last executing test programs: 26m54.905457366s ago: executing program 32 (id=72): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0x9, 0x0) 26m39.278939366s ago: executing program 33 (id=123): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1, 0x400}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) 26m5.022627764s ago: executing program 34 (id=307): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000001f80)=""/4108, 0x100c) 19m57.894963621s ago: executing program 35 (id=1553): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000240)=""/170, 0xaa}], 0x1, 0x401, 0x9) 18m12.609346471s ago: executing program 6 (id=1978): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000540)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) 18m11.074141865s ago: executing program 6 (id=1983): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f000097e000/0x4000)=nil, 0x4000, 0x2000004, 0x81011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x15, 0x1021}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) 18m9.992181561s ago: executing program 6 (id=1985): syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x10, 0x101000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x455, 0x8000008, r4, 0x0) fanotify_mark(r3, 0x7e, 0x800003a, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 18m7.557342454s ago: executing program 6 (id=1987): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 18m6.430811801s ago: executing program 6 (id=1989): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x181381) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x4c}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x232001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 18m4.539595121s ago: executing program 6 (id=1992): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 17m47.888547346s ago: executing program 36 (id=1992): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_open_procfs(0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 14m28.980055185s ago: executing program 8 (id=2466): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x489, &(0x7f0000000580)="$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") rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') r2 = dup(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e49218951b0214802cbd7000ffdb09251000000005100f000400000008e96f00", @ANYRES32=0x0, @ANYBLOB="050010"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) fanotify_mark(r0, 0x1, 0x8000046, r2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3, 0x1, 0x34325852, 0x3, 0x0, [{0x108, 0xf}, {0x8, 0x29f6ebcf}, {0xd, 0x8}, {0x5, 0xc}, {0x75a, 0x5}, {0x5, 0x3}, {0x6, 0x40c}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x0, 0x1}}) r7 = dup(r2) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b801000000000000"], 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000040), 0x4) pwrite64(r7, &(0x7f0000000040)="af", 0x1, 0x800) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14m21.678860572s ago: executing program 8 (id=2472): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m16.856301408s ago: executing program 8 (id=2483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m15.114723869s ago: executing program 5 (id=2477): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 14m10.631712471s ago: executing program 5 (id=2479): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m10.616337692s ago: executing program 8 (id=2480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 14m5.656394713s ago: executing program 5 (id=2484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m5.544413678s ago: executing program 8 (id=2486): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 14m1.655932456s ago: executing program 8 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m1.136377007s ago: executing program 5 (id=2491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m57.87226109s ago: executing program 5 (id=2494): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 13m54.755620977s ago: executing program 5 (id=2498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m39.633967321s ago: executing program 37 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m39.462137159s ago: executing program 38 (id=2498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x64010102}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000008200004000"]) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m22.240153689s ago: executing program 7 (id=2522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) io_setup(0x735c, &(0x7f0000000980)) 13m20.25451655s ago: executing program 7 (id=2523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") io_setup(0x735c, &(0x7f0000000980)) 13m18.418446045s ago: executing program 4 (id=2524): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 13m17.890155506s ago: executing program 7 (id=2525): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 13m17.389243247s ago: executing program 4 (id=2526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") io_setup(0x735c, &(0x7f0000000980)) 13m15.33909786s ago: executing program 4 (id=2527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$eJzsmL1uE08Uxc/Mrtd2FOWff5OCJkhEIgiyjtcCpbEgSEhUNHyJDitZIuNNjJxFIpaQ4AGgo0CiQYIXoKBIRcFDIEEBSEgUcUFBA8Wg2ZmsZz2xd3HL/RWjM3PvfNzj8RQLgiD+Wb5++fn5ycW1a2cAzGIJZT3+3QEYU5ob+Z+e3z/9rHnpxZuPr9/vzD3cH1luVjZCGCMMqEzY3wXwbt1BnO6Uzv4lxZLuLIKn+jo4Tml9E+I/X+vb4LihdQiGW1rfNXQXDL5/HO0o9De60eaddhSuyqYum0A2jdHzDR4zbOq+EEIwI7671++0oijsGcLVsWzIsUaOFNKskVC6WWfB8q8ED4N1jqZxPm4c8NCbVcO/OjjqOqcBhqt6fA1l+L4/tMSo/5g7XN/J1H9QbkV2tVHYk6kyMKlaKSpKNH+oWYf1u5A5XtHpR4X+X5ns9TixLMu5YIfm8XfrKIHsrBKGIenkyG9fxLFcIRfRIhlx82/eeb33FJteyVYxXjyt2pe7gJgv4GpGFKli49UYnxcG+xX7j/0tb0HB8sthxe9PpZA/xh99+ttSRb/Dp/ndTVG2zAQ+vFXvh3jJcFIf87cQwjXej1q8fa+2u9dfaW+3tsKtcCcIGucY8OhsUEseItnOWM+e8T5Xk/dpxnj/SmNyPe7hQSuOe3XVesxDFXHcC5J+kJx7Tid3DzytYlwGcEJ1pONeuqJj7cE8lcOTXKmW7SSCIAiCIAiCIAiCIAiCIIipWARLvoLmEKivsH8CAAD//zcjTJM=") io_setup(0x735c, &(0x7f0000000980)) 13m15.08240828s ago: executing program 7 (id=2528): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 13m13.536327923s ago: executing program 7 (id=2529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") io_setup(0x735c, &(0x7f0000000980)) 13m11.766522866s ago: executing program 4 (id=2530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 13m11.501542386s ago: executing program 4 (id=2531): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) 13m11.339045413s ago: executing program 7 (id=2532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) io_setup(0x735c, &(0x7f0000000980)) 13m10.475660148s ago: executing program 4 (id=2533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") io_setup(0x735c, &(0x7f0000000980)) 12m53.618129243s ago: executing program 39 (id=2533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$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") io_setup(0x735c, &(0x7f0000000980)) 12m53.486509659s ago: executing program 40 (id=2532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) io_setup(0x735c, &(0x7f0000000980)) 1m25.307407872s ago: executing program 2 (id=3372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r4], 0x27) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) 1m13.417856175s ago: executing program 2 (id=3376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000000000000000100000000900000000000000000000000000000002000100000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0004000000"], 0x140}}, 0x0) socket$key(0xf, 0x3, 0x2) 1m13.404116536s ago: executing program 2 (id=3384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x8, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000006c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r4], 0x27) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000100)={0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7f, 0x0, &(0x7f0000000000)={0x80}, 0x68, 0x0, 0x8, 0x0, 0x400000, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) close(r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8, 0x4, 0x3b8, 0xffffffff, 0x0, 0x288, 0x288, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00', 0x2}, {'macvtap0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x288}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_bond\x00', {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'batadv_slave_1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 1m10.969611925s ago: executing program 2 (id=3388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m8.603319112s ago: executing program 2 (id=3391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m3.856859915s ago: executing program 2 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20040040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)=ANY=[@ANYBLOB='shortname=lower,shortname=mixed,shortname=win95,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466383d302c636865636b3d7374726963742c73686f72746e616d653d71696e39352c756e695f786c6174653d312c73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786cff74653d302c646d61736b3d30303030303030303030303030303030303030303030342c696f370b00007365743d69736f383835392d31342c00"], 0x89, 0x29b, &(0x7f0000000580)="$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") creat(0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) 48.026712158s ago: executing program 41 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20040040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)=ANY=[@ANYBLOB='shortname=lower,shortname=mixed,shortname=win95,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466383d302c636865636b3d7374726963742c73686f72746e616d653d71696e39352c756e695f786c6174653d312c73686f72746e616d653d6d697865642c756e695f786c6174653d312c756e695f786cff74653d302c646d61736b3d30303030303030303030303030303030303030303030342c696f370b00007365743d69736f383835392d31342c00"], 0x89, 0x29b, &(0x7f0000000580)="$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") creat(0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) 5.383016182s ago: executing program 0 (id=3554): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) syz_usb_disconnect(r0) 3.197673485s ago: executing program 9 (id=3557): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x2000fb) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 2.567688801s ago: executing program 9 (id=3561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) 2.424054427s ago: executing program 0 (id=3562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)=',', 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) 2.36361842s ago: executing program 9 (id=3564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) 2.309207862s ago: executing program 0 (id=3565): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f0000000100)) 2.235506075s ago: executing program 3 (id=3566): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20040804}, 0x4000001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.140205479s ago: executing program 0 (id=3567): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2.110211231s ago: executing program 9 (id=3568): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1.816300643s ago: executing program 3 (id=3570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 1.64993042s ago: executing program 0 (id=3571): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e6682, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x1062200) 1.573194353s ago: executing program 3 (id=3572): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) 1.460455658s ago: executing program 0 (id=3573): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x4}, 0x2) 1.390188591s ago: executing program 3 (id=3574): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 1.102943043s ago: executing program 3 (id=3576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) 967.959129ms ago: executing program 1 (id=3577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 852.273644ms ago: executing program 3 (id=3578): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x3, 0x6000, 0x0, 0x0}], 0x1}) 758.802978ms ago: executing program 1 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, r1, 0x711, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) 596.480395ms ago: executing program 1 (id=3580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 424.218652ms ago: executing program 1 (id=3581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1) 422.383912ms ago: executing program 9 (id=3582): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) 264.672369ms ago: executing program 9 (id=3583): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "15163259"}]}}, 0x0}, 0x0) 259.488799ms ago: executing program 1 (id=3584): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 0s ago: executing program 1 (id=3585): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r3], 0x0) kernel console output (not intermixed with test programs): nvalid length. [ 681.961040][T13723] team0 (unregistering): Port device team_slave_0 removed [ 682.070880][T13723] team0 (unregistering): Port device team_slave_1 removed [ 682.766977][T13719] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2065'. [ 683.480655][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2072'. [ 683.491955][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2072'. [ 686.066498][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.073161][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.847017][T13775] overlayfs: failed to clone upperpath [ 688.347238][T13776] netlink: 'syz.5.2079': attribute type 2 has an invalid length. [ 690.045288][T13785] overlayfs: failed to clone upperpath [ 691.636183][T13803] overlayfs: failed to clone upperpath [ 691.640490][T13806] overlayfs: failed to clone upperpath [ 692.134734][T13816] overlayfs: failed to clone upperpath [ 692.611878][ T8909] IPVS: starting estimator thread 0... [ 692.743944][T13821] IPVS: using max 16 ests per chain, 38400 per kthread [ 694.553401][T13845] overlayfs: failed to clone upperpath [ 695.087549][T13855] overlayfs: failed to clone upperpath [ 697.120883][T13873] loop8: detected capacity change from 0 to 1024 [ 697.159919][T13873] ext4: Unknown parameter 'hash' [ 704.811297][T13970] overlayfs: failed to clone upperpath [ 705.272070][T13978] overlayfs: failed to clone upperpath [ 705.676946][T13985] overlayfs: failed to clone upperpath [ 707.744696][T14013] overlayfs: failed to clone upperpath [ 707.925914][T14017] overlayfs: failed to clone upperpath [ 708.195933][T14025] overlayfs: failed to clone upperpath [ 708.487848][T14035] overlayfs: failed to clone upperpath [ 709.244666][T14052] overlayfs: failed to resolve './bus': -2 [ 710.161245][T14065] overlayfs: failed to clone upperpath [ 712.075629][T14081] overlayfs: failed to resolve './bus': -2 [ 712.345454][T14085] overlayfs: failed to resolve './bus': -2 [ 712.836902][T14094] overlayfs: failed to clone upperpath [ 713.017625][T14096] overlayfs: failed to resolve './bus': -2 [ 713.542377][T14108] overlayfs: failed to resolve './bus': -2 [ 713.868956][T14117] overlayfs: failed to resolve './bus': -2 [ 714.274732][T14123] overlayfs: failed to clone upperpath [ 714.782423][T14128] overlayfs: failed to clone upperpath [ 715.384883][T14136] overlayfs: failed to clone upperpath [ 716.418483][T14154] overlayfs: failed to resolve './bus': -2 [ 718.263830][ T8911] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 718.453877][ T8911] usb 8-1: Using ep0 maxpacket: 32 [ 718.469976][ T8911] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.495369][ T8911] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 718.513725][ T8911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.532564][ T8911] usb 8-1: Product: syz [ 718.542302][ T8911] usb 8-1: Manufacturer: syz [ 718.562349][ T8911] usb 8-1: SerialNumber: syz [ 718.574985][ T8911] usb 8-1: config 0 descriptor?? [ 718.597898][ T8911] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 719.314093][ T8911] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 725.717276][ T8911] gspca_pac7302: probe of 8-1:0.0 failed with error -110 [ 726.052888][T13654] usb 8-1: USB disconnect, device number 5 [ 726.279332][T14192] loop8: detected capacity change from 0 to 64 [ 729.958677][T14231] overlayfs: missing 'workdir' [ 730.173238][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 730.205919][T14236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.296985][T14240] overlayfs: missing 'lowerdir' [ 730.425695][T14243] overlayfs: missing 'lowerdir' [ 730.959868][T14250] overlayfs: missing 'lowerdir' [ 731.263524][T14257] overlayfs: missing 'lowerdir' [ 734.303406][T14292] overlayfs: missing 'lowerdir' [ 742.420163][T14369] overlayfs: failed to clone upperpath [ 747.431478][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.804440][T14432] overlayfs: missing 'lowerdir' [ 752.631346][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 753.819375][T14462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.114831][T14484] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 754.180134][T14484] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 754.440476][T14489] loop8: detected capacity change from 0 to 512 [ 755.549999][T14489] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 755.648652][T14489] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.2294: bg 0: block 384: padding at end of block bitmap is not set [ 755.698340][T14489] EXT4-fs (loop8): Remounting filesystem read-only [ 755.708585][T14489] EXT4-fs (loop8): 1 truncate cleaned up [ 755.721048][T14489] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.491488][T13485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.789739][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 759.789758][ T28] audit: type=1326 audit(1763777997.912:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.789820][ T28] audit: type=1326 audit(1763777997.912:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.789872][ T28] audit: type=1326 audit(1763777998.012:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.789920][ T28] audit: type=1326 audit(1763777998.012:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.789967][ T28] audit: type=1326 audit(1763777998.012:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.790013][ T28] audit: type=1326 audit(1763777998.112:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.790060][ T28] audit: type=1326 audit(1763777998.112:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.790106][ T28] audit: type=1326 audit(1763777998.112:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.790151][ T28] audit: type=1326 audit(1763777998.212:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 759.790199][ T28] audit: type=1326 audit(1763777998.212:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.5.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a59d8f749 code=0x7ffc0000 [ 761.602538][ C1] vkms_vblank_simulate: vblank timer overrun [ 762.038363][ C1] vkms_vblank_simulate: vblank timer overrun [ 763.069380][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2310'. [ 766.934017][T14592] overlayfs: missing 'lowerdir' [ 768.179421][T14609] overlayfs: failed to clone upperpath [ 770.128424][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 771.191361][T14635] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 771.338064][T14635] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 771.371080][T14635] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 780.173881][T14717] loop8: detected capacity change from 0 to 512 [ 780.184179][T14717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 780.198813][T14717] EXT4-fs (loop8): orphan cleanup on readonly fs [ 780.291757][T14717] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.2350: bg 0: block 248: padding at end of block bitmap is not set [ 780.313930][T14717] __quota_error: 7 callbacks suppressed [ 780.313961][T14717] Quota error (device loop8): write_blk: dquota write failed [ 780.327312][T14717] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 780.337318][T14717] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2350: Failed to acquire dquot type 1 [ 780.359634][T14717] EXT4-fs (loop8): 1 truncate cleaned up [ 780.385191][T14717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 780.574790][T14724] overlayfs: failed to clone upperpath [ 780.666688][T13485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.498398][T14739] overlayfs: failed to clone upperpath [ 789.001656][T14788] overlayfs: failed to clone upperpath [ 791.610345][T14802] nvme_fabrics: missing parameter 'transport=%s' [ 791.642888][T14802] nvme_fabrics: missing parameter 'nqn=%s' [ 794.655218][T14832] overlayfs: failed to clone upperpath [ 795.536921][T14845] loop8: detected capacity change from 0 to 8192 [ 795.691467][T14845] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 795.705812][T14845] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 795.716681][T14845] REISERFS (device loop8): using ordered data mode [ 795.724033][T14845] reiserfs: using flush barriers [ 795.755678][T14845] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 795.778242][T14845] REISERFS (device loop8): checking transaction log (loop8) [ 796.825789][T14845] REISERFS (device loop8): Using tea hash to sort names [ 796.846879][T14845] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 799.634077][ T8906] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 800.564604][ T8906] usb 8-1: Using ep0 maxpacket: 8 [ 800.573158][ T8906] usb 8-1: config 0 has no interfaces? [ 800.579326][ T8906] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 801.116960][ T8906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.140762][ T8906] usb 8-1: config 0 descriptor?? [ 801.864688][T14869] o2cb: This node has not been configured. [ 801.870716][T14869] o2cb: Cluster check failed. Fix errors before retrying. [ 801.878385][T14869] (syz.7.2386,14869,0):user_dlm_register:674 ERROR: status = -22 [ 801.886585][T14869] (syz.7.2386,14869,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 803.124281][ T8906] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 803.399724][ T8906] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 803.415320][ T8906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.567524][ T8909] usb 8-1: USB disconnect, device number 6 [ 803.599001][ T8906] usb 9-1: config 0 descriptor?? [ 803.685575][ T8906] usb 9-1: selecting invalid altsetting 1 [ 803.787848][ T8906] snd-usb-audio: probe of 9-1:0.0 failed with error -22 [ 803.834332][T13709] udevd[13709]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.275022][T14877] loop8: detected capacity change from 0 to 4096 [ 805.336177][T14877] EXT4-fs (loop8): Test dummy encryption mode enabled [ 805.387871][T14877] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 805.457142][T14877] System zones: 0-5 [ 805.503073][T14877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.570673][T14898] overlayfs: failed to clone upperpath [ 805.810593][T14877] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 806.028676][ T8889] usb 9-1: USB disconnect, device number 2 [ 806.569353][T14906] overlayfs: failed to clone upperpath [ 806.620508][T13485] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.025835][T14921] loop8: detected capacity change from 0 to 64 [ 808.399306][T14924] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 808.873497][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.789666][T14932] overlayfs: failed to clone upperpath [ 809.972037][T14924] team0 (unregistering): Port device team_slave_0 removed [ 810.004456][T14924] team0 (unregistering): Port device team_slave_1 removed [ 810.078585][T14921] lo: entered allmulticast mode [ 810.092635][T12930] infiniband syz2: set down [ 811.649798][T14943] loop8: detected capacity change from 0 to 128 [ 812.970714][T14964] overlayfs: failed to clone upperpath [ 814.136905][T14974] overlayfs: failed to clone upperpath [ 815.984623][T14992] netlink: 'syz.8.2425': attribute type 10 has an invalid length. [ 816.473646][ T8906] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 817.655917][T15001] No such timeout policy "syz1" [ 818.575663][ T8906] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 818.610182][ T8911] IPVS: starting estimator thread 0... [ 818.615793][ T8906] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 818.635759][ T8906] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 818.687504][ T8906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 818.696558][ T8906] usb 8-1: Product: syz [ 818.702197][ T8906] usb 8-1: Manufacturer: syz [ 818.709894][ T8906] usb 8-1: SerialNumber: syz [ 818.724334][T15005] IPVS: using max 19 ests per chain, 45600 per kthread [ 818.973226][ T8906] usb 8-1: USB disconnect, device number 7 [ 820.794055][T15029] (null): rxe_set_mtu: Set mtu to 1024 [ 820.810770][T15029] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 821.778721][T15039] mmap: syz.7.2438 (15039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 823.157750][T15047] netlink: 'syz.5.2441': attribute type 10 has an invalid length. [ 824.965427][T15063] netlink: 'syz.8.2451': attribute type 2 has an invalid length. [ 826.390217][T15063] loop8: detected capacity change from 0 to 40427 [ 826.468943][T15063] F2FS-fs (loop8): Unrecognized mount option "000000000000000000050x000000000000000500000000000000000005Odv9KQv7ڮ3"8NXv \fMTwG.uJ"<%fkgÃe̯f 1 [ 892.925638][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 893.257873][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.270457][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 893.289102][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 893.310541][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 893.320185][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 894.846695][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 894.869528][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 894.878250][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 894.894575][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 894.904597][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 894.912323][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.194743][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.326996][T13414] Bluetooth: hci3: command tx timeout [ 896.919602][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.026824][T13414] Bluetooth: hci4: command tx timeout [ 897.963215][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.383842][T13414] Bluetooth: hci3: command tx timeout [ 900.589298][T13414] Bluetooth: hci4: command tx timeout [ 901.573856][T13414] Bluetooth: hci3: command tx timeout [ 902.547359][ T40] tipc: Left network mode [ 902.547588][T15312] chnl_net:caif_netlink_parms(): no params data found [ 903.805832][T13414] Bluetooth: hci4: command tx timeout [ 903.811396][ T5800] Bluetooth: hci3: command tx timeout [ 905.696986][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.766071][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.828353][ T5800] Bluetooth: hci4: command tx timeout [ 905.899234][T15312] bridge_slave_0: entered allmulticast mode [ 906.027355][T15312] bridge_slave_0: entered promiscuous mode [ 906.569786][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.601683][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.882989][T15312] bridge_slave_1: entered allmulticast mode [ 906.916544][T15312] bridge_slave_1: entered promiscuous mode [ 907.482424][T15312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.746907][T15312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.836933][ T40] bridge0: port 3(gretap0) entered disabled state [ 907.897325][ T40] gretap0 (unregistering): left allmulticast mode [ 907.911177][ T40] gretap0 (unregistering): left promiscuous mode [ 907.941596][ T40] bridge0: port 3(gretap0) entered disabled state [ 908.661556][T15312] team0: Port device team_slave_0 added [ 909.746479][ T40] dvmrp1 (unregistering): left allmulticast mode [ 909.788252][T15312] team0: Port device team_slave_1 added [ 910.123151][T15322] chnl_net:caif_netlink_parms(): no params data found [ 910.346816][T15312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.368977][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.568857][T15312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.612678][T15312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.665273][T15312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.753546][T15312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.857103][T15312] hsr_slave_0: entered promiscuous mode [ 912.915680][T15312] hsr_slave_1: entered promiscuous mode [ 912.974001][T15312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 912.981644][T15312] Cannot create hsr debugfs directory [ 916.987815][ T40] hsr_slave_0: left promiscuous mode [ 918.588147][ T40] hsr_slave_1: left promiscuous mode [ 918.637687][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.666363][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.707338][ T40] bridge_slave_1: left allmulticast mode [ 918.744550][ T40] bridge_slave_1: left promiscuous mode [ 918.750455][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.784340][ T40] bridge_slave_0: left allmulticast mode [ 918.790087][ T40] bridge_slave_0: left promiscuous mode [ 918.797051][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.902232][ T40] bridge0: left promiscuous mode [ 918.957612][ T40] veth1_vlan: left promiscuous mode [ 919.125678][ T40] veth0_vlan: left promiscuous mode [ 936.546345][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.845793][T13414] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 937.858079][T13414] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 937.869179][T13414] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 937.901133][T13414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 937.909134][T13414] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 937.917080][T13414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.004641][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.029707][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.038525][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.109215][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.151524][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 938.159122][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.456883][ T40] team0 (unregistering): Port device team_slave_1 removed [ 938.525792][ T40] team0 (unregistering): Port device team_slave_0 removed [ 938.589449][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.661956][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.361402][ T40] bond0 (unregistering): Released all slaves [ 939.440526][ T40] lo (unregistering): left allmulticast mode [ 939.462382][T15322] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.472462][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.480489][T15322] bridge_slave_0: entered allmulticast mode [ 939.488103][T15322] bridge_slave_0: entered promiscuous mode [ 939.497491][T15322] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.504793][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.512116][T15322] bridge_slave_1: entered allmulticast mode [ 939.521467][T15322] bridge_slave_1: entered promiscuous mode [ 939.807429][T15322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.835003][T15322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.994306][T13414] Bluetooth: hci0: command tx timeout [ 940.051698][T15322] team0: Port device team_slave_0 added [ 940.078210][T15322] team0: Port device team_slave_1 added [ 940.275894][T15322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.282921][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.313996][T13414] Bluetooth: hci1: command tx timeout [ 940.337974][T15322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.386447][T15322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.404427][T15322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.455541][T15322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.566814][ T40] IPVS: stop unused estimator thread 0... [ 940.620814][T15322] hsr_slave_0: entered promiscuous mode [ 940.630811][T15322] hsr_slave_1: entered promiscuous mode [ 940.642904][T15322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.652272][T15322] Cannot create hsr debugfs directory [ 940.781764][T15312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 940.799630][T15312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 940.860221][T15312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 940.931826][T15312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 941.017199][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.126529][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.285101][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.374791][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.568775][T15486] chnl_net:caif_netlink_parms(): no params data found [ 942.065083][T13414] Bluetooth: hci0: command tx timeout [ 942.098306][T15482] chnl_net:caif_netlink_parms(): no params data found [ 942.319626][T15486] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.333674][T15486] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.340996][T15486] bridge_slave_0: entered allmulticast mode [ 942.349550][T15486] bridge_slave_0: entered promiscuous mode [ 942.358854][T15486] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.366081][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.373400][T15486] bridge_slave_1: entered allmulticast mode [ 942.380799][T15486] bridge_slave_1: entered promiscuous mode [ 942.386824][T13414] Bluetooth: hci1: command tx timeout [ 942.519673][T15482] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.528106][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.535940][T15482] bridge_slave_0: entered allmulticast mode [ 942.543351][T15482] bridge_slave_0: entered promiscuous mode [ 942.561571][T15486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.572525][T15482] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.580065][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.587687][T15482] bridge_slave_1: entered allmulticast mode [ 942.595396][T15482] bridge_slave_1: entered promiscuous mode [ 942.609820][T15486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.689864][T15486] team0: Port device team_slave_0 added [ 942.701637][T15486] team0: Port device team_slave_1 added [ 942.711257][T15482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.727074][T15482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.816865][T15312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.825971][T15486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.833073][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.860113][T15486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.884807][T15482] team0: Port device team_slave_0 added [ 942.896126][T15486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.903112][T15486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.929786][T15486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.949828][T15482] team0: Port device team_slave_1 added [ 943.013024][T15312] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.025961][T15482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.033049][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.059391][T15482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.114764][T15486] hsr_slave_0: entered promiscuous mode [ 943.121217][T15486] hsr_slave_1: entered promiscuous mode [ 943.128383][T15486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.136122][T15486] Cannot create hsr debugfs directory [ 943.142403][T15482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.150336][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.179068][T15482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.194639][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.201791][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.319450][T15482] hsr_slave_0: entered promiscuous mode [ 943.326462][T15482] hsr_slave_1: entered promiscuous mode [ 943.332740][T15482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 943.340714][T15482] Cannot create hsr debugfs directory [ 943.435104][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.442305][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.956742][T15312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.154518][T13414] Bluetooth: hci0: command tx timeout [ 944.476701][T13414] Bluetooth: hci1: command tx timeout [ 944.509663][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.601035][T15312] veth0_vlan: entered promiscuous mode [ 944.667727][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.719723][T15312] veth1_vlan: entered promiscuous mode [ 944.811715][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.896096][T15312] veth0_macvtap: entered promiscuous mode [ 944.958954][T15312] veth1_macvtap: entered promiscuous mode [ 944.997614][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.009104][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.019564][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.032218][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.042638][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.054621][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.068873][T15312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.093644][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.120519][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.130706][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.150808][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.160958][T15312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.171787][T15312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.183820][T15312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.238215][T15312] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.256553][T15312] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.271581][T15312] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.282595][T15312] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.496596][ T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.528328][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.551772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.600802][ T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.641669][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.661962][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.684803][ T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.828396][ T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.273616][T13414] Bluetooth: hci0: command tx timeout [ 946.544234][T13414] Bluetooth: hci1: command tx timeout [ 946.848287][ T40] tipc: Left network mode [ 947.280469][T15603] loop9: detected capacity change from 0 to 16 [ 947.468407][T15603] erofs: (device loop9): mounted with root inode @ nid 36. [ 948.756654][T15613] loop9: detected capacity change from 0 to 16 [ 948.791743][T15613] erofs: (device loop9): mounted with root inode @ nid 36. [ 952.024465][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 952.036056][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 952.045576][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 952.075574][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 952.096670][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 952.107334][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.279491][T15663] loop9: detected capacity change from 0 to 16 [ 953.330784][T15663] erofs: (device loop9): mounted with root inode @ nid 36. [ 954.264947][T13414] Bluetooth: hci2: command tx timeout [ 955.264311][T15673] loop9: detected capacity change from 0 to 16 [ 955.314177][T15673] erofs: (device loop9): mounted with root inode @ nid 36. [ 956.306357][T13414] Bluetooth: hci2: command tx timeout [ 956.330422][T15486] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.487978][T15486] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.529065][T15486] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.878004][T15486] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 958.280308][T15482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 958.393928][T13414] Bluetooth: hci2: command tx timeout [ 958.415053][T15482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 958.522234][T15482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 958.614677][T15647] chnl_net:caif_netlink_parms(): no params data found [ 958.808179][T15482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 959.538973][T15703] loop9: detected capacity change from 0 to 16 [ 959.595676][T15703] erofs: (device loop9): mounted with root inode @ nid 36. [ 960.271713][T15647] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.299662][T15647] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.312825][T15647] bridge_slave_0: entered allmulticast mode [ 960.338391][T15647] bridge_slave_0: entered promiscuous mode [ 960.410351][T15647] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.418812][T15647] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.428450][T15647] bridge_slave_1: entered allmulticast mode [ 960.448301][T15647] bridge_slave_1: entered promiscuous mode [ 960.463791][T13414] Bluetooth: hci2: command tx timeout [ 960.592382][T15647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.644966][T15647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.939920][T15647] team0: Port device team_slave_0 added [ 960.982984][T15647] team0: Port device team_slave_1 added [ 961.650925][T15486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.919811][T15647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.955822][T15647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.993812][T15647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.050862][T15486] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.380925][T15710] loop9: detected capacity change from 0 to 16 [ 962.509980][T15710] erofs: (device loop9): mounted with root inode @ nid 36. [ 963.356644][ T40] hsr_slave_0: left promiscuous mode [ 963.398186][ T40] hsr_slave_1: left promiscuous mode [ 963.434003][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.444864][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.464909][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.472387][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.491268][ T40] bridge_slave_1: left allmulticast mode [ 963.500914][ T40] bridge_slave_1: left promiscuous mode [ 963.518496][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.538795][ T40] bridge_slave_0: left allmulticast mode [ 963.551752][ T40] bridge_slave_0: left promiscuous mode [ 963.562430][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.578213][ T40] hsr_slave_0: left promiscuous mode [ 963.584578][ T40] hsr_slave_1: left promiscuous mode [ 963.590612][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.598257][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.607911][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.615549][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.623340][ T40] bridge_slave_1: left allmulticast mode [ 963.631390][ T40] bridge_slave_1: left promiscuous mode [ 963.637860][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.660287][ T40] bridge_slave_0: left allmulticast mode [ 963.672385][ T40] bridge_slave_0: left promiscuous mode [ 963.683173][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.704177][ T40] hsr_slave_0: left promiscuous mode [ 963.720717][ T40] hsr_slave_1: left promiscuous mode [ 963.727212][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.747762][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.759468][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.784275][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.814245][ T40] bridge_slave_1: left allmulticast mode [ 963.819953][ T40] bridge_slave_1: left promiscuous mode [ 963.827519][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.837359][ T40] bridge_slave_0: left allmulticast mode [ 963.852338][ T40] bridge_slave_0: left promiscuous mode [ 963.858453][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.947546][ T40] veth1_macvtap: left promiscuous mode [ 963.953585][ T40] veth0_macvtap: left promiscuous mode [ 963.959332][ T40] veth1_vlan: left promiscuous mode [ 963.965759][ T40] veth0_vlan: left promiscuous mode [ 963.973365][ T40] veth1_vlan: left promiscuous mode [ 963.981849][ T40] veth0_vlan: left promiscuous mode [ 963.989750][ T40] veth1_vlan: left promiscuous mode [ 963.999497][ T40] veth0_vlan: left promiscuous mode [ 964.830513][ T40] infiniband syz2: set down [ 970.766878][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.887195][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.286239][T15731] loop9: detected capacity change from 0 to 16 [ 971.371327][T15731] erofs: (device loop9): mounted with root inode @ nid 36. [ 972.956768][T15736] loop9: detected capacity change from 0 to 16 [ 973.012104][T15736] erofs: (device loop9): mounted with root inode @ nid 36. [ 973.822072][ T40] bond0 (unregistering): Released all slaves [ 975.826246][ T9664] smc: removing ib device syz2 [ 975.964828][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.212617][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.217616][ T40] bond0 (unregistering): Released all slaves [ 983.244664][ T40] team0 (unregistering): Port device team_slave_1 removed [ 983.321350][ T40] team0 (unregistering): Port device team_slave_0 removed [ 983.406794][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.529702][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.397022][T15775] loop9: detected capacity change from 0 to 16 [ 984.445322][T15775] erofs: (device loop9): mounted with root inode @ nid 36. [ 985.879667][ T40] bond0 (unregistering): Released all slaves [ 985.994598][ T40] lo (unregistering): left allmulticast mode [ 986.038302][T15647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.053604][T15647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.092616][T15647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.066420][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.073647][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.835310][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.842553][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.079052][T15647] hsr_slave_0: entered promiscuous mode [ 988.171524][T15647] hsr_slave_1: entered promiscuous mode [ 988.197044][T15482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.270360][T15482] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.637701][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.645234][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.656045][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.663249][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.193931][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.450474][ T40] IPVS: stop unused estimator thread 0... [ 993.536474][ T40] IPVS: stop unused estimator thread 0... [ 993.692959][T15482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.831416][T15647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 993.842917][T15647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 993.865700][T15486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.895482][T15647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 993.967110][T15647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 994.087673][T15482] veth0_vlan: entered promiscuous mode [ 994.217192][T15482] veth1_vlan: entered promiscuous mode [ 994.283362][T15486] veth0_vlan: entered promiscuous mode [ 994.489782][T15482] veth0_macvtap: entered promiscuous mode [ 994.542464][T15482] veth1_macvtap: entered promiscuous mode [ 994.557914][T15486] veth1_vlan: entered promiscuous mode [ 994.592500][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.782921][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.903966][T15482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.458206][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.471444][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.484722][T15482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.508558][T15482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.542751][T15482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.552467][T15482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.562343][T15482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.599295][ T59] hsr_slave_0: left promiscuous mode [ 995.606322][ T59] hsr_slave_1: left promiscuous mode [ 995.612557][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.712759][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.407213][ T59] bridge_slave_1: left allmulticast mode [ 996.413193][ T59] bridge_slave_1: left promiscuous mode [ 996.419206][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.497687][ T59] bridge_slave_0: left allmulticast mode [ 996.503410][ T59] bridge_slave_0: left promiscuous mode [ 996.518738][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.921124][T15837] loop9: detected capacity change from 0 to 16 [ 996.969989][T15837] erofs: (device loop9): mounted with root inode @ nid 36. [ 998.116007][ T59] team0 (unregistering): Port device team_slave_1 removed [ 998.250720][ T59] team0 (unregistering): Port device team_slave_0 removed [ 998.911712][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.340555][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.351652][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.545459][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.554457][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.562687][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.576027][ T5800] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 999.587932][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 999.594872][T15850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 999.599706][T15850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 999.622155][T15850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 999.639724][T15850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1000.373954][ T5800] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1000.381536][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1000.968599][ T59] bond0 (unregistering): Released all slaves [ 1001.104149][T15857] loop9: detected capacity change from 0 to 16 [ 1001.197228][T15857] erofs: (device loop9): mounted with root inode @ nid 36. [ 1002.211493][T15647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.248232][T15647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.333150][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.340382][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.393602][T15483] Bluetooth: hci4: command tx timeout [ 1002.396893][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.406821][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.463637][T15483] Bluetooth: hci5: command tx timeout [ 1002.645362][T15647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.151558][T15861] loop9: detected capacity change from 0 to 16 [ 1003.264339][T15861] erofs: (device loop9): mounted with root inode @ nid 36. [ 1004.477012][T15483] Bluetooth: hci4: command tx timeout [ 1004.553706][T15483] Bluetooth: hci5: command tx timeout [ 1004.983260][T15848] chnl_net:caif_netlink_parms(): no params data found [ 1005.048588][T15846] chnl_net:caif_netlink_parms(): no params data found [ 1005.272688][T15647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.567926][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.584187][T15848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.592387][T15848] bridge_slave_0: entered allmulticast mode [ 1005.614208][T15848] bridge_slave_0: entered promiscuous mode [ 1005.633116][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.641665][T15848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.659317][T15848] bridge_slave_1: entered allmulticast mode [ 1005.670627][T15848] bridge_slave_1: entered promiscuous mode [ 1005.702491][T15846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.718804][T15846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.735242][T15846] bridge_slave_0: entered allmulticast mode [ 1005.742727][T15846] bridge_slave_0: entered promiscuous mode [ 1005.759939][T15846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.768348][T15846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.777806][T15846] bridge_slave_1: entered allmulticast mode [ 1005.785423][T15846] bridge_slave_1: entered promiscuous mode [ 1006.058531][T15848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.206731][T15886] loop9: detected capacity change from 0 to 16 [ 1006.228887][T15886] erofs: (device loop9): mounted with root inode @ nid 36. [ 1006.609004][T15483] Bluetooth: hci4: command tx timeout [ 1006.630964][ T5800] Bluetooth: hci5: command tx timeout [ 1006.965097][T15848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.078286][T15846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.181035][T15848] team0: Port device team_slave_0 added [ 1007.190388][T15846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.261968][T15647] veth0_vlan: entered promiscuous mode [ 1007.292923][T15647] veth1_vlan: entered promiscuous mode [ 1007.329135][T15848] team0: Port device team_slave_1 added [ 1007.462906][T15846] team0: Port device team_slave_0 added [ 1007.642635][T15848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.650238][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.679792][T15848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.696846][T15846] team0: Port device team_slave_1 added [ 1007.908234][T15891] loop9: detected capacity change from 0 to 16 [ 1007.969911][T15891] erofs: (device loop9): mounted with root inode @ nid 36. [ 1008.793079][T15483] Bluetooth: hci5: command tx timeout [ 1008.944841][T15483] Bluetooth: hci4: command tx timeout [ 1008.956054][T15848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.988890][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.032422][T15848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.081274][T15846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.100671][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.137566][T15846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.153170][T15846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.160484][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.186613][T15846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.286934][T15647] veth0_macvtap: entered promiscuous mode [ 1009.298329][T15647] veth1_macvtap: entered promiscuous mode [ 1009.321451][T15647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.342774][T15647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.360944][T15647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.371973][T15647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.426770][T15647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.464584][T15848] hsr_slave_0: entered promiscuous mode [ 1009.471078][T15848] hsr_slave_1: entered promiscuous mode [ 1009.478207][T15848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.486207][T15848] Cannot create hsr debugfs directory [ 1010.367954][T15647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.378600][T15647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.389147][T15647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.403612][T15647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.427942][T15647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.489899][T15846] hsr_slave_0: entered promiscuous mode [ 1010.508692][T15846] hsr_slave_1: entered promiscuous mode [ 1010.520308][T15846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.539340][T15846] Cannot create hsr debugfs directory [ 1010.679345][T15647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.689227][T15647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.699132][T15647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.708230][T15647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.391225][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.415044][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.444069][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.453937][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.461718][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1012.469374][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.942130][ T3516] hsr_slave_0: left promiscuous mode [ 1012.959835][ T3516] hsr_slave_1: left promiscuous mode [ 1012.969380][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.987045][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.009198][ T3516] bridge_slave_1: left allmulticast mode [ 1013.019050][ T3516] bridge_slave_1: left promiscuous mode [ 1013.028640][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.050795][ T3516] bridge_slave_0: left allmulticast mode [ 1013.059969][ T3516] bridge_slave_0: left promiscuous mode [ 1013.071191][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.120858][ T3516] veth1_vlan: left promiscuous mode [ 1013.126372][ T3516] veth0_vlan: left promiscuous mode [ 1014.550745][T15483] Bluetooth: hci0: command tx timeout [ 1016.623587][T15483] Bluetooth: hci0: command tx timeout [ 1016.663379][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1016.772036][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1016.883879][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.950562][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.629232][ T3516] bond0 (unregistering): Released all slaves [ 1017.759331][T15846] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.997710][T15846] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.224098][T15846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.715475][T15483] Bluetooth: hci0: command tx timeout [ 1018.846142][T15846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.296739][T15906] chnl_net:caif_netlink_parms(): no params data found [ 1020.470517][ T3516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.880251][T15483] Bluetooth: hci0: command tx timeout [ 1020.887073][T15483] Bluetooth: hci3: command 0x0406 tx timeout [ 1021.069819][T15906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.114897][T15906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.157619][T15906] bridge_slave_0: entered allmulticast mode [ 1021.203969][T15906] bridge_slave_0: entered promiscuous mode [ 1021.263209][T15846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1021.555222][T15846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1021.687260][ T3516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.787869][T15906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.816822][T15906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.895088][T15906] bridge_slave_1: entered allmulticast mode [ 1021.902640][T15906] bridge_slave_1: entered promiscuous mode [ 1021.978278][T15846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1022.004295][T15846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1022.218415][ T3516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.117183][T15906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.227365][ T3516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.260327][T15906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.417182][T15906] team0: Port device team_slave_0 added [ 1025.455492][T15906] team0: Port device team_slave_1 added [ 1025.655145][T15906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.662163][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.691309][T15906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.717091][T15906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.756966][T15906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.789031][T15906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.456224][T15906] hsr_slave_0: entered promiscuous mode [ 1026.472019][T15906] hsr_slave_1: entered promiscuous mode [ 1026.643826][T15906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.661727][T15906] Cannot create hsr debugfs directory [ 1027.554200][T15848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1027.577034][T15848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1027.721263][T15848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1027.742247][T15848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1027.789820][T15846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.965830][T15846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.373782][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.381028][T12930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.412332][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.419575][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.589198][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.841518][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.086097][T12930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.093340][T12930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.163147][ T3516] hsr_slave_0: left promiscuous mode [ 1031.180921][ T3516] hsr_slave_1: left promiscuous mode [ 1031.217370][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.237426][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.284564][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.292051][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.321034][ T3516] bridge_slave_1: left allmulticast mode [ 1031.328009][ T3516] bridge_slave_1: left promiscuous mode [ 1031.341844][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.537663][ T3516] bridge_slave_0: left allmulticast mode [ 1031.543601][ T3516] bridge_slave_0: left promiscuous mode [ 1031.549393][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.566123][ T3516] hsr_slave_0: left promiscuous mode [ 1031.572389][ T3516] hsr_slave_1: left promiscuous mode [ 1031.620950][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.957499][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.968819][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.992170][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.051364][ T3516] bridge_slave_1: left allmulticast mode [ 1032.103306][ T3516] bridge_slave_1: left promiscuous mode [ 1032.140069][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.374780][ T3516] bridge_slave_0: left allmulticast mode [ 1032.403635][ T3516] bridge_slave_0: left promiscuous mode [ 1032.409464][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.649743][ T3516] veth1_macvtap: left promiscuous mode [ 1032.668195][ T3516] veth0_macvtap: left promiscuous mode [ 1032.690235][ T3516] veth1_vlan: left promiscuous mode [ 1032.698085][ T3516] veth0_vlan: left promiscuous mode [ 1032.715822][ T3516] veth1_macvtap: left promiscuous mode [ 1032.721437][ T3516] veth0_macvtap: left promiscuous mode [ 1032.727528][ T3516] veth1_vlan: left promiscuous mode [ 1032.732926][ T3516] veth0_vlan: left promiscuous mode [ 1040.011265][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1040.139179][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1040.201753][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.266786][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.985576][ T3516] bond0 (unregistering): Released all slaves [ 1041.676754][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1041.737192][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1041.798469][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.860553][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.561087][ T3516] bond0 (unregistering): Released all slaves [ 1042.673227][T12930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.680437][T12930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.771138][T15846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.840432][T15906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1043.056148][T15906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1043.081270][T15906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1043.404757][T15906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1043.961364][T15846] veth0_vlan: entered promiscuous mode [ 1044.055083][T15846] veth1_vlan: entered promiscuous mode [ 1044.278706][T15846] veth0_macvtap: entered promiscuous mode [ 1044.957765][T15846] veth1_macvtap: entered promiscuous mode [ 1045.062232][T15846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.076856][T15846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.089806][T15846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.126879][T15846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.159073][T15846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.184783][T15846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.221635][T15846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.273528][T15846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.282490][T15846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.298333][T15846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.349771][T15906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.550239][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.932254][T15906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.432281][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.439567][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.459685][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.466965][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.657954][T15747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.715999][T15747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.884842][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.892747][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.957813][T15848] veth0_vlan: entered promiscuous mode [ 1047.017525][T15848] veth1_vlan: entered promiscuous mode [ 1047.139249][T15848] veth0_macvtap: entered promiscuous mode [ 1047.206237][T15848] veth1_macvtap: entered promiscuous mode [ 1047.251916][T15848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.287886][T15848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.304492][T15848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.316078][T15848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.335562][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.357670][T15848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.370171][T15848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.387686][T15848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.398651][T15848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.416622][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.449936][T15848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.480773][T15848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.500185][T15848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.533372][T15848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.876402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.912113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.000596][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.029173][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.068586][T15906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.693836][T15906] veth0_vlan: entered promiscuous mode [ 1049.085404][T15906] veth1_vlan: entered promiscuous mode [ 1049.125637][T15906] veth0_macvtap: entered promiscuous mode [ 1049.137030][T15906] veth1_macvtap: entered promiscuous mode [ 1049.331676][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.398230][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.408258][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.419420][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.430105][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.440800][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.456604][T15906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.488453][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.522107][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.553694][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.596559][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.633508][T15906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.663477][T15906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.831224][T15906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.546144][T15906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.579150][T15906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.612224][T15906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.648849][T15906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.192034][ T9664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.234036][ T9664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.348824][T16148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.402013][T16148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.158970][T16185] loop2: detected capacity change from 0 to 16 [ 1054.655301][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.751456][T16185] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 1061.676041][T16233] loop1: detected capacity change from 0 to 16 [ 1061.694203][T16233] erofs: (device loop1): mounted with root inode @ nid 36. [ 1065.909882][T16255] loop1: detected capacity change from 0 to 16 [ 1066.038783][T16255] erofs: (device loop1): mounted with root inode @ nid 36. [ 1072.053888][T16293] loop9: detected capacity change from 0 to 16 [ 1072.101427][T16293] erofs: (device loop9): mounted with root inode @ nid 36. [ 1081.880210][T16369] loop2: detected capacity change from 0 to 16 [ 1081.932096][T16369] erofs: (device loop2): mounted with root inode @ nid 36. [ 1088.059979][T16405] loop2: detected capacity change from 0 to 16 [ 1088.174630][T16405] erofs: (device loop2): mounted with root inode @ nid 36. [ 1090.799351][T16419] loop2: detected capacity change from 0 to 16 [ 1090.817804][T16419] erofs: (device loop2): mounted with root inode @ nid 36. [ 1112.272847][T16559] loop0: detected capacity change from 0 to 16 [ 1112.304664][T16559] erofs: (device loop0): mounted with root inode @ nid 36. [ 1116.452088][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.962197][T13414] Bluetooth: hci4: command 0x0406 tx timeout [ 1123.972359][T15483] Bluetooth: hci5: command 0x0406 tx timeout [ 1129.463221][T16660] loop2: detected capacity change from 0 to 256 [ 1129.549059][T16261] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1129.615233][T16669] loop1: detected capacity change from 0 to 256 [ 1130.231719][T16676] loop9: detected capacity change from 0 to 256 [ 1130.325320][T15519] IPVS: starting estimator thread 0... [ 1130.693922][T16677] IPVS: using max 16 ests per chain, 38400 per kthread [ 1130.767531][T15519] IPVS: starting estimator thread 0... [ 1131.053628][T16680] IPVS: using max 19 ests per chain, 45600 per kthread [ 1131.400790][T15519] IPVS: starting estimator thread 0... [ 1131.693820][T16688] IPVS: using max 26 ests per chain, 62400 per kthread [ 1132.080940][T16701] loop9: detected capacity change from 0 to 256 [ 1132.194058][T16154] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1133.514528][T16715] loop2: detected capacity change from 0 to 256 [ 1133.963266][T16154] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1134.782017][T16733] loop2: detected capacity change from 0 to 256 [ 1134.838332][T16154] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1141.334258][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.527208][T16794] loop0: detected capacity change from 0 to 256 [ 1143.752617][T16796] loop1: detected capacity change from 0 to 16 [ 1143.763237][T16796] erofs: (device loop1): mounted with root inode @ nid 36. [ 1144.458128][T16154] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1145.187233][ T8907] IPVS: starting estimator thread 0... [ 1145.306002][T16802] IPVS: using max 19 ests per chain, 45600 per kthread [ 1147.717227][T16824] loop1: detected capacity change from 0 to 256 [ 1148.321389][T16154] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1150.734197][T16850] loop0: detected capacity change from 0 to 16 [ 1150.777871][T16850] erofs: (device loop0): mounted with root inode @ nid 36. [ 1153.526099][T16868] loop1: detected capacity change from 0 to 256 [ 1160.839030][T16900] loop1: detected capacity change from 0 to 16 [ 1160.849557][T16900] erofs: (device loop1): mounted with root inode @ nid 36. [ 1164.089067][T16932] loop0: detected capacity change from 0 to 256 [ 1164.372714][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1173.688519][T16983] loop1: detected capacity change from 0 to 16 [ 1173.851888][T16983] erofs: (device loop1): mounted with root inode @ nid 36. [ 1174.486665][T16984] loop0: detected capacity change from 0 to 256 [ 1176.164455][T16995] loop1: detected capacity change from 0 to 256 [ 1176.269692][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1177.411423][T17006] loop9: detected capacity change from 0 to 16 [ 1177.455297][T17006] erofs: (device loop9): mounted with root inode @ nid 36. [ 1177.572731][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.128419][T17005] loop0: detected capacity change from 0 to 256 [ 1178.312799][T16903] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1179.562840][T17019] loop9: detected capacity change from 0 to 16 [ 1179.588622][T17019] erofs: (device loop9): mounted with root inode @ nid 36. [ 1186.640643][T17038] loop0: detected capacity change from 0 to 256 [ 1186.790809][T17041] loop2: detected capacity change from 0 to 256 [ 1186.815249][T16948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1189.181252][T17050] loop9: detected capacity change from 0 to 256 [ 1189.310067][T16903] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1190.283730][T17063] loop0: detected capacity change from 0 to 256 [ 1191.558644][T16948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.255185][T17074] loop1: detected capacity change from 0 to 256 [ 1193.696631][T16903] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1196.701970][T17104] loop9: detected capacity change from 0 to 16 [ 1198.524684][T17104] erofs: (device loop9): erofs_read_superblock: cannot read erofs superblock [ 1199.223179][T17112] loop0: detected capacity change from 0 to 256 [ 1202.569538][T17135] loop1: detected capacity change from 0 to 256 [ 1202.656440][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1205.891279][T17163] loop1: detected capacity change from 0 to 256 [ 1206.063792][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1209.087333][T17187] loop9: detected capacity change from 0 to 256 [ 1209.195281][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1210.277113][T17201] loop2: detected capacity change from 0 to 16 [ 1212.212713][T17201] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 1214.308314][T17214] loop1: detected capacity change from 0 to 256 [ 1217.831752][T17243] loop2: detected capacity change from 0 to 256 [ 1218.596314][T17251] loop0: detected capacity change from 0 to 256 [ 1219.719660][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1220.509094][T17259] loop9: detected capacity change from 0 to 256 [ 1220.568991][T16948] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1222.793321][T17275] loop2: detected capacity change from 0 to 256 [ 1224.441091][T17282] loop0: detected capacity change from 0 to 256 [ 1231.815669][T17315] loop2: detected capacity change from 0 to 256 [ 1232.688976][T17327] loop1: detected capacity change from 0 to 256 [ 1232.739411][T17324] loop9: detected capacity change from 0 to 256 [ 1233.592423][T17333] loop0: detected capacity change from 0 to 16 [ 1233.909833][T17333] erofs: (device loop0): mounted with root inode @ nid 36. [ 1235.173329][T17335] loop2: detected capacity change from 0 to 256 [ 1235.911346][T17339] loop0: detected capacity change from 0 to 256 [ 1236.569750][T17345] loop1: detected capacity change from 0 to 256 [ 1236.959342][T17349] loop9: detected capacity change from 0 to 256 [ 1239.557715][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.573480][T17375] loop9: detected capacity change from 0 to 256 [ 1244.242390][T17395] loop2: detected capacity change from 0 to 256 [ 1244.955806][T17402] loop1: detected capacity change from 0 to 256 [ 1244.975304][T17399] loop0: detected capacity change from 0 to 256 [ 1246.452474][T17412] loop2: detected capacity change from 0 to 256 [ 1247.898347][T17417] loop0: detected capacity change from 0 to 16 [ 1247.925491][T17417] erofs: (device loop0): mounted with root inode @ nid 36. [ 1248.423718][T16904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1249.132541][T17432] loop0: detected capacity change from 0 to 256 [ 1251.479449][T17445] loop9: detected capacity change from 0 to 256 [ 1251.703510][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1251.843150][T17455] loop0: detected capacity change from 0 to 256 [ 1253.492330][T16903] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1254.150675][T17465] loop1: detected capacity change from 0 to 256 [ 1254.238393][T17468] loop2: detected capacity change from 0 to 256 [ 1255.349613][T16903] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1256.690518][T17483] loop9: detected capacity change from 0 to 16 [ 1258.205997][T17483] erofs: (device loop9): mounted with root inode @ nid 36. [ 1259.393136][T17491] loop1: detected capacity change from 0 to 256 [ 1261.817359][T17503] loop9: detected capacity change from 0 to 256 [ 1266.391194][T17532] loop1: detected capacity change from 0 to 16 [ 1266.640888][T17533] loop0: detected capacity change from 0 to 16 [ 1271.728821][T17532] erofs: (device loop1): erofs_read_superblock: cannot read erofs superblock [ 1271.835794][T17533] erofs: (device loop0): erofs_read_superblock: cannot read erofs superblock [ 1272.394751][T17540] loop9: detected capacity change from 0 to 256 [ 1272.466936][T16948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1272.490858][T17543] loop0: detected capacity change from 0 to 256 [ 1276.154826][T17564] loop1: detected capacity change from 0 to 256 [ 1276.946015][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1277.201433][T17572] loop9: detected capacity change from 0 to 256 [ 1277.261086][T17574] loop2: detected capacity change from 0 to 256 [ 1279.622948][T17590] loop1: detected capacity change from 0 to 256 [ 1279.631747][T17592] loop0: detected capacity change from 0 to 256 [ 1286.632959][T17630] loop0: detected capacity change from 0 to 256 [ 1293.362396][T17674] loop0: detected capacity change from 0 to 16 [ 1298.377436][T17674] erofs: (device loop0): erofs_read_superblock: cannot read erofs superblock [ 1298.816815][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1298.841231][T17689] loop9: detected capacity change from 0 to 256 [ 1299.973533][T16948] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1300.507726][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.476552][T17720] loop9: detected capacity change from 0 to 256 [ 1304.889774][T17735] loop0: detected capacity change from 0 to 256 [ 1304.980192][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1306.998675][T17753] loop9: detected capacity change from 0 to 256 [ 1309.908362][T17776] loop1: detected capacity change from 0 to 256 [ 1309.966064][T16948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1310.736993][T17788] loop2: detected capacity change from 0 to 256 [ 1310.865148][T16948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1313.273653][T17807] loop0: detected capacity change from 0 to 16 [ 1313.487021][T17807] erofs: (device loop0): mounted with root inode @ nid 36. [ 1317.066277][T17813] loop9: detected capacity change from 0 to 256 [ 1317.483497][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1320.389630][T17820] loop0: detected capacity change from 0 to 256 [ 1322.824368][T17848] loop0: detected capacity change from 0 to 256 [ 1326.661264][T17874] loop1: detected capacity change from 0 to 256 [ 1326.751565][T17877] loop2: detected capacity change from 0 to 256 [ 1330.271720][T17903] loop9: detected capacity change from 0 to 256 [ 1330.775811][T17913] loop2: detected capacity change from 0 to 256 [ 1330.827364][T16904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1331.943235][T17924] loop0: detected capacity change from 0 to 256 [ 1332.414074][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1336.117780][T17962] loop1: detected capacity change from 0 to 256 [ 1336.201576][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1338.900908][T17993] loop1: detected capacity change from 0 to 256 [ 1339.040553][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1340.947181][T18009] loop1: detected capacity change from 0 to 256 [ 1343.372195][T18027] loop1: detected capacity change from 0 to 16 [ 1343.677565][T18027] erofs: (device loop1): mounted with root inode @ nid 36. [ 1347.496184][T18057] loop0: detected capacity change from 0 to 256 [ 1347.587023][T16948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1349.533566][T18076] loop9: detected capacity change from 0 to 256 [ 1350.723289][T18085] loop2: detected capacity change from 0 to 16 [ 1350.971293][T18085] erofs: (device loop2): mounted with root inode @ nid 36. [ 1356.360329][T18108] loop9: detected capacity change from 0 to 256 [ 1356.432974][T18109] loop2: detected capacity change from 0 to 256 [ 1359.922269][T18141] loop2: detected capacity change from 0 to 256 [ 1360.192250][T16904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1361.914738][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.580481][T18180] loop0: detected capacity change from 0 to 256 [ 1364.626673][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1367.635208][T18200] loop9: detected capacity change from 0 to 256 [ 1368.615609][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1369.893639][T18222] loop9: detected capacity change from 0 to 256 [ 1371.458482][T18240] loop1: detected capacity change from 0 to 16 [ 1371.484591][T18240] erofs: (device loop1): mounted with root inode @ nid 36. [ 1372.844453][T18250] loop9: detected capacity change from 0 to 256 [ 1373.009762][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1373.394207][T18254] loop1: detected capacity change from 0 to 256 [ 1377.471188][T18284] loop9: detected capacity change from 0 to 256 [ 1378.231932][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1379.779124][T18306] loop2: detected capacity change from 0 to 256 [ 1380.684759][T16904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1380.889969][T18312] loop9: detected capacity change from 0 to 16 [ 1382.732934][T18312] erofs: (device loop9): mounted with root inode @ nid 36. [ 1387.957859][T18350] loop1: detected capacity change from 0 to 256 [ 1388.012674][T18352] loop9: detected capacity change from 0 to 256 [ 1393.301667][T18402] loop0: detected capacity change from 0 to 256 [ 1398.132532][T18432] loop2: detected capacity change from 0 to 16 [ 1398.423087][T18432] erofs: (device loop2): mounted with root inode @ nid 36. [ 1400.161751][T18442] loop2: detected capacity change from 0 to 256 [ 1400.355390][T16948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1404.657827][T18474] loop1: detected capacity change from 0 to 256 [ 1414.750976][T18540] loop9: detected capacity change from 0 to 16 [ 1414.796014][T18540] erofs: (device loop9): mounted with root inode @ nid 36. [ 1417.767485][T18564] loop1: detected capacity change from 0 to 16 [ 1417.820482][T18564] erofs: (device loop1): mounted with root inode @ nid 36. [ 1423.498117][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.079010][T18688] loop0: detected capacity change from 0 to 256 [ 1432.214508][T16904] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1433.448142][T18703] loop9: detected capacity change from 0 to 16 [ 1434.862878][T18703] erofs: (device loop9): mounted with root inode @ nid 36. [ 1448.978665][T18818] loop9: detected capacity change from 0 to 256 [ 1451.287591][T18836] loop0: detected capacity change from 0 to 256 [ 1452.680293][T18847] loop1: detected capacity change from 0 to 256 [ 1453.630175][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1455.721319][T18873] loop1: detected capacity change from 0 to 256 [ 1455.814178][T16904] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1457.762444][T18889] loop2: detected capacity change from 0 to 16 [ 1459.404367][T18889] erofs: (device loop2): erofs_read_superblock: cannot read erofs superblock [ 1459.898306][T18894] loop9: detected capacity change from 0 to 256 [ 1461.253574][T16948] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1466.286578][T18926] loop1: detected capacity change from 0 to 256 [ 1466.391702][T18927] loop2: detected capacity change from 0 to 256 [ 1468.449148][T16948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1469.689548][T18953] loop2: detected capacity change from 0 to 256 [ 1470.657904][T18961] loop9: detected capacity change from 0 to 256 [ 1470.811437][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1479.197860][T19023] loop0: detected capacity change from 0 to 256 [ 1484.483815][T19066] loop1: detected capacity change from 0 to 256 [ 1484.710466][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.819661][T19082] loop9: detected capacity change from 0 to 256 [ 1485.947419][T16904] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.650607][T19103] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 1505.137084][T19219] loop2: detected capacity change from 0 to 256 [ 1509.446812][T19253] loop2: detected capacity change from 0 to 256 [ 1511.024784][T16904] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1514.424594][T19284] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 1516.994750][T19313] loop1: detected capacity change from 0 to 16 [ 1517.025144][T19313] erofs: (device loop1): mounted with root inode @ nid 36. [ 1520.372772][T19342] x_tables: ip_tables: hashlimit.2 match: invalid size 304 (kernel) != (user) 312 [ 1523.769510][T19377] loop1: detected capacity change from 0 to 16 [ 1523.810266][T19377] erofs: (device loop1): mounted with root inode @ nid 36. [ 1524.742640][T19372] loop9: detected capacity change from 0 to 256 [ 1534.427121][T19442] loop2: detected capacity change from 0 to 16 [ 1534.503697][T19442] erofs: (device loop2): mounted with root inode @ nid 36. [ 1538.768635][T19461] loop2: detected capacity change from 0 to 16 [ 1538.962184][T19461] erofs: (device loop2): mounted with root inode @ nid 36. [ 1544.606774][T19478] loop1: detected capacity change from 0 to 16 [ 1544.702991][T19478] erofs: (device loop1): mounted with root inode @ nid 36. [ 1545.520176][T19479] loop2: detected capacity change from 0 to 256 [ 1546.646426][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.688211][T16948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1557.180602][T19577] loop2: detected capacity change from 0 to 256 [ 1559.219150][T19588] loop0: detected capacity change from 0 to 16 [ 1559.268800][T19588] erofs: (device loop0): mounted with root inode @ nid 36. [ 1563.002533][T19600] loop2: detected capacity change from 0 to 16 [ 1563.946133][T19600] erofs: (device loop2): mounted with root inode @ nid 36. [ 1569.160854][T19636] loop2: detected capacity change from 0 to 16 [ 1569.525739][T19636] erofs: (device loop2): mounted with root inode @ nid 36. [ 1571.279132][T19645] loop1: detected capacity change from 0 to 256 [ 1571.729226][T16948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1580.658390][T19693] loop2: detected capacity change from 0 to 16 [ 1580.734443][T19693] erofs: (device loop2): mounted with root inode @ nid 36. [ 1581.431216][T19690] loop9: detected capacity change from 0 to 256 [ 1586.151359][T19726] loop2: detected capacity change from 0 to 256 [ 1586.796400][T19737] loop0: detected capacity change from 0 to 16 [ 1587.722760][T19737] erofs: (device loop0): mounted with root inode @ nid 36. [ 1588.948746][T19733] loop1: detected capacity change from 0 to 256 [ 1589.916264][T19743] loop9: detected capacity change from 0 to 256 [ 1590.019794][T16948] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1592.042640][T19759] loop2: detected capacity change from 0 to 256 [ 1595.879260][T19788] loop2: detected capacity change from 0 to 16 [ 1596.260132][T19788] erofs: (device loop2): mounted with root inode @ nid 36. [ 1603.654332][T19848] loop9: detected capacity change from 0 to 16 [ 1604.480438][T19848] erofs: (device loop9): mounted with root inode @ nid 36. [ 1607.624439][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.234993][T19885] loop0: detected capacity change from 0 to 256 [ 1611.747108][T19904] loop1: detected capacity change from 0 to 16 [ 1611.788141][T19904] erofs: (device loop1): mounted with root inode @ nid 36. [ 1645.160516][T20163] loop9: detected capacity change from 0 to 256 [ 1646.425158][T20135] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1648.641028][T20174] loop2: detected capacity change from 0 to 256 [ 1650.961751][T20199] input: syz1 as /devices/virtual/input/input13 [ 1651.265570][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.016887][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.369660][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.490049][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.125725][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.401996][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.411374][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.954083][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.963328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.984427][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.325886][T20224] net_ratelimit: 54 callbacks suppressed [ 1656.325906][T20224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.344168][T20224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.355787][T20224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.367414][T20224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.866865][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.598964][T20240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.608537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.619267][T20240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.632973][T20240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.229378][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.431767][T20247] loop1: detected capacity change from 0 to 256 [ 1661.217196][T20182] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1661.741449][ T5842] net_ratelimit: 3 callbacks suppressed [ 1661.741468][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.752835][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.781670][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.789894][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.817303][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.036984][T20283] loop0: detected capacity change from 0 to 4096 [ 1665.638317][T20292] input: syz1 as /devices/virtual/input/input14 [ 1665.866396][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.244753][T20295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.253330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.261962][T20295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1666.277957][T20295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1667.939228][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.293101][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.943941][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.028619][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.235328][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.834707][T20309] input: syz1 as /devices/virtual/input/input15 [ 1671.344485][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.354421][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.378133][T15483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1671.398585][T15483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1671.447237][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.481046][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.481708][T15483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1671.504907][T15483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1671.515248][T15483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1671.526535][T15483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1671.900501][T20325] input: syz1 as /devices/virtual/input/input16 [ 1672.384356][ T8906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.466114][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.664472][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.424605][ T8906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.504458][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.591840][T15483] Bluetooth: hci1: command tx timeout [ 1673.774207][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.062713][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.227360][T17584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.236190][T20180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.468152][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.189766][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.198083][ T8906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.311541][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.580616][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.722700][T15483] Bluetooth: hci1: command tx timeout [ 1676.509381][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1676.517772][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.080385][T20316] chnl_net:caif_netlink_parms(): no params data found [ 1677.806612][T15483] Bluetooth: hci1: command tx timeout [ 1678.908509][T19242] net_ratelimit: 4 callbacks suppressed [ 1678.908529][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.929567][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.484171][T20383] loop0: detected capacity change from 0 to 16 [ 1679.504612][T20383] erofs: (device loop0): mounted with root inode @ nid 36. [ 1679.560055][T20316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.574116][T20316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.581417][T20316] bridge_slave_0: entered allmulticast mode [ 1679.600582][T20316] bridge_slave_0: entered promiscuous mode [ 1679.729926][T20316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.773579][T20316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.811569][T20316] bridge_slave_1: entered allmulticast mode [ 1679.825639][T15483] Bluetooth: hci1: command tx timeout [ 1679.854569][T20316] bridge_slave_1: entered promiscuous mode [ 1679.993454][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.005662][T19242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.045952][T20316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.099657][T20316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.424583][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.580275][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.615166][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.662710][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.676278][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.692285][T20389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.852345][T20316] team0: Port device team_slave_0 added [ 1682.024679][T20316] team0: Port device team_slave_1 added [ 1682.084697][T20416] netlink: 'syz.0.3441': attribute type 3 has an invalid length. [ 1682.312005][T20316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.340381][T20316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.372461][T20316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.591264][T20316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.611884][T20316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.643273][T20316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.657020][T20431] tipc: Started in network mode [ 1682.678072][T20431] tipc: Node identity ceee09ebf7ec, cluster identity 4711 [ 1682.691158][T20431] tipc: Enabled bearer , priority 0 [ 1682.717784][T20434] syzkaller0: entered promiscuous mode [ 1682.744593][T20434] syzkaller0: entered allmulticast mode [ 1682.759607][T20428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1682.959678][T20425] tipc: Resetting bearer [ 1682.993464][T20428] tipc: Resetting bearer [ 1683.068728][T20428] tipc: Disabling bearer [ 1683.232132][ T40] hsr_slave_0: left promiscuous mode [ 1683.252683][ T40] hsr_slave_1: left promiscuous mode [ 1683.259731][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1683.279606][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.315148][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1683.333707][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.349797][ T40] bridge_slave_1: left allmulticast mode [ 1683.360704][ T40] bridge_slave_1: left promiscuous mode [ 1683.368685][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.391940][ T40] bridge_slave_0: left allmulticast mode [ 1683.400302][ T40] bridge_slave_0: left promiscuous mode [ 1683.411754][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.557307][ T40] veth1_macvtap: left promiscuous mode [ 1683.567493][ T40] veth0_macvtap: left promiscuous mode [ 1683.585228][ T40] veth1_vlan: left promiscuous mode [ 1683.590691][ T40] veth0_vlan: left promiscuous mode [ 1683.984195][ T8918] net_ratelimit: 64 callbacks suppressed [ 1683.984214][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.148314][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.156856][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.609885][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1684.728515][ T40] team0 (unregistering): Port device team_slave_0 removed [ 1684.783773][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.828004][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1684.927481][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.195043][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.208016][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.758376][ T40] bond0 (unregistering): Released all slaves [ 1685.882577][T20316] hsr_slave_0: entered promiscuous mode [ 1685.889782][T20316] hsr_slave_1: entered promiscuous mode [ 1685.960153][T20467] netlink: 'syz.9.3452': attribute type 25 has an invalid length. [ 1686.233955][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.242571][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.511626][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3458'. [ 1687.030941][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.274100][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.345517][T20388] net_ratelimit: 4 callbacks suppressed [ 1689.345539][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.360417][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.929723][T20498] netlink: 'syz.0.3460': attribute type 1 has an invalid length. [ 1689.944763][T20498] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1690.053531][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3460'. [ 1690.085557][T20371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.189635][T20507] syzkaller0: entered promiscuous mode [ 1690.197136][T20507] syzkaller0: entered allmulticast mode [ 1690.385026][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.395285][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.863790][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.299091][T20535] bridge_slave_0: left allmulticast mode [ 1691.311223][T20535] bridge_slave_0: left promiscuous mode [ 1691.332863][T20535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.364360][T20535] bridge_slave_1: left allmulticast mode [ 1691.370075][T20535] bridge_slave_1: left promiscuous mode [ 1691.386040][T20535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.415461][T20535] bond0: (slave bond_slave_0): Releasing backup interface [ 1691.426526][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.438326][ T8907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.487696][T20535] bond0: (slave bond_slave_1): Releasing backup interface [ 1691.576407][T20535] team0: Port device team_slave_0 removed [ 1691.620725][T20535] team0: Port device team_slave_1 removed [ 1691.641891][T20535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1691.652288][T20535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.676692][T20535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.689002][T20535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.732031][ T40] IPVS: stop unused estimator thread 0... [ 1691.740553][T20371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.109973][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3473'. [ 1692.138962][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3473'. [ 1692.163848][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.187125][T20550] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.196023][T20550] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.205004][T20550] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.213911][T20550] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1692.270294][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3473'. [ 1692.290380][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3473'. [ 1693.388037][T20316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1693.425038][T20316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1693.487804][T20316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1693.573902][T20316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1693.933291][T20614] tipc: Enabling of bearer rejected, failed to enable media [ 1693.965819][T20316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.067657][T20316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.106235][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.113512][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.192675][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.199968][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.321041][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1694.351048][T20627] netlink: 'syz.1.3491': attribute type 7 has an invalid length. [ 1694.370472][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1694.435522][T20629] sch_fq: defrate 0 ignored. [ 1694.543873][T20388] net_ratelimit: 16 callbacks suppressed [ 1694.543890][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.698392][T20634] syzkaller0: entered promiscuous mode [ 1694.713579][T20634] syzkaller0: entered allmulticast mode [ 1695.594299][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.619539][T20316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.903904][T20316] veth0_vlan: entered promiscuous mode [ 1695.918323][T20316] veth1_vlan: entered promiscuous mode [ 1696.045141][T20316] veth0_macvtap: entered promiscuous mode [ 1696.080656][T20316] veth1_macvtap: entered promiscuous mode [ 1696.162213][T20316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.211621][T20316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.221920][T20316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.235496][T20316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.265107][T20316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.321402][T20681] tipc: Started in network mode [ 1696.333578][T20681] tipc: Node identity 06a81bb682b1, cluster identity 4711 [ 1696.351760][T20681] tipc: Enabled bearer , priority 0 [ 1696.380176][T20679] syzkaller0: entered promiscuous mode [ 1696.388019][T20679] syzkaller0: entered allmulticast mode [ 1696.405699][T20681] syzkaller0: entered promiscuous mode [ 1696.411267][T20681] syzkaller0: entered allmulticast mode [ 1696.494638][T20316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.528860][T20316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.550211][T20316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.572814][T20316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.598106][T20316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.623843][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.680219][T20681] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1696.732158][T20689] tipc: Resetting bearer [ 1696.748011][T20689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.771657][T20680] tipc: Resetting bearer [ 1696.828467][T20680] tipc: Disabling bearer [ 1696.891969][T20316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.911481][T20316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.933467][T20316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.942479][T20316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.952148][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.665545][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.687289][T15747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.716148][T15747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.867227][T15747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.913400][T15747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.257228][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.984362][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.055224][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'. [ 1700.303846][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.823394][T20388] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1701.033610][T20388] usb 4-1: Using ep0 maxpacket: 8 [ 1701.047998][T20388] usb 4-1: config 0 interface 0 altsetting 108 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.048037][T20388] usb 4-1: config 0 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1701.048069][T20388] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1701.048110][T20388] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1701.048135][T20388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.073100][T20388] usb 4-1: config 0 descriptor?? [ 1701.346158][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.372757][T20809] loop8: detected capacity change from 0 to 8 [ 1701.387353][T20809] Dev loop8: unable to read RDB block 8 [ 1701.412785][T20809] loop8: unable to read partition table [ 1701.430646][T20809] loop8: partition table beyond EOD, truncated [ 1701.462693][T20809] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1701.519471][T20388] cypress 0003:04B4:0001.0006: unknown main item tag 0x2 [ 1701.550164][T20388] cypress 0003:04B4:0001.0006: item fetching failed at offset 8/164 [ 1701.592149][T20388] cypress 0003:04B4:0001.0006: parse failed [ 1701.630024][T20388] cypress: probe of 0003:04B4:0001.0006 failed with error -22 [ 1701.739050][T20388] usb 4-1: USB disconnect, device number 10 [ 1702.051114][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1702.189787][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3541'. [ 1702.204227][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3541'. [ 1702.240905][T20831] ip6gretap0: entered promiscuous mode [ 1702.263943][T20831] syz_tun: entered promiscuous mode [ 1702.270125][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 1702.314040][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.333268][ T5880] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1702.362780][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.389449][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.399894][ T5880] usb 1-1: config 0 descriptor?? [ 1702.803078][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 1702.857458][ T5880] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1702.961635][T20371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.043655][T20371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.275479][ T5880] usb 1-1: USB disconnect, device number 9 [ 1703.423908][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.417859][T15519] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1704.433809][T20875] tipc: Enabled bearer , priority 0 [ 1704.441704][T20875] syzkaller0: entered promiscuous mode [ 1704.456745][T20875] syzkaller0: entered allmulticast mode [ 1704.474393][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.478934][T20875] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1704.575704][T20879] tipc: Resetting bearer [ 1704.596125][T20874] tipc: Resetting bearer [ 1704.679237][T20874] tipc: Disabling bearer [ 1704.685346][T15519] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1704.696656][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1704.706555][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1704.732425][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1704.746321][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1704.771139][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1704.793383][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1704.811801][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1704.834658][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1704.873451][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1704.900102][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1704.913257][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1704.941065][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1704.951578][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1704.973535][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1704.993792][ T2177] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1705.001603][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1705.021419][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.037145][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.058429][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1705.074780][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.093314][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.113242][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1705.124824][T15519] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.133933][T15519] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.154258][T15519] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1705.167360][T15519] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1705.177067][T15519] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1705.194276][T15519] usb 4-1: Product: syz [ 1705.203273][ T2177] usb 10-1: Using ep0 maxpacket: 32 [ 1705.209099][T15519] usb 4-1: Manufacturer: syz [ 1705.211366][T20553] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1705.218438][T15519] usb 4-1: SerialNumber: syz [ 1705.234509][ T2177] usb 10-1: config 0 has no interfaces? [ 1705.249532][ T2177] usb 10-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 1705.263202][ T2177] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.272692][T15519] usb 4-1: config 0 descriptor?? [ 1705.297681][ T2177] usb 10-1: Product: syz [ 1705.302558][ T2177] usb 10-1: Manufacturer: syz [ 1705.307698][ T2177] usb 10-1: SerialNumber: syz [ 1705.313111][T15519] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1705.346795][ T2177] usb 10-1: config 0 descriptor?? [ 1705.454543][T20553] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1705.486251][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.495395][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.513251][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.520361][T15519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.529168][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.548603][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.611542][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.634853][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.656457][ T5880] usb 10-1: USB disconnect, device number 2 [ 1705.676451][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.731938][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.748135][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.777814][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.817676][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.834583][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.853310][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.873259][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.891951][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.924203][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1705.955400][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1705.974709][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1705.993368][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1706.022254][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1706.036731][T20553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1706.053355][T20553] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1706.064725][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.089005][T20553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1706.111103][T20553] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1706.134467][T20553] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1706.167856][T20553] usb 1-1: Product: syz [ 1706.172206][T20553] usb 1-1: Manufacturer: syz [ 1706.188014][T20553] usb 1-1: SerialNumber: syz [ 1706.212704][T20553] usb 1-1: config 0 descriptor?? [ 1706.243897][T20553] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 1706.526166][T20553] usb 1-1: USB disconnect, device number 10 [ 1706.550136][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.145433][T20553] yurex 1-1:0.0: USB YUREX #1 now disconnected [ 1707.242627][T20388] usb 4-1: USB disconnect, device number 11 [ 1707.268850][T20388] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1707.451639][T20719] Set syz1 is full, maxelem 65536 reached [ 1707.591524][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.866439][T20934] "syz.0.3562" (20934) uses obsolete ecb(arc4) skcipher [ 1708.210822][T20949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1708.242249][T20949] netlink: 'syz.0.3567': attribute type 7 has an invalid length. [ 1708.251410][T20945] kvm: pic: non byte write [ 1708.257525][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1708.536833][T20958] tipc: Enabled bearer , priority 0 [ 1708.569061][T20958] syzkaller0: entered promiscuous mode [ 1708.584171][T20958] syzkaller0: entered allmulticast mode [ 1708.632803][T20388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.647183][T20958] tipc: Resetting bearer [ 1708.677298][T20956] tipc: Resetting bearer [ 1708.817507][T20956] tipc: Disabling bearer [ 1709.112803][T20371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.139749][T20388] psmouse serio2: Failed to reset mouse on : -5 [ 1709.674497][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.694255][T20553] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1709.702700][ T3508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.712983][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.861722][T20996] "syz.1.3581" (20996) uses obsolete ecb(arc4) skcipher [ 1709.905405][T20553] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1709.923349][T20553] usb 4-1: config 0 has no interface number 0 [ 1709.929583][T20553] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1709.963311][T20553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.991493][T20553] usb 4-1: config 0 descriptor?? [ 1710.007595][T20553] usb 4-1: selecting invalid altsetting 1 [ 1710.055186][T20553] dvb_ttusb_budget: ttusb_init_controller: error [ 1710.061641][T20553] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1710.269921][T20553] DVB: Unable to find symbol cx22700_attach() [ 1815.311013][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1815.318071][ C0] rcu: 1-...!: (0 ticks this GP) idle=5bac/1/0x4000000000000000 softirq=95315/95315 fqs=0 [ 1815.330595][ C0] rcu: (detected by 0, t=10506 jiffies, g=114289, q=548 ncpus=2) [ 1815.338452][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1815.343717][ C1] NMI backtrace for cpu 1 [ 1815.343752][ C1] CPU: 1 PID: 5159 Comm: udevd Not tainted syzkaller #0 [ 1815.343768][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1815.343782][ C1] RIP: 0010:lock_acquire+0x187/0x410 [ 1815.343808][ C1] Code: 65 ff 05 f4 8f 9b 7e 45 31 c9 41 f7 c6 00 02 00 00 41 0f 94 c1 4c 89 ef 8b 74 24 1c 89 da 48 8b 4c 24 20 4c 8b 44 24 30 6a 00 <6a> 00 6a 00 ff 75 10 ff 74 24 48 e8 b9 03 00 00 48 83 c4 28 48 c7 [ 1815.343823][ C1] RSP: 0018:ffffc900001f0af8 EFLAGS: 00000046 [ 1815.343838][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 1815.343848][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9707bc60 [ 1815.343859][ C1] RBP: ffffc900001f0c08 R08: 0000000000000001 R09: 0000000000000001 [ 1815.343869][ C1] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: 1ffff9200003e16c [ 1815.343881][ C1] R13: ffffffff9707bc60 R14: 0000000000000046 R15: dffffc0000000000 [ 1815.343892][ C1] FS: 00007fc0f9f99880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1815.343906][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1815.343917][ C1] CR2: 00007fc341b72a60 CR3: 000000001aeab000 CR4: 00000000003506e0 [ 1815.343932][ C1] Call Trace: [ 1815.343940][ C1] [ 1815.343957][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1815.343975][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1815.344004][ C1] _raw_spin_lock_irqsave+0xa8/0xf0 [ 1815.344023][ C1] ? debug_object_deactivate+0x67/0x350 [ 1815.344046][ C1] ? _raw_spin_lock+0x40/0x40 [ 1815.344060][ C1] ? advance_sched+0x9f9/0xc80 [ 1815.344082][ C1] debug_object_deactivate+0x67/0x350 [ 1815.344107][ C1] debug_deactivate+0x1d/0x1d0 [ 1815.344126][ C1] __hrtimer_run_queues+0x2bf/0xc40 [ 1815.344146][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1815.344168][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1815.344185][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1815.344209][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1815.344238][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1815.344270][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1815.344298][ C1] [ 1815.344302][ C1] [ 1815.344307][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1815.344326][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1815.344345][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c 00 c5 0c 48 89 de 5b e9 a3 8a 56 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 20 28 7e 7e 65 8b 15 21 28 7e [ 1815.344358][ C1] RSP: 0018:ffffc90003247110 EFLAGS: 00000202 [ 1815.344371][ C1] RAX: ffffc90003247b01 RBX: 1ffff92000648e49 RCX: 0000000000000001 [ 1815.344382][ C1] RDX: ffff88807df31e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1815.344391][ C1] RBP: ffffc90003247bf0 R08: ffff88807df31e00 R09: 0000000000000003 [ 1815.344401][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90003248000 [ 1815.344411][ C1] R13: 1ffff92000648e4b R14: ffffc90003240000 R15: ffffc90003247248 [ 1815.344430][ C1] deref_stack_reg+0xc7/0x240 [ 1815.344457][ C1] unwind_next_frame+0x1789/0x2970 [ 1815.344487][ C1] ? path_openat+0x274b/0x3190 [ 1815.344511][ C1] ? path_openat+0x274b/0x3190 [ 1815.344534][ C1] ? stack_trace_save+0xe0/0xe0 [ 1815.344552][ C1] arch_stack_walk+0x144/0x190 [ 1815.344569][ C1] ? do_filp_open+0x1c5/0x3d0 [ 1815.344594][ C1] stack_trace_save+0x9c/0xe0 [ 1815.344612][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1815.344631][ C1] ? __lock_acquire+0x1334/0x7c80 [ 1815.344650][ C1] kasan_set_track+0x4e/0x70 [ 1815.344667][ C1] ? kasan_set_track+0x4e/0x70 [ 1815.344681][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 1815.344697][ C1] ? __kmalloc+0xb4/0x240 [ 1815.344717][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1815.344742][ C1] ? tomoyo_check_open_permission+0x1c3/0x3c0 [ 1815.344765][ C1] ? security_file_open+0x62/0xa0 [ 1815.344788][ C1] ? do_dentry_open+0x380/0x1500 [ 1815.344805][ C1] ? path_openat+0x274b/0x3190 [ 1815.344848][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1815.344865][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1815.344890][ C1] __kmalloc+0xb4/0x240 [ 1815.344912][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1815.344943][ C1] tomoyo_check_open_permission+0x1c3/0x3c0 [ 1815.344967][ C1] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 1815.344995][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1815.345023][ C1] ? __asan_memset+0x22/0x40 [ 1815.345051][ C1] ? __rwlock_init+0x150/0x150 [ 1815.345070][ C1] ? generic_permission+0x1f3/0x590 [ 1815.345092][ C1] ? tomoyo_file_open+0xed/0x180 [ 1815.345107][ C1] security_file_open+0x62/0xa0 [ 1815.345130][ C1] do_dentry_open+0x380/0x1500 [ 1815.345153][ C1] path_openat+0x274b/0x3190 [ 1815.345183][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1815.345201][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.345218][ C1] ? verify_lock_unused+0x140/0x140 [ 1815.345236][ C1] ? do_filp_open+0x3d0/0x3d0 [ 1815.345261][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1815.345286][ C1] do_filp_open+0x1c5/0x3d0 [ 1815.345311][ C1] ? vfs_tmpfile+0x490/0x490 [ 1815.345343][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1815.345358][ C1] ? alloc_fd+0x58f/0x630 [ 1815.345381][ C1] do_sys_openat2+0x12c/0x1c0 [ 1815.345399][ C1] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 1815.345421][ C1] ? do_sys_open+0xe0/0xe0 [ 1815.345439][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1815.345457][ C1] ? lock_chain_count+0x20/0x20 [ 1815.345476][ C1] __x64_sys_openat+0x139/0x160 [ 1815.345497][ C1] do_syscall_64+0x55/0xb0 [ 1815.345516][ C1] ? clear_bhb_loop+0x40/0x90 [ 1815.345533][ C1] ? clear_bhb_loop+0x40/0x90 [ 1815.345550][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.345566][ C1] RIP: 0033:0x7fc0f98a7407 [ 1815.345584][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1815.345596][ C1] RSP: 002b:00007fffaf61ed80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1815.345611][ C1] RAX: ffffffffffffffda RBX: 00007fc0f9f99880 RCX: 00007fc0f98a7407 [ 1815.345623][ C1] RDX: 0000000000080000 RSI: 00007fffaf61ef00 RDI: ffffffffffffff9c [ 1815.345633][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1815.345642][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e3625007f5 [ 1815.345652][ C1] R13: 000055e3625007f5 R14: 0000000000000001 R15: 0000000000000000 [ 1815.345668][ C1] [ 1815.345709][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g114289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1815.979013][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=98270 [ 1815.986929][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g114289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1815.998418][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1816.008412][ C0] rcu: RCU grace-period kthread stack dump: [ 1816.014426][ C0] task:rcu_preempt state:I stack:27056 pid:17 ppid:2 flags:0x00004000 [ 1816.023688][ C0] Call Trace: [ 1816.026995][ C0] [ 1816.029959][ C0] __schedule+0x14d2/0x44d0 [ 1816.034524][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1816.040453][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1816.045695][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1816.051621][ C0] ? asan.module_dtor+0x20/0x20 [ 1816.056523][ C0] ? enqueue_timer+0x225/0x530 [ 1816.061331][ C0] ? __mod_timer+0x984/0xdb0 [ 1816.065996][ C0] schedule+0xbd/0x170 [ 1816.070113][ C0] schedule_timeout+0x160/0x280 [ 1816.074999][ C0] ? console_conditional_schedule+0x40/0x40 [ 1816.080924][ C0] ? update_process_times+0x1b0/0x1b0 [ 1816.086340][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1816.091935][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 1816.096873][ C0] ? rcu_gp_init+0x110e/0x1510 [ 1816.101694][ C0] ? rcu_gp_kthread+0x380/0x380 [ 1816.106596][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1816.112629][ C0] ? rcu_gp_init+0x1510/0x1510 [ 1816.117459][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1816.122381][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1816.127648][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1816.132918][ C0] rcu_gp_kthread+0x99/0x380 [ 1816.137639][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1816.142818][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1816.147807][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1816.152905][ C0] kthread+0x2fa/0x390 [ 1816.157022][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1816.162199][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1816.166831][ C0] ret_from_fork+0x48/0x80 [ 1816.171285][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1816.175930][ C0] ret_from_fork_asm+0x11/0x20 [ 1816.180938][ C0] [ 1816.184028][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1816.190411][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1816.195674][ C1] NMI backtrace for cpu 1 [ 1816.195757][ C1] CPU: 1 PID: 5159 Comm: udevd Not tainted syzkaller #0 [ 1816.195774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1816.195789][ C1] RIP: 0010:lock_acquire+0x5/0x410 [ 1816.195813][ C1] Code: 00 00 00 00 90 f3 0f 1e fa 65 8b 05 4d bf 9c 7e a9 00 ff ff 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 [ 1816.195828][ C1] RSP: 0018:ffffc900001f0c58 EFLAGS: 00000046 [ 1816.195842][ C1] RAX: 0000000000000001 RBX: ffffffff889db549 RCX: 0000000000000002 [ 1816.195853][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd2fee0 [ 1816.195863][ C1] RBP: ffff88805c312150 R08: 0000000000000000 R09: 0000000000000000 [ 1816.195873][ C1] R10: dffffc0000000000 R11: ffffed1003b6465e R12: ffff88801db23360 [ 1816.195885][ C1] R13: ffff88801db23000 R14: 188111b078000000 R15: ffff888025e03000 [ 1816.195897][ C1] FS: 00007fc0f9f99880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1816.195911][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1816.195923][ C1] CR2: 00007fc341b72a60 CR3: 000000001aeab000 CR4: 00000000003506e0 [ 1816.195937][ C1] Call Trace: [ 1816.195945][ C1] [ 1816.195954][ C1] advance_sched+0xa15/0xc80 [ 1816.195973][ C1] ? advance_sched+0x9f9/0xc80 [ 1816.195999][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1816.196021][ C1] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1816.196045][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1816.196062][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1816.196086][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1816.196117][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1816.196140][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1816.196169][ C1] [ 1816.196173][ C1] [ 1816.196178][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1816.196198][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1816.196218][ C1] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c 00 c5 0c 48 89 de 5b e9 a3 8a 56 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 20 28 7e 7e 65 8b 15 21 28 7e [ 1816.196232][ C1] RSP: 0018:ffffc90003247110 EFLAGS: 00000202 [ 1816.196245][ C1] RAX: ffffc90003247b01 RBX: 1ffff92000648e49 RCX: 0000000000000001 [ 1816.196256][ C1] RDX: ffff88807df31e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1816.196266][ C1] RBP: ffffc90003247bf0 R08: ffff88807df31e00 R09: 0000000000000003 [ 1816.196277][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc90003248000 [ 1816.196287][ C1] R13: 1ffff92000648e4b R14: ffffc90003240000 R15: ffffc90003247248 [ 1816.196308][ C1] deref_stack_reg+0xc7/0x240 [ 1816.196338][ C1] unwind_next_frame+0x1789/0x2970 [ 1816.196369][ C1] ? path_openat+0x274b/0x3190 [ 1816.196396][ C1] ? path_openat+0x274b/0x3190 [ 1816.196419][ C1] ? stack_trace_save+0xe0/0xe0 [ 1816.196438][ C1] arch_stack_walk+0x144/0x190 [ 1816.196458][ C1] ? do_filp_open+0x1c5/0x3d0 [ 1816.196485][ C1] stack_trace_save+0x9c/0xe0 [ 1816.196504][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1816.196523][ C1] ? __lock_acquire+0x1334/0x7c80 [ 1816.196558][ C1] kasan_set_track+0x4e/0x70 [ 1816.196575][ C1] ? kasan_set_track+0x4e/0x70 [ 1816.196590][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 1816.196607][ C1] ? __kmalloc+0xb4/0x240 [ 1816.196628][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1816.196654][ C1] ? tomoyo_check_open_permission+0x1c3/0x3c0 [ 1816.196685][ C1] ? security_file_open+0x62/0xa0 [ 1816.196707][ C1] ? do_dentry_open+0x380/0x1500 [ 1816.196724][ C1] ? path_openat+0x274b/0x3190 [ 1816.196774][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1816.196792][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1816.196817][ C1] __kmalloc+0xb4/0x240 [ 1816.196841][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1816.196874][ C1] tomoyo_check_open_permission+0x1c3/0x3c0 [ 1816.196899][ C1] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 1816.196924][ C1] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1816.196954][ C1] ? __asan_memset+0x22/0x40 [ 1816.196986][ C1] ? __rwlock_init+0x150/0x150 [ 1816.197006][ C1] ? generic_permission+0x1f3/0x590 [ 1816.197029][ C1] ? tomoyo_file_open+0xed/0x180 [ 1816.197045][ C1] security_file_open+0x62/0xa0 [ 1816.197069][ C1] do_dentry_open+0x380/0x1500 [ 1816.197095][ C1] path_openat+0x274b/0x3190 [ 1816.197128][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1816.197147][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.197164][ C1] ? verify_lock_unused+0x140/0x140 [ 1816.197184][ C1] ? do_filp_open+0x3d0/0x3d0 [ 1816.197210][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1816.197236][ C1] do_filp_open+0x1c5/0x3d0 [ 1816.197262][ C1] ? vfs_tmpfile+0x490/0x490 [ 1816.197299][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1816.197315][ C1] ? alloc_fd+0x58f/0x630 [ 1816.197339][ C1] do_sys_openat2+0x12c/0x1c0 [ 1816.197357][ C1] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 1816.197382][ C1] ? do_sys_open+0xe0/0xe0 [ 1816.197400][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1816.197420][ C1] ? lock_chain_count+0x20/0x20 [ 1816.197440][ C1] __x64_sys_openat+0x139/0x160 [ 1816.197462][ C1] do_syscall_64+0x55/0xb0 [ 1816.197482][ C1] ? clear_bhb_loop+0x40/0x90 [ 1816.197499][ C1] ? clear_bhb_loop+0x40/0x90 [ 1816.197517][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.197534][ C1] RIP: 0033:0x7fc0f98a7407 [ 1816.197548][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1816.197561][ C1] RSP: 002b:00007fffaf61ed80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1816.197577][ C1] RAX: ffffffffffffffda RBX: 00007fc0f9f99880 RCX: 00007fc0f98a7407 [ 1816.197588][ C1] RDX: 0000000000080000 RSI: 00007fffaf61ef00 RDI: ffffffffffffff9c [ 1816.197600][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1816.197609][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e3625007f5 [ 1816.197618][ C1] R13: 000055e3625007f5 R14: 0000000000000001 R15: 0000000000000000 [ 1816.197637][ C1]