ 575.100892][ T9951] program syz.1.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.961870][ T9953] ISOFS: Unable to identify CD-ROM format. [ 576.017010][ T9953] netlink: 'syz.5.791': attribute type 1 has an invalid length. [ 576.025089][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.5.791'. [ 577.023074][ T9968] loop1: detected capacity change from 0 to 256 [ 577.030818][ T9968] exfat: Bad value for 'uid' [ 577.035578][ T9968] exfat: Bad value for 'uid' [ 580.118716][ T9978] Invalid source name [ 580.135734][ T9978] UBIFS error (pid: 9978): cannot open "./file0", error -22 [ 580.207563][ T9993] program syz.6.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.561135][T10004] random: crng reseeded on system resumption [ 584.414899][T10034] loop7: detected capacity change from 0 to 256 [ 584.422218][T10034] exfat: Bad value for 'uid' [ 584.426842][T10034] exfat: Bad value for 'uid' [ 585.231213][T10039] program syz.5.807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.346847][T10050] ISOFS: Unable to identify CD-ROM format. [ 586.417680][T10050] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 586.425564][T10050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.811'. [ 587.316483][T10055] rdma_rxe: rxe_newlink: failed to add bond0 [ 588.850907][T10075] ISOFS: Unable to identify CD-ROM format. [ 589.023546][T10077] Process accounting resumed [ 592.776026][T10103] loop5: detected capacity change from 0 to 256 [ 592.783155][T10103] exfat: Bad value for 'uid' [ 592.788300][T10103] exfat: Bad value for 'uid' [ 593.150812][T10107] program syz.7.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.603774][T10118] rdma_rxe: rxe_newlink: failed to add bond0 [ 598.491520][T10140] loop2: detected capacity change from 0 to 512 [ 598.642317][T10143] rdma_rxe: rxe_newlink: failed to add bond0 [ 599.149453][T10140] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.828: corrupted in-inode xattr: invalid ea_ino [ 599.164783][T10140] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.828: couldn't read orphan inode 15 (err -117) [ 599.181833][T10140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.345404][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.711900][T10161] loop2: detected capacity change from 0 to 256 [ 599.721435][T10161] exfat: Bad value for 'uid' [ 599.726072][T10161] exfat: Bad value for 'uid' [ 600.427640][T10176] loop2: detected capacity change from 0 to 16 [ 600.530297][T10176] erofs (device loop2): mounted with root inode @ nid 36. [ 600.761287][T10182] program syz.6.834 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.762828][T10185] erofs (device loop2): corrupted dir block 0 @ nid 36 [ 600.917011][T10187] erofs (device loop2): corrupted dir block 0 @ nid 36 [ 601.749669][T10204] loop7: detected capacity change from 0 to 256 [ 601.841550][T10205] random: crng reseeded on system resumption [ 603.871211][T10204] FAT-fs (loop7): Directory bread(block 64) failed [ 603.877812][T10204] FAT-fs (loop7): Directory bread(block 65) failed [ 603.884533][T10204] FAT-fs (loop7): Directory bread(block 66) failed [ 603.891156][T10204] FAT-fs (loop7): Directory bread(block 67) failed [ 603.897770][T10204] FAT-fs (loop7): Directory bread(block 68) failed [ 603.904389][T10204] FAT-fs (loop7): Directory bread(block 69) failed [ 603.911005][T10204] FAT-fs (loop7): Directory bread(block 70) failed [ 603.917617][T10204] FAT-fs (loop7): Directory bread(block 71) failed [ 604.031197][T10204] FAT-fs (loop7): Directory bread(block 72) failed [ 604.037788][T10204] FAT-fs (loop7): Directory bread(block 73) failed [ 607.699264][T10234] loop5: detected capacity change from 0 to 512 [ 607.826600][T10234] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.842: corrupted in-inode xattr: invalid ea_ino [ 607.853001][T10234] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.842: couldn't read orphan inode 15 (err -117) [ 607.869548][T10234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.990326][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 608.728439][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.847384][T10251] loop6: detected capacity change from 0 to 16 [ 608.926139][T10251] erofs (device loop6): mounted with root inode @ nid 36. [ 609.257010][T10258] erofs (device loop6): corrupted dir block 0 @ nid 36 [ 609.793481][T10259] erofs (device loop6): corrupted dir block 0 @ nid 36 [ 610.210884][T10268] loop5: detected capacity change from 0 to 256 [ 610.218134][T10268] exfat: Bad value for 'uid' [ 610.222966][T10268] exfat: Bad value for 'uid' [ 614.102798][T10301] loop2: detected capacity change from 0 to 512 [ 614.211152][T10303] rdma_rxe: rxe_newlink: failed to add bond0 [ 614.332884][T10301] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.856: corrupted in-inode xattr: invalid ea_ino [ 614.358783][T10301] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.856: couldn't read orphan inode 15 (err -117) [ 614.384274][T10301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.892210][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.917149][T10310] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 615.000657][T10317] loop5: detected capacity change from 0 to 16 [ 615.027201][T10317] erofs (device loop5): mounted with root inode @ nid 36. [ 615.105773][T10321] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 615.113318][T10321] erofs (device loop5): corrupted dir block 0 @ nid 36 [ 615.377803][T10325] loop1: detected capacity change from 0 to 256 [ 615.385081][T10325] exfat: Bad value for 'uid' [ 615.389705][T10325] exfat: Bad value for 'uid' [ 615.612429][T10328] random: crng reseeded on system resumption [ 618.782567][T10347] rdma_rxe: rxe_newlink: failed to add bond0 [ 621.893536][ T5938] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.133718][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.867'. [ 622.367843][ T5938] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.658225][T10386] loop6: detected capacity change from 0 to 512 [ 623.257532][T10386] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.869: corrupted in-inode xattr: invalid ea_ino [ 623.272686][T10386] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.869: couldn't read orphan inode 15 (err -117) [ 623.290440][T10386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.456116][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 623.485899][ T8318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.516519][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 623.592799][ T5938] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.623563][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 623.896764][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 623.905104][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 624.960306][ T5938] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.594335][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.600882][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.636418][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 625.961816][ T25] hid-generic 0000:0000:0000.0006: item fetching failed at offset 0/1 [ 625.977917][ T25] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 627.269665][ T5938] bridge_slave_1: left allmulticast mode [ 627.296592][ T5938] bridge_slave_1: left promiscuous mode [ 627.374075][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.438563][ T5938] bridge_slave_0: left allmulticast mode [ 627.582113][ T5938] bridge_slave_0: left promiscuous mode [ 627.587932][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.033259][ T5830] Bluetooth: hci1: command tx timeout [ 630.115727][ T5830] Bluetooth: hci1: command tx timeout [ 630.732225][T10439] loop1: detected capacity change from 0 to 512 [ 630.998617][T10439] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.884: corrupted in-inode xattr: invalid ea_ino [ 631.013490][T10439] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.884: couldn't read orphan inode 15 (err -117) [ 631.026914][T10439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.093460][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.694867][ T5830] Bluetooth: hci1: command tx timeout [ 632.795207][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.178212][T10444] slcan: can't register candev [ 633.529441][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.688229][ T5938] bond0 (unregistering): Released all slaves [ 633.915937][T10461] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 635.022046][ T5143] Bluetooth: hci1: command tx timeout [ 635.140784][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.889'. [ 635.155026][T10480] loop1: detected capacity change from 0 to 256 [ 635.242551][T10480] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 636.656716][T10385] chnl_net:caif_netlink_parms(): no params data found [ 637.025657][T10500] loop5: detected capacity change from 0 to 512 [ 637.710392][T10500] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.897: corrupted in-inode xattr: invalid ea_ino [ 637.728876][T10500] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.897: couldn't read orphan inode 15 (err -117) [ 637.745365][T10500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.791561][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.825242][ T5938] hsr_slave_0: left promiscuous mode [ 637.911627][ T5938] hsr_slave_1: left promiscuous mode [ 637.918777][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.926423][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.060039][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.060176][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.138283][ T5938] veth1_macvtap: left promiscuous mode [ 638.154568][ T5938] veth0_macvtap: left promiscuous mode [ 638.170549][ T5938] veth1_vlan: left promiscuous mode [ 638.176141][ T5938] veth0_vlan: left promiscuous mode [ 638.201589][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 639.291136][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 639.299631][ T5917] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 639.308588][ T5917] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 639.350236][ T5917] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 639.366791][ T5917] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 639.381470][ T5917] usb 7-1: config 0 interface 0 has no altsetting 0 [ 639.396021][ T5917] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 639.405892][ T5917] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 639.421314][ T5917] usb 7-1: Product: syz [ 639.426574][ T5917] usb 7-1: Manufacturer: syz [ 639.431781][ T5917] usb 7-1: SerialNumber: syz [ 639.467692][ T5917] usb 7-1: config 0 descriptor?? [ 639.479150][ T5917] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 639.510361][ T5917] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 643.167249][ T25] usb 7-1: USB disconnect, device number 2 [ 643.176541][ T25] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 643.388402][T10529] loop6: detected capacity change from 0 to 256 [ 643.495200][T10529] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 646.845691][T10551] loop6: detected capacity change from 0 to 512 [ 647.370113][T10551] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.909: corrupted in-inode xattr: invalid ea_ino [ 647.403833][T10551] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.909: couldn't read orphan inode 15 (err -117) [ 647.417090][T10551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.702126][ T8318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.962710][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 648.339694][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 648.604499][T10560] loop2: detected capacity change from 0 to 2048 [ 648.803722][T10560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.911292][T10554] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 650.335396][T10576] netlink: 36 bytes leftover after parsing attributes in process `syz.6.914'. [ 651.389581][T10582] ISOFS: Unable to identify CD-ROM format. [ 651.607006][T10583] Process accounting resumed [ 651.989535][ T29] audit: type=1800 audit(1736654841.087:2): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.912" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 652.261284][T10385] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.268508][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.277076][T10385] bridge_slave_0: entered allmulticast mode [ 652.284425][T10385] bridge_slave_0: entered promiscuous mode [ 652.292384][T10385] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.299495][T10385] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.306993][T10385] bridge_slave_1: entered allmulticast mode [ 652.327221][T10385] bridge_slave_1: entered promiscuous mode [ 652.403194][T10589] loop5: detected capacity change from 0 to 256 [ 652.444912][T10589] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x93fd065d, utbl_chksum : 0xe619d30d) [ 653.398561][T10385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.455509][T10385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.867763][T10385] team0: Port device team_slave_0 added [ 653.882764][T10385] team0: Port device team_slave_1 added [ 654.827668][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.843348][T10620] loop5: detected capacity change from 0 to 512 [ 654.853518][T10385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.860514][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.910842][T10385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.924035][T10385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.931004][T10385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.967789][T10620] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.921: corrupted in-inode xattr: invalid ea_ino [ 654.991006][T10620] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.921: couldn't read orphan inode 15 (err -117) [ 654.993915][T10385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.053477][T10620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.275349][T10385] hsr_slave_0: entered promiscuous mode [ 655.287839][T10385] hsr_slave_1: entered promiscuous mode [ 655.414761][T10631] ISOFS: Unable to identify CD-ROM format. [ 655.632373][T10632] Process accounting resumed [ 656.070665][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.005366][T10674] program syz.5.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.444786][T10385] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.593678][T10385] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 661.688043][T10385] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 661.753105][T10385] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 662.530095][T10708] loop1: detected capacity change from 0 to 512 [ 663.591270][T10385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.620886][T10385] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.795699][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.803070][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.823516][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.830659][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.855026][T10385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.865483][T10385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.280365][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.938'. [ 665.320649][T10708] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.935: corrupted in-inode xattr: invalid ea_ino [ 665.764123][T10708] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.935: couldn't read orphan inode 15 (err -117) [ 665.792567][T10708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.172974][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.017185][T10737] netlink: 32 bytes leftover after parsing attributes in process `syz.6.939'. [ 667.664149][T10385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.952777][T10786] loop6: detected capacity change from 0 to 512 [ 670.171283][T10786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 670.179305][T10786] System zones: 1-12 [ 670.551711][T10385] veth0_vlan: entered promiscuous mode [ 670.563067][T10385] veth1_vlan: entered promiscuous mode [ 670.571232][T10786] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.948: corrupted in-inode xattr: invalid ea_ino [ 670.600269][T10385] veth0_macvtap: entered promiscuous mode [ 670.622115][T10385] veth1_macvtap: entered promiscuous mode [ 670.637915][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.649120][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.659185][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.669902][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.680251][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.690941][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.701133][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.714491][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.736785][T10385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.746310][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.756973][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.765584][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.946'. [ 670.775909][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.788159][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.798099][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.808630][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.818549][T10385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.829088][T10385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.840332][T10385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.031510][T10385] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.032227][T10786] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.948: couldn't read orphan inode 15 (err -117) [ 671.040317][T10385] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.061433][T10385] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.086603][T10385] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.189640][T10806] ISOFS: Unable to identify CD-ROM format. [ 671.437973][T10807] Process accounting resumed [ 671.875800][T10786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.152878][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.160747][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.298842][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.316856][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.332171][T10817] loop5: detected capacity change from 0 to 512 [ 672.484625][T10819] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.948: invalid indirect mapped block 234881024 (level 0) [ 672.875290][ T8318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.885966][T10817] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.951: corrupted in-inode xattr: invalid ea_ino [ 672.902400][T10817] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.951: couldn't read orphan inode 15 (err -117) [ 672.922994][T10817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.220223][ T7126] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.604556][T10830] syz0: rxe_newlink: already configured on bond0 [ 673.670196][T10827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.954'. [ 673.878498][T10833] rdma_rxe: rxe_newlink: failed to add bond0 [ 674.643597][ T5959] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.384854][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.410621][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.420198][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.431093][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.440600][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 676.448247][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 676.981251][ T5959] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.543111][ T5959] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.277595][T10855] program syz.2.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.598613][ T5959] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.080954][ T5143] Bluetooth: hci1: command tx timeout [ 679.827355][T10879] loop2: detected capacity change from 0 to 512 [ 679.885881][T10879] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.963: corrupted in-inode xattr: invalid ea_ino [ 679.900119][T10879] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.963: couldn't read orphan inode 15 (err -117) [ 679.914096][T10879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.016491][T10877] can0: slcan on ttyS3. [ 680.023276][T10845] chnl_net:caif_netlink_parms(): no params data found [ 680.753683][ T5959] bridge_slave_1: left allmulticast mode [ 680.783820][ T5959] bridge_slave_1: left promiscuous mode [ 680.861310][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.922975][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.949459][ T5959] bridge_slave_0: left allmulticast mode [ 680.961594][ T5959] bridge_slave_0: left promiscuous mode [ 680.967498][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.208609][ T5143] Bluetooth: hci1: command tx timeout [ 681.967875][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.998247][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.025638][ T5959] bond0 (unregistering): Released all slaves [ 682.065274][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.965'. [ 682.252930][T10881] can0 (unregistered): slcan off ttyS3. [ 682.655290][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.663136][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.670464][T10845] bridge_slave_0: entered allmulticast mode [ 682.677914][T10845] bridge_slave_0: entered promiscuous mode [ 682.685823][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.693162][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.700693][T10845] bridge_slave_1: entered allmulticast mode [ 682.708159][T10845] bridge_slave_1: entered promiscuous mode [ 682.766460][T10845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.252722][ T5143] Bluetooth: hci1: command tx timeout [ 683.719031][T10845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.115554][T10929] netlink: 32 bytes leftover after parsing attributes in process `syz.5.972'. [ 684.395336][T10845] team0: Port device team_slave_0 added [ 684.462945][ T5959] hsr_slave_0: left promiscuous mode [ 684.506573][ T5959] hsr_slave_1: left promiscuous mode [ 684.530222][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.542110][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.622134][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.630072][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.689959][ T5959] veth1_macvtap: left promiscuous mode [ 684.871573][ T5959] veth0_macvtap: left promiscuous mode [ 684.877285][ T5959] veth1_vlan: left promiscuous mode [ 684.890945][ T5959] veth0_vlan: left promiscuous mode [ 685.312771][ T5143] Bluetooth: hci1: command tx timeout [ 685.431462][T10934] program syz.1.973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.802161][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.809119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.452097][T10284] IPVS: starting estimator thread 0... [ 687.563335][T10962] IPVS: using max 23 ests per chain, 55200 per kthread [ 688.458978][ T5959] team0 (unregistering): Port device team_slave_1 removed [ 689.569170][ T5959] team0 (unregistering): Port device team_slave_0 removed [ 689.761440][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 689.828859][T10284] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 689.873760][T10284] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 689.891184][ T5883] usb 2-1: device descriptor read/64, error -71 [ 690.131280][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 690.261181][ T5883] usb 2-1: device descriptor read/64, error -71 [ 690.372083][ T5883] usb usb2-port1: attempt power cycle [ 690.711163][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 690.735853][ T5883] usb 2-1: device descriptor read/8, error -71 [ 691.052274][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 691.085424][ T5883] usb 2-1: device descriptor read/8, error -71 [ 691.206724][ T5883] usb usb2-port1: unable to enumerate USB device [ 691.233161][T10845] team0: Port device team_slave_1 added [ 691.969835][T10845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.986011][T10845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.031238][T10845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.043805][T10845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.051199][T10845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.077261][T10845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.934436][T10845] hsr_slave_0: entered promiscuous mode [ 693.017597][T10845] hsr_slave_1: entered promiscuous mode [ 693.867740][T11018] program syz.2.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.556882][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.997'. [ 696.706377][T10845] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 696.727383][T10845] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.743160][T10845] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 696.760553][T10845] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 696.981526][T10845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.116241][T10845] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.189553][ T3900] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.196860][ T3900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.215620][ T3900] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.222778][ T3900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.090714][T10845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.844675][T10845] veth0_vlan: entered promiscuous mode [ 699.865775][T10845] veth1_vlan: entered promiscuous mode [ 700.123443][T11125] random: crng reseeded on system resumption [ 700.867425][T10845] veth0_macvtap: entered promiscuous mode [ 700.876515][T10845] veth1_macvtap: entered promiscuous mode [ 700.890722][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.901404][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.911779][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.928551][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.947681][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.959405][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.071619][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 701.121237][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.136246][T10845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.181786][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.192949][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.203110][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.213739][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.224150][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.234950][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.247657][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 701.258429][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 701.273585][T10845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.283561][T10845] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.298216][T10845] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.313009][T10845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.324634][T10845] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.813066][ T8829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.823519][ T8829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.871451][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.879318][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.138918][T11146] program syz.5.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.262410][T11165] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 705.979281][T11171] program syz.6.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.551507][ T8808] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.981454][T11191] Invalid source name [ 706.985906][T11191] UBIFS error (pid: 11191): cannot open "./file0", error -22 [ 707.320252][T11183] can0: slcan on ttyS3. [ 707.410836][ T8808] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.673163][T11186] can0 (unregistered): slcan off ttyS3. [ 707.755393][ T8808] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.253159][ T8808] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.473328][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 708.484121][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 708.493859][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 708.906412][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 708.922510][ T5830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 708.938361][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 709.510604][ T8808] bridge_slave_1: left allmulticast mode [ 709.518788][ T8808] bridge_slave_1: left promiscuous mode [ 709.541668][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.553429][ T8808] bridge_slave_0: left allmulticast mode [ 709.559131][ T8808] bridge_slave_0: left promiscuous mode [ 710.592482][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.083134][ T5830] Bluetooth: hci1: command tx timeout [ 711.165759][T11214] Invalid source name [ 711.169768][T11214] UBIFS error (pid: 11214): cannot open "./file0", error -22 [ 711.184377][T11220] random: crng reseeded on system resumption [ 712.714616][ T8808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.740286][ T8808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.751622][ T8808] bond0 (unregistering): Released all slaves [ 714.065471][ T5830] Bluetooth: hci1: command tx timeout [ 714.280713][T11204] chnl_net:caif_netlink_parms(): no params data found [ 715.253869][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.314376][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.377321][T11204] bridge_slave_0: entered allmulticast mode [ 715.429344][T11204] bridge_slave_0: entered promiscuous mode [ 715.495852][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.546992][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.587532][T11204] bridge_slave_1: entered allmulticast mode [ 715.629352][T11204] bridge_slave_1: entered promiscuous mode [ 716.111929][ T5830] Bluetooth: hci1: command tx timeout [ 716.123870][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.235073][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.674121][T11279] Invalid source name [ 716.678201][T11279] UBIFS error (pid: 11279): cannot open "./file0", error -22 [ 717.187127][T11204] team0: Port device team_slave_0 added [ 718.065110][T11204] team0: Port device team_slave_1 added [ 718.390448][ T5830] Bluetooth: hci1: command tx timeout [ 720.423494][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.451313][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.573170][T11303] loop5: detected capacity change from 0 to 4096 [ 720.601730][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.842858][ T8808] hsr_slave_0: left promiscuous mode [ 721.026921][ T8808] hsr_slave_1: left promiscuous mode [ 721.063339][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.070949][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.123990][ T8808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.591931][ T8808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.364377][ T8808] veth1_macvtap: left promiscuous mode [ 723.537958][ T8808] veth0_macvtap: left promiscuous mode [ 723.605728][ T8808] veth1_vlan: left promiscuous mode [ 724.111193][ T8808] veth0_vlan: left promiscuous mode [ 724.710201][T11352] overlayfs: failed to resolve './file1': -2 [ 725.611439][T11361] loop2: detected capacity change from 0 to 1024 [ 725.672521][T11361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.724519][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.777569][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.831972][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.875424][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.910057][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.925415][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.949124][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 726.985952][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 727.000426][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 727.019247][ T5835] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 727.088388][T11381] loop6: detected capacity change from 0 to 256 [ 727.112069][T11381] exfat: Deprecated parameter 'utf8' [ 727.117454][T11381] exfat: Bad value for 'gid' [ 727.129369][T11381] exfat: Bad value for 'gid' [ 727.186636][T11381] loop6: detected capacity change from 0 to 512 [ 727.280608][T11381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.361570][T11381] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.473739][T11386] random: crng reseeded on system resumption [ 728.533267][ T8318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.621737][ T8808] team0 (unregistering): Port device team_slave_1 removed [ 728.710963][ T8808] team0 (unregistering): Port device team_slave_0 removed [ 731.523897][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.530953][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.558353][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.472287][T11204] hsr_slave_0: entered promiscuous mode [ 732.479413][T11204] hsr_slave_1: entered promiscuous mode [ 732.684591][ T5835] bridge0: port 3(syz_tun) entered disabled state [ 732.719327][ T5835] syz_tun (unregistering): left allmulticast mode [ 732.741179][ T5835] syz_tun (unregistering): left promiscuous mode [ 732.747718][ T5835] bridge0: port 3(syz_tun) entered disabled state [ 732.951222][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 733.000109][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.147546][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 733.181707][ T5883] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 733.189958][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.267445][ T5883] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 733.314076][ T5883] usb 6-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 733.357658][ T5883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 733.386450][ T5883] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 733.431268][ T5883] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 733.471366][ T5883] usb 6-1: Product: syz [ 733.475586][ T5883] usb 6-1: Manufacturer: syz [ 733.494902][ T5883] usb 6-1: SerialNumber: syz [ 733.552501][ T5883] usb 6-1: config 0 descriptor?? [ 733.590752][ T5883] ldusb 6-1:0.0: Interrupt in endpoint not found [ 734.048228][ T5958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.172189][ T5958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.276137][ T5958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.411449][ T5958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.452582][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.465558][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 735.475414][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 735.484787][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 735.492772][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 735.500263][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 735.642387][T11204] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 735.689613][T11204] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 735.715261][T11204] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 735.744101][T11204] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 736.001526][ T46] usb 6-1: USB disconnect, device number 4 [ 736.033942][T11450] program syz.6.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 737.123751][ T5958] bridge_slave_1: left allmulticast mode [ 737.129591][ T5958] bridge_slave_1: left promiscuous mode [ 737.210179][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.218943][T11459] [ 737.221302][T11459] ============================================ [ 737.227450][T11459] WARNING: possible recursive locking detected [ 737.233599][T11459] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 737.240193][T11459] -------------------------------------------- [ 737.246361][T11459] syz.1.1073/11459 is trying to acquire lock: [ 737.252436][T11459] ffff888067c48208 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 737.260667][T11459] [ 737.260667][T11459] but task is already holding lock: [ 737.268050][T11459] ffff8880329ed848 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 737.276357][T11459] [ 737.276357][T11459] other info that might help us debug this: [ 737.284432][T11459] Possible unsafe locking scenario: [ 737.284432][T11459] [ 737.291893][T11459] CPU0 [ 737.295193][T11459] ---- [ 737.298478][T11459] lock(vm_lock); [ 737.302213][T11459] lock(vm_lock); [ 737.305940][T11459] [ 737.305940][T11459] *** DEADLOCK *** [ 737.305940][T11459] [ 737.314077][T11459] May be due to missing lock nesting notation [ 737.314077][T11459] [ 737.322390][T11459] 2 locks held by syz.1.1073/11459: [ 737.327580][T11459] #0: ffff8880329ed848 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 737.336291][T11459] #1: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 737.346049][T11459] [ 737.346049][T11459] stack backtrace: [ 737.351950][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.1.1073 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 737.351967][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 737.351980][T11459] Call Trace: [ 737.351987][T11459] [ 737.351994][T11459] dump_stack_lvl+0x241/0x360 [ 737.352013][T11459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.352032][T11459] ? __pfx__printk+0x10/0x10 [ 737.352052][T11459] ? lockdep_unlock+0x16a/0x300 [ 737.352072][T11459] print_deadlock_bug+0x483/0x620 [ 737.352093][T11459] ? validate_chain+0x11e/0x5920 [ 737.352113][T11459] validate_chain+0x15e2/0x5920 [ 737.352133][T11459] ? is_bpf_text_address+0x26/0x2a0 [ 737.352153][T11459] ? __pfx_validate_chain+0x10/0x10 [ 737.352172][T11459] ? __pfx_validate_chain+0x10/0x10 [ 737.352189][T11459] ? 0xffffffffa0000960 [ 737.352204][T11459] ? __pfx_validate_chain+0x10/0x10 [ 737.352222][T11459] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 737.352237][T11459] ? kernel_text_address+0xa7/0xe0 [ 737.352257][T11459] ? mark_lock+0x9a/0x360 [ 737.352275][T11459] ? __lock_acquire+0x1397/0x2100 [ 737.352292][T11459] ? validate_chain+0x11e/0x5920 [ 737.352312][T11459] ? reacquire_held_locks+0x3eb/0x690 [ 737.352330][T11459] ? mark_lock+0x9a/0x360 [ 737.352347][T11459] __lock_acquire+0x1397/0x2100 [ 737.352368][T11459] lock_acquire+0x1ed/0x550 [ 737.352383][T11459] ? move_pages+0x26b/0x1680 [ 737.352398][T11459] ? __pfx_lock_acquire+0x10/0x10 [ 737.352418][T11459] ? mas_walk+0x1f3/0x280 [ 737.352437][T11459] lock_vma_under_rcu+0x35f/0x9a0 [ 737.352452][T11459] ? move_pages+0x26b/0x1680 [ 737.352463][T11459] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 737.352477][T11459] ? move_pages+0x26b/0x1680 [ 737.352491][T11459] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 737.352511][T11459] ? uffd_lock_vma+0x91/0x2c0 [ 737.352525][T11459] move_pages+0x26b/0x1680 [ 737.352537][T11459] ? __pfx___might_resched+0x10/0x10 [ 737.352551][T11459] ? __might_fault+0xaa/0x120 [ 737.352567][T11459] ? preempt_count_add+0x93/0x190 [ 737.352581][T11459] ? __pfx_move_pages+0x10/0x10 [ 737.352593][T11459] ? __might_fault+0xc6/0x120 [ 737.352608][T11459] userfaultfd_ioctl+0x5221/0x6840 [ 737.352631][T11459] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 737.352646][T11459] ? stack_trace_save+0x118/0x1d0 [ 737.352659][T11459] ? __pfx_stack_trace_save+0x10/0x10 [ 737.352673][T11459] ? stack_depot_save_flags+0x37/0x940 [ 737.352689][T11459] ? kasan_save_track+0x51/0x80 [ 737.352704][T11459] ? kasan_save_track+0x3f/0x80 [ 737.352719][T11459] ? kasan_save_free_info+0x40/0x50 [ 737.352732][T11459] ? __kasan_slab_free+0x59/0x70 [ 737.352748][T11459] ? kfree+0x196/0x430 [ 737.352760][T11459] ? tomoyo_path_number_perm+0x679/0x860 [ 737.352777][T11459] ? security_file_ioctl+0xc6/0x2a0 [ 737.352790][T11459] ? __se_sys_ioctl+0x46/0x170 [ 737.352805][T11459] ? do_syscall_64+0xf3/0x230 [ 737.352819][T11459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.352838][T11459] ? do_vfs_ioctl+0xf07/0x2e40 [ 737.352855][T11459] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 737.352871][T11459] ? mark_lock+0x9a/0x360 [ 737.352892][T11459] ? tomoyo_path_number_perm+0x206/0x860 [ 737.352906][T11459] ? __pfx_lock_release+0x10/0x10 [ 737.352923][T11459] ? tomoyo_path_number_perm+0x679/0x860 [ 737.352937][T11459] ? tomoyo_path_number_perm+0x679/0x860 [ 737.352951][T11459] ? tomoyo_path_number_perm+0x6f9/0x860 [ 737.352964][T11459] ? __lock_acquire+0x1397/0x2100 [ 737.352980][T11459] ? tomoyo_path_number_perm+0x206/0x860 [ 737.352995][T11459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 737.353021][T11459] ? __fget_files+0x2a/0x410 [ 737.353040][T11459] ? __fget_files+0x2a/0x410 [ 737.353054][T11459] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 737.353070][T11459] __se_sys_ioctl+0xf5/0x170 [ 737.353088][T11459] do_syscall_64+0xf3/0x230 [ 737.353103][T11459] ? clear_bhb_loop+0x35/0x90 [ 737.353122][T11459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.353144][T11459] RIP: 0033:0x7ff532985d29 [ 737.353157][T11459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.353168][T11459] RSP: 002b:00007ff53379a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.353184][T11459] RAX: ffffffffffffffda RBX: 00007ff532b76080 RCX: 00007ff532985d29 [ 737.353194][T11459] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000007 [ 737.353203][T11459] RBP: 00007ff532a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 737.353212][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.353220][T11459] R13: 0000000000000000 R14: 00007ff532b76080 R15: 00007ffc78dbc458 [ 737.353235][T11459] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 737.853922][ T5830] Bluetooth: hci2: command tx timeout [ 737.917759][ T5958] bridge_slave_0: left allmulticast mode [ 737.946933][ T5958] bridge_slave_0: left promiscuous mode [ 737.966235][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.362513][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.371570][ T5958] bond_slave_0: left promiscuous mode [ 738.377996][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.387053][ T5958] bond_slave_1: left promiscuous mode [ 738.395779][ T5958] bond0 (unregistering): Released all slaves [ 738.464527][T11456] bridge0: port 3(syz_tun) entered disabled state [ 738.478708][T11456] syz_tun (unregistering): left allmulticast mode [ 738.485404][T11456] syz_tun (unregistering): left promiscuous mode [ 738.493803][T11456] bridge0: port 3(syz_tun) entered disabled state [ 738.889539][ T5958] hsr_slave_0: left promiscuous mode [ 738.895401][ T5958] hsr_slave_1: left promiscuous mode [ 738.904803][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.915300][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.936056][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.965085][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.992141][ T5958] veth1_macvtap: left promiscuous mode [ 738.997725][ T5958] veth0_macvtap: left promiscuous mode [ 739.009904][ T5958] veth1_vlan: left promiscuous mode [ 739.015304][ T5958] veth0_vlan: left promiscuous mode [ 739.246845][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 739.303773][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 739.646551][ T5958] IPVS: stop unused estimator thread 0... [ 739.916928][ T5958] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.976084][ T5958] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.016227][ T5958] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.066519][ T5958] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.161737][ T5958] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.205129][ T5958] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.245296][ T5958] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.296615][ T5958] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.376370][ T5958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.415284][ T5958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.487476][ T5958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.525582][ T5958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.622942][ T5958] bridge_slave_1: left allmulticast mode [ 740.628633][ T5958] bridge_slave_1: left promiscuous mode [ 740.634930][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.645317][ T5958] bridge_slave_0: left allmulticast mode [ 740.650965][ T5958] bridge_slave_0: left promiscuous mode [ 740.656744][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.665290][ T5958] bridge_slave_1: left allmulticast mode [ 740.670931][ T5958] bridge_slave_1: left promiscuous mode [ 740.676830][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.685352][ T5958] bridge_slave_0: left allmulticast mode [ 740.690998][ T5958] bridge_slave_0: left promiscuous mode [ 740.696954][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.705903][ T5958] bridge_slave_1: left allmulticast mode [ 740.711699][ T5958] bridge_slave_1: left promiscuous mode [ 740.717329][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.725267][ T5958] bridge_slave_0: left allmulticast mode [ 740.730899][ T5958] bridge_slave_0: left promiscuous mode [ 740.736778][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.745799][ T5958] bridge_slave_1: left allmulticast mode [ 740.751697][ T5958] bridge_slave_1: left promiscuous mode [ 740.757364][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.765570][ T5958] bridge_slave_0: left allmulticast mode [ 740.771516][ T5958] bridge_slave_0: left promiscuous mode [ 740.777192][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.153159][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.163463][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.173405][ T5958] bond0 (unregistering): Released all slaves [ 741.284929][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.293891][ T5958] bond_slave_0: left promiscuous mode [ 741.300542][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.309510][ T5958] bond_slave_1: left promiscuous mode [ 741.315716][ T5958] bond0 (unregistering): Released all slaves [ 741.327762][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.337770][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.348086][ T5958] bond0 (unregistering): Released all slaves [ 741.452890][ T12] smc: removing ib device syz0 [ 741.457966][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.466864][ T5958] bond_slave_0: left promiscuous mode [ 741.473540][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.482537][ T5958] bond_slave_1: left promiscuous mode [ 741.488514][ T5958] bond0 (unregistering): Released all slaves [ 742.293291][ T5958] hsr_slave_0: left promiscuous mode [ 742.299089][ T5958] hsr_slave_1: left promiscuous mode [ 742.305687][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.314981][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.327529][ T5958] hsr_slave_0: left promiscuous mode [ 742.333646][ T5958] hsr_slave_1: left promiscuous mode [ 742.339452][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.347959][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.356449][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.364380][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.373918][ T5958] hsr_slave_0: left promiscuous mode [ 742.379524][ T5958] hsr_slave_1: left promiscuous mode [ 742.385223][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.392687][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.400226][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.407722][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.417474][ T5958] hsr_slave_0: left promiscuous mode [ 742.423219][ T5958] hsr_slave_1: left promiscuous mode [ 742.428774][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.436369][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.444136][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.451910][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.463115][ T5958] veth1_macvtap: left promiscuous mode [ 742.468595][ T5958] veth0_macvtap: left promiscuous mode [ 742.474407][ T5958] veth1_vlan: left promiscuous mode [ 742.479655][ T5958] veth0_vlan: left promiscuous mode [ 742.486067][ T5958] veth1_macvtap: left promiscuous mode [ 742.491614][ T5958] veth0_macvtap: left promiscuous mode [ 742.497123][ T5958] veth1_vlan: left promiscuous mode [ 742.502472][ T5958] veth0_vlan: left promiscuous mode [ 742.508277][ T5958] veth1_macvtap: left promiscuous mode [ 742.513886][ T5958] veth0_macvtap: left promiscuous mode [ 742.519403][ T5958] veth1_vlan: left promiscuous mode [ 742.524805][ T5958] veth0_vlan: left promiscuous mode [ 742.672222][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 742.685155][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 742.837060][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 742.863241][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 742.970414][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 742.987172][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 743.117115][ T5958] team0 (unregistering): Port device team_slave_1 removed [ 743.146701][ T5958] team0 (unregistering): Port device team_slave_0 removed [ 744.109181][ T5958] IPVS: stop unused estimator thread 0...