last executing test programs: 13.146301822s ago: executing program 2 (id=3): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) sendmsg$can_j1939(r5, 0x0, 0x0) 12.934919489s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x4000400) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) munmap(&(0x7f00006b5000/0x3000)=nil, 0x3000) mount$9p_unix(&(0x7f0000001340)='./bus/file0\x00', &(0x7f0000001380)='./bus/file0\x00', 0x0, 0x1, &(0x7f0000001440)=ANY=[@ANYBLOB='trats=uPix,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 10.912010577s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8008000}, 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0xe}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, 0x0) 8.886066882s ago: executing program 1 (id=8): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = epoll_create1(0x0) pipe(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001ac0)={0x100017, 0x0, 0x0, {r2}}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000100)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x5, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r7, &(0x7f0000000340)=""/1, 0x46) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x12c, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {0x101, 0x0, 0x0, 0x800}, {0x0, 0x6, 0x400}, 0x0, 0x3502, 0xa, 0x0, 0xff, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @lastused={0xc, 0xf, 0xee}, @coaddr={0x14, 0xe, @in6=@dev}, @mark={0xc, 0x15, {0x0, 0xfffff329}}]}, 0x12c}}, 0x0) listen(r4, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0) writev(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2b8, &(0x7f0000000640)="$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") 8.885311502s ago: executing program 2 (id=9): socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x3d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) epoll_create(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="34020000020000000580000000000000010000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x234) 8.781882861s ago: executing program 4 (id=11): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000180)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x0, [{@loopback}]}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(r2, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @rand_addr, 0x0}, &(0x7f0000000400)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x410d884f, 0x4, 0x480, 0xffffffffffffffff, 0x101, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0xfffffffd, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa237000000000007020000f8ffffffb703000008000000b704000004000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000440)={{@host, 0xffffffff}, {@my=0x1, 0xf}, 0x400, "0110dc2b97cb02ad94d838d547f1fc11427b05677672c0c0c37ea8422fcd7ac3e30105548544c907d0ef3c35cefc7eb25eb946525dfed08481123155ed361e0a82f468c9ae0cf670e12774fe6856194ac853e0d8201f10a521360d87dd1ddd7bf46ed7a7a0a6a60425077ea66b8d69c8241c81e1ffc38a0abee1b9d0170c440fb61dfda2afe031c20d990c74b1186a315a0181957429eb41aab4517755cb637e656e1387dd208b5e6bc6b24ba25c91378f84ae61f5f6b360b8e30a95f3f8d02cac14e09450eb424642a4b4dbf58743a343f3345e210994f186a8a12a12795783c61e3415929a8c1b68c546e9689c2f39e49e8ed8255481f46be924a0a208b4a71f817d9dae540cefcb7599e0ead5116ce83e34e3ea81fbe24cba1d0a85c2c0ccfa9cd8596e52bcc217043372b1b6bff8e1b0f71d79f4759d80e031efa7ded4bad86262126a8bd8eca94f654cf616382f61dc4394198c6c0a095d41ceeeac00357f90f46fbc47ea1865f8b7c9bb08c1b44c20eae10c3cb2c0848cd7fec9bafd5dcfcad22f78fa146725bb81cbc8c7b2756beafd55125dbe0305fdd8ac5bc37dc381ca7392ef78fa793e374fc91de1573a42cafda4b275f83e9c1332bf2f6b00c437629b6a4db70a18cab774fdca1f29f345ba47702b88d6ac7a94a408e7bde973daf9b25a039c3157737df318dbf2d9923f5cfa5c2df2f29f22b07f4b849531290734b8607b6b189f44c2e27ce5f78b553a65ac01afb3b9c35dd0cf073092809f00f52339837d6842e9bc67244ffe154238ee1add1dec26a0a2e00fb78e5457eb7b517a25232297460811dfaa34753b496ad3bebbb422d3cd5897de030de20a3a3f3d07da601b3a00e3413288c0eabd42b184f86be17c07ae970e3ae79735cca4b551746f25d64482afc1c2a6fa476d5c17151d2f2d497e957a57116f01e6d1346ad4b4ab6108cea02a79fb4003740e461661a293b1ff1d1cb04cbe2ce7fa5c4ca91a729d4a597a1d461bb99d4c993424e0b9449b2dd8c1c8fa83878b0a0f2fdf10435df7505d4be4468708552152ef44755c8e2683efdedb0bc5f548e33e703e0152e4d87cb8505d66d4fb22a715cdc1aeb695ad562fcbd1834f58d574b62437691bf9fdedf1fafc6812abc58f7335c49334544543176eeeea8be77a9ea682dc616d04ac77aa078f66e8ca7753be8e3c89092aa079a41602302cb182b3e81d5acae8716d10c1119f43f177c8d81f4ef2787420f25c5bfe86ba014bb74a80b6b8de89de67be9e3e1fb2ca80ec9d562dad54ad6fee639b74c562e1b16984ce0245be792887bb053528e5dfa407853a153210ad68cd38cd13d7fd6b48e9ed03a98dd60bd05fdb9c17831567167a35a8aea86c93fb7edafd19feaa1e1983574af603efb2e8bd954240e7837b4f5052bc849ac90e996f540f6051e11e3463199f1570"}, 0x418, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000100)}) socket$unix(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000580)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 8.326565977s ago: executing program 1 (id=12): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0x2020) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r6, 0x4004510f, &(0x7f00000000c0)={"d8582add900600", 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc]}) 8.314787468s ago: executing program 4 (id=13): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000640), 0xd, 0x5f1, &(0x7f0000000680)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJMhK0hDX7EjRsrLYgUaGiNFk0oCW5MjBtjjK5ciP+FEtmy0pULN64MCVHD0sRr5nam9GPu7XenMr9fcumZc+5wzvT26Tn39Jy5AVRWf/pPLWJ/REwmEb3J7HxZe2SF/XPPe/Dnh2fTRxL1+qu/J5Fkefnzk+xrT3ZyV0T8+EMS+9qW1zs1c+3i6MTE+NXseHD60uTg1My1wxcujZ4fPz9+efi54RPHjx0/MXRkNZfRvTTjesGTTt98573ej0fe+Oarv5Khb38ZSeJkvJQ9ceF1bJb+6G98T5LlRT0nNruykrRlPycLX+KkvcQGsSb569cREY9Fb7TFwxevNz56udTGAVuqnkTUgYpKxD9UVD4OyN/bL30fXCtlVAJsh/un5iYAlsd/+9zcYHQ15gZ2P0hi4bROEhGrmplbwZ6IuHtn5Oa5OyM3Y4vm4YBiszci4vGi+E8a8d8XXdHXiP/aovhPxwVnsq9p/ivrrH/pVLH4h+0zF/9dLeM/msT/mwvi/6111t//MPl296L47/5y13ovCgAAAAAAACrq9qmIeLbo7/+1+fU/UbD+pyciTm5C/f1Ljpf//b92bxOqAQrcPxXxQuH631q++revLUv9p7EeoCM5d2Fi/EhE/DciDkXHrvR4qEUdhz/Z90Wzsv5s/V/+SOu/m60FzNpxr33JQoCx0enRjV43EHH/RsQThet/k/n+Pyno/9PfB5OrrGPf07fONCtbOf6BrVL/OuJgYf//8K4VSev7cww2xgOD+ahguSc/+PS7ZvWvN/7dYgI2Lu3/d7eO/75k4f16ptZex9GZ9nqzsvWO/zuT1xq3nOnM8t4fnZ6+OhTRmZxuS3MX5Q+vvc3wKMrjIY+XNP4PPdV6/q9o/N8dEbNL/u/kj8V7inP//7vn12btMf6H8qTxP7am/n/tieFbfd83q391/f+xRl9/KMsx/wdzPs/DtHNxfkE4thcVbXd7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUIuIPZHUBubTtdrAQERPRPwvdtcmrkxNP3PuyruXx9Kyxuf/1/JP+u2dO07yz//vW3A8vOT4aETsjYjP2robxwNnr0yMlX3xAAAAAAAAAAAAAAAAAAAAsEP0NNn/n/qtrezWAVuuvewGAKUpiP+fymgHsP30/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/gHAAAAAIBHyt4Dt39OImL2+e7GI9WZlXWU2jJgq9XKbgBQGrf4geqy9Aeqy3t8IFmhvKvpSSud2crk2Q2cDAAAAAAAAAAAAACVc3C//f9QVfb/Q3XZ/w/Vle//P1ByO4Dtt8b3+PWN7PYFdq5WsV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6MiEU5r++Qhm1jol6vX09/CnZKe/7liXwp/E5pTyPRHRFzOflev9WdXt7vJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLF/AgAA//8sQiNW") chdir(&(0x7f00000003c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fib6_table_lookup\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0x8, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x138) read$FUSE(r4, &(0x7f0000003fc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, r5, {0x80}}, 0x18) write$binfmt_misc(r4, &(0x7f0000000140)={'syz0'}, 0x4) 7.410977801s ago: executing program 3 (id=14): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x40, 0xffffffffffffffff}, '.\x00'}) syz_mount_image$hfsplus(&(0x7f0000002180), &(0x7f0000002140)='./control\x00', 0x0, &(0x7f0000000300)={[{@part={'part', 0x3d, 0x10001}}, {@barrier}, {@uid}, {@gid}, {@type={'type', 0x3d, "5fef50c6"}}, {@nls={'nls', 0x3d, 'cp861'}}]}, 0x3, 0x6b0, &(0x7f0000004dc0)="$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") ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rename(0x0, 0x0) 6.185859259s ago: executing program 1 (id=15): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000200)={[{@numtail}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8no}, {@shortname_lower}]}, 0x4, 0x362, &(0x7f0000000900)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x3, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000000000400000c14bfbac0000000000000b725d3c2bbb778c5b9c365def7343355647cb2bf2b813134e466f32721f6ed69dc8d781c00e1e1388add0f96a91fcb5fd66f892f2d36d3b77b9c997b5e6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030020010000000000000000000000000001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 5.918918724s ago: executing program 3 (id=16): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000001040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@remote}, {@empty}]}, @noop, @lsrr={0x83, 0x7, 0x0, [@rand_addr]}]}}}}}) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x1}, 0x20) socket$unix(0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x4, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) 5.913014055s ago: executing program 4 (id=17): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x380400e, &(0x7f00000006c0), 0x3, 0x440, &(0x7f0000000280)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0xfffffffffffffffc, 0x20, 0x1}) r6 = socket(0x2, 0x80805, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f00000009c0)={0x0, &(0x7f0000000980)=[0x0, &(0x7f0000000700)="f680e181fdbf26cba28678936857e1cc9920387cbe61338a8348004b50d7b2c25fd9bc98b6b894b05ed4fc951c16fed87f5ce416dd30f19cacc78b1871098f6828a73ec0f8beb0a5c38cb0499fe137582ac91f38cc653f6cb62defeb5864a0a641a36988695a55715b29ccbd6bed6a505d271e4f4f7229793a3d4d73611f687461037e48ec1d4ca61402edf38923151a23d1f858898f2405b8ebd262b79ab8c52842d9a463675f977e8d1f57a5f24a126fbe95f8371ca88537a63906fdee660e7f5d1580a3bb22dd11", &(0x7f0000000180)="06a93e4886f9c7d1e66e14473e95f0644c513d06e87876e68d0a3e00af51453a3f3019c7bf9a", &(0x7f0000000800)="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", 0x0, &(0x7f000000eb00)="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"], 0x6}) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x80000001, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x81}]}, 0x0}, 0x90) statfs(0x0, 0x0) 5.653813229s ago: executing program 0 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f00000000c0)="e0", 0xffffffffffffff41) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000700), 0xc, &(0x7f0000000740)={0x0}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffff4, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x5}, 0x48) syz_emit_ethernet(0x22, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)={0x0, 0x2, [0xe1d, 0x767, 0x492, 0xf56]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2, 0x400}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000440)=""/87) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/79, 0x4f}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 5.25355863s ago: executing program 0 (id=19): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x8c431f5ae08266, &(0x7f0000000740)=ANY=[], 0x25, 0x34f, &(0x7f0000001f80)="$eJzs3T9sG2UUAPDnXhKnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHbJ/tc+xQZ3Boxe83RE/v+9597y6n3CVKvrzeiq1L83H51q2bsbhYiLm1c2txuxClOBFJ9OzFRB8tTM4DAPe422kaf6U9d5/9yVI/8uwHgPtX9/n/5qlhoniE4qsPzKIlAGDGpvz+//mJ2SszawsAmKGx5/9jI8MHfsw/N/idAADg/vXiK68+t74RcbFcXoyof9isNCvxzHB8/XK8HbXYjLOxHPsRvReF3ttC5+OzFzbOny13/FaKSqeiWYmot5qV3pvCetKtL8ZKLEcpq08H9UmnfqVbX46IvVZ3/agXmpX5WMrW/3kpNmM1luOhsfqICxvnV8vZASr1fn0roh2L/ZPo9H8mluPHN+JK1OJSdGqH/e+ulMvn0o2R+ua1YnceAAAAAAAAAAAAAAAAAAAAAADMwpnyQGmw/01abzU/uHhwQmlkf5xKbzjbH6jd2x8oLfZ357maHNwfaHR/nmZlLk78p2cOAAAAAAAAAAAAAAAAAAAA947GzkJUa7XN7cbO+1v5oJXLvPv9V9+ejP7QXFb6TjKsiiw5cpz+xNyRkxgskQ7K02RkThYkEf3Je9Vr1wcd5+cUB2cxVt4JimNDhaynaq126tFfP59U9Xcn2Otmkhi7LKNBIVs/N1R/sJNYjIj9w6oOD1bvMudGmqaHle9+Nl4VhYi5OHIbUwTf3Xzr4Scbp5/qZr7JNn14/Inll258+uUfW9VatHtXplZb2G7sp1McudPr+FCSu38K2XUuTLgTJgftYaa93dipJj/9+fIjH/9wYHIy+f5J85n3Dl/r64OZhV5QiCj1L8K/tTo/4eafHLx2Z3D3Hv0Td/qLter13V9+n7Yq90XCRh0AAAAAAAAAAAAAAAAAAHAscn8rfgRPvzC7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+A3//38uaI9lpgnutGJ8qLi53Th08ZPHeqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyP/RMAAP//rShzCQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) flock(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="3310", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) 5.253049616s ago: executing program 2 (id=20): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) getcwd(&(0x7f0000000480)=""/163, 0xa3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000005d40)='./file0\x00', &(0x7f0000005d80), 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000071c0), &(0x7f0000007200)=0xc) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r4, 0x0) stat(&(0x7f0000007240)='./file0\x00', &(0x7f0000007280)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010300000ae6f720ffa003"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r5, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}}, 0x0) 4.870246514s ago: executing program 1 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00'}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f00000003c0)=0x8) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000240c0)=ANY=[@ANYBLOB="280100000314130000000000000000000900020073797a31000000000800410072786500140033006272696467655f736c6176655f300000090002004100736977001400330070696d726567000000000000000000000900020073797a3000000000"], 0x128}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) socket(0x2c, 0x3, 0x0) 4.791207382s ago: executing program 3 (id=22): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) read$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x4dc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="231f315009eec265ca9303bd6969b312f303a1a7ada350089db440ae2b61f370d22eeee5399fbe0a65bdbbb68c94fdf6e532ca5682fca461fc504b484d342903e6b5888aac354f673b26a3469ff0c4f13d6de196acc62fd27ba65f0cb0cb65129f50035f8056e63b9c57794466", 0x6d}], 0x1, 0x6, 0x50, 0x6) 3.728116053s ago: executing program 3 (id=24): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980001}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x4, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x36, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbb, &(0x7f0000000300)=""/187, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x90) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[]}, 0x78) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x4) 3.727477354s ago: executing program 4 (id=25): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffee5) bind$xdp(0xffffffffffffffff, 0x0, 0x0) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) 3.489634167s ago: executing program 1 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getsockopt$inet_opts(0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) process_mrelease(0xffffffffffffffff, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 3.263377788s ago: executing program 3 (id=27): getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @local, 0x10000}}, 0xfffffff8, 0x9, 0xfff, 0x3, 0x7}, &(0x7f0000000180)=0x98) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000000091, 0x2) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000695ffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x41}}, 0x8004) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/234, 0xea}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x80000}) 2.253862921s ago: executing program 4 (id=28): recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r7, 0x7, r1, &(0x7f00000000c0)={r4, r3}) 2.253351513s ago: executing program 0 (id=29): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) read(r0, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000005000)=ANY=[], 0x2, 0x1f0, &(0x7f0000000540)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r2, 0x10000, 0x0) getdents(r2, 0x0, 0x58) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 115.549397ms ago: executing program 3 (id=30): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x4c0180, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) 0s ago: executing program 1 (id=31): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x0, 0xffffffff], [0xfb]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2}) r1 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3b000300010010", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) set_robust_list(&(0x7f0000000200), 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f0000003702000040000000000000000d93000000000000", @ANYRES32=0x0, @ANYBLOB="00cf6f"], 0x1f) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. [ 47.540597][ T5213] cgroup: Unknown subsys name 'net' [ 47.704000][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.999323][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.061956][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.082040][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.089734][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.098686][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.109993][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.113141][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.119230][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.125315][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.140807][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.140850][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.156001][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.164258][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.165159][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.179335][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.185228][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.187051][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.197515][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.203513][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.207717][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.214976][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.223779][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.236882][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.244888][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.252161][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.252270][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.265787][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.267625][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.273612][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.281242][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.288665][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.667885][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 51.698063][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 51.756798][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 51.835342][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.842791][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.851052][ T5232] bridge_slave_0: entered allmulticast mode [ 51.857940][ T5232] bridge_slave_0: entered promiscuous mode [ 51.865844][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.873576][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.881090][ T5232] bridge_slave_1: entered allmulticast mode [ 51.888334][ T5232] bridge_slave_1: entered promiscuous mode [ 51.972273][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.983984][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.011460][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 52.078227][ T5232] team0: Port device team_slave_0 added [ 52.090348][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.097823][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.104956][ T5231] bridge_slave_0: entered allmulticast mode [ 52.111903][ T5231] bridge_slave_0: entered promiscuous mode [ 52.121826][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.129005][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.136178][ T5231] bridge_slave_1: entered allmulticast mode [ 52.142899][ T5231] bridge_slave_1: entered promiscuous mode [ 52.165904][ T5232] team0: Port device team_slave_1 added [ 52.180368][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 52.210248][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.219847][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.227773][ T5225] bridge_slave_0: entered allmulticast mode [ 52.234377][ T5225] bridge_slave_0: entered promiscuous mode [ 52.268115][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.275169][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.301301][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.323432][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.336536][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.345871][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.353184][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.360460][ T5225] bridge_slave_1: entered allmulticast mode [ 52.367358][ T5225] bridge_slave_1: entered promiscuous mode [ 52.383616][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.390808][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.417357][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.467806][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.474965][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.485596][ T5228] bridge_slave_0: entered allmulticast mode [ 52.492826][ T5228] bridge_slave_0: entered promiscuous mode [ 52.527371][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.552556][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.561026][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.568619][ T5228] bridge_slave_1: entered allmulticast mode [ 52.575163][ T5228] bridge_slave_1: entered promiscuous mode [ 52.594801][ T5231] team0: Port device team_slave_0 added [ 52.602849][ T5231] team0: Port device team_slave_1 added [ 52.609977][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.630679][ T5232] hsr_slave_0: entered promiscuous mode [ 52.640762][ T5232] hsr_slave_1: entered promiscuous mode [ 52.702072][ T5225] team0: Port device team_slave_0 added [ 52.723453][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.734678][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.753668][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.761483][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.787989][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.801447][ T5225] team0: Port device team_slave_1 added [ 52.847356][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.854563][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.862339][ T5224] bridge_slave_0: entered allmulticast mode [ 52.869331][ T5224] bridge_slave_0: entered promiscuous mode [ 52.876393][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.883419][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.909426][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.927507][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.934482][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.960949][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.985854][ T5228] team0: Port device team_slave_0 added [ 52.992323][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.999924][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.007206][ T5224] bridge_slave_1: entered allmulticast mode [ 53.013817][ T5224] bridge_slave_1: entered promiscuous mode [ 53.033974][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.040998][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.067000][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.089217][ T5228] team0: Port device team_slave_1 added [ 53.132257][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.146694][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.205586][ T5231] hsr_slave_0: entered promiscuous mode [ 53.212955][ T5231] hsr_slave_1: entered promiscuous mode [ 53.219816][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.227825][ T5231] Cannot create hsr debugfs directory [ 53.236897][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.244311][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.270374][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.281316][ T5241] Bluetooth: hci0: command tx timeout [ 53.285266][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.294086][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.320250][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.333912][ T5225] hsr_slave_0: entered promiscuous mode [ 53.341059][ T5225] hsr_slave_1: entered promiscuous mode [ 53.347228][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.354791][ T5225] Cannot create hsr debugfs directory [ 53.360638][ T5236] Bluetooth: hci3: command tx timeout [ 53.360871][ T5241] Bluetooth: hci1: command tx timeout [ 53.368305][ T5224] team0: Port device team_slave_0 added [ 53.371933][ T5236] Bluetooth: hci2: command tx timeout [ 53.377223][ T5227] Bluetooth: hci4: command tx timeout [ 53.406011][ T5224] team0: Port device team_slave_1 added [ 53.491124][ T5228] hsr_slave_0: entered promiscuous mode [ 53.497983][ T5228] hsr_slave_1: entered promiscuous mode [ 53.503985][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.512059][ T5228] Cannot create hsr debugfs directory [ 53.525742][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.536366][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.563297][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.592965][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.600546][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.626672][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.744795][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.779925][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.794088][ T5224] hsr_slave_0: entered promiscuous mode [ 53.800644][ T5224] hsr_slave_1: entered promiscuous mode [ 53.806714][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.814383][ T5224] Cannot create hsr debugfs directory [ 53.851380][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.881086][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.025634][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.035200][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.050449][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.065443][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.136468][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.156188][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.175373][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.193618][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.260572][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.279254][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.304060][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.328145][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.356362][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.368192][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.398452][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.418592][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.435346][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.449957][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.474951][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.499741][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.507009][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.533415][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.540605][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.551338][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.604717][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.612522][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.631834][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.643482][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.650654][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.695650][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.738467][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.745629][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.791373][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.798624][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.843955][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.894058][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.936210][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.961908][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.982698][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.000019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.007175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.048578][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.055694][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.079758][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.086885][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.126853][ T5224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.142140][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.171644][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.178833][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.302371][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.344727][ T5232] veth0_vlan: entered promiscuous mode [ 55.358212][ T5227] Bluetooth: hci0: command tx timeout [ 55.393646][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.439141][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.445109][ T5227] Bluetooth: hci1: command tx timeout [ 55.446263][ T5241] Bluetooth: hci4: command tx timeout [ 55.451617][ T5227] Bluetooth: hci2: command tx timeout [ 55.457045][ T5236] Bluetooth: hci3: command tx timeout [ 55.510427][ T5232] veth1_vlan: entered promiscuous mode [ 55.614350][ T5232] veth0_macvtap: entered promiscuous mode [ 55.643814][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.683741][ T5232] veth1_macvtap: entered promiscuous mode [ 55.712777][ T5228] veth0_vlan: entered promiscuous mode [ 55.759069][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.784145][ T5228] veth1_vlan: entered promiscuous mode [ 55.798550][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.810060][ T5224] veth0_vlan: entered promiscuous mode [ 55.818458][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.857764][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.866592][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.875856][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.886139][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.911842][ T5225] veth0_vlan: entered promiscuous mode [ 55.945215][ T5224] veth1_vlan: entered promiscuous mode [ 55.978963][ T5225] veth1_vlan: entered promiscuous mode [ 56.000631][ T5228] veth0_macvtap: entered promiscuous mode [ 56.018546][ T5231] veth0_vlan: entered promiscuous mode [ 56.040308][ T5228] veth1_macvtap: entered promiscuous mode [ 56.061374][ T5224] veth0_macvtap: entered promiscuous mode [ 56.070717][ T5231] veth1_vlan: entered promiscuous mode [ 56.089102][ T5225] veth0_macvtap: entered promiscuous mode [ 56.108929][ T5225] veth1_macvtap: entered promiscuous mode [ 56.115859][ T5224] veth1_macvtap: entered promiscuous mode [ 56.163075][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.182454][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.182593][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.194297][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.215198][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.233842][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.244942][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.255320][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.266000][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.280434][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.299927][ T5231] veth0_macvtap: entered promiscuous mode [ 56.312211][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.323493][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.336103][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.346788][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.356671][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.367239][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.378651][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.386305][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.400107][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.411123][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.425157][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.435926][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.446302][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.456834][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.468307][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.478058][ T5231] veth1_macvtap: entered promiscuous mode [ 56.505975][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.518129][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.528024][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.538517][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.548518][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.559227][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.570146][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.581266][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.590257][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.599305][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.608147][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.623218][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.633181][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.644144][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.653565][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.665259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.666291][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.677056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.690109][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.701184][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.712682][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.723596][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.734396][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.744501][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.755357][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.768116][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.781221][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.790721][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.800315][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.809850][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.832034][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.843118][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.853605][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.864176][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.874448][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.885490][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.895421][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.906062][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.918110][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.978709][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.989832][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.998691][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.007678][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.165648][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.192211][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.208332][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.221781][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.252881][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.267290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.370447][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.373552][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.428845][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.497486][ T5236] Bluetooth: hci0: command tx timeout [ 57.509255][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.519382][ T5236] Bluetooth: hci2: command tx timeout [ 57.533757][ T5236] Bluetooth: hci3: command tx timeout [ 57.541998][ T5236] Bluetooth: hci4: command tx timeout [ 57.550543][ T5236] Bluetooth: hci1: command tx timeout [ 57.802316][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.950615][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.088812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.096675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.405921][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.455367][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.157189][ T5326] block device autoloading is deprecated and will be removed. [ 59.263635][ T5328] loop3: detected capacity change from 0 to 512 [ 59.435136][ T5328] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 59.633789][ T5227] Bluetooth: hci0: command tx timeout [ 59.665220][ T5321] loop4: detected capacity change from 0 to 512 [ 59.678666][ T5227] Bluetooth: hci1: command tx timeout [ 59.684113][ T5227] Bluetooth: hci4: command tx timeout [ 59.690420][ T5227] Bluetooth: hci3: command tx timeout [ 59.696228][ T5227] Bluetooth: hci2: command tx timeout [ 59.807053][ T5331] loop3: detected capacity change from 0 to 512 [ 59.817437][ T5331] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.860960][ T5331] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.406590][ T5331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 60.414807][ T5331] System zones: 1-12 [ 60.531712][ T5331] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.4: corrupted in-inode xattr: e_value size too large [ 60.548862][ T5321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.561668][ T5321] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.651659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.660275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.598420][ T5331] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 61.723496][ T5336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.325684][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.491124][ T5228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.604149][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.654741][ T5349] loop3: detected capacity change from 0 to 128 [ 62.662280][ T5346] loop1: detected capacity change from 0 to 256 [ 62.708991][ T5346] vfat: Bad value for 'fmask' [ 63.016346][ T5356] loop4: detected capacity change from 0 to 256 [ 63.054090][ T5356] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 63.614157][ T5363] syz.4.13: attempt to access beyond end of device [ 63.614157][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.629907][ T5363] syz.4.13: attempt to access beyond end of device [ 63.629907][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.645751][ T5363] syz.4.13: attempt to access beyond end of device [ 63.645751][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.659822][ T5363] Buffer I/O error on dev loop4, logical block 524408, async page read [ 63.687593][ T5363] syz.4.13: attempt to access beyond end of device [ 63.687593][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.703284][ T5363] Buffer I/O error on dev loop4, logical block 524408, async page read [ 63.726500][ T5363] syz.4.13: attempt to access beyond end of device [ 63.726500][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.741019][ T5363] Buffer I/O error on dev loop4, logical block 524408, async page read [ 63.771594][ T5363] syz.4.13: attempt to access beyond end of device [ 63.771594][ T5363] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 63.795780][ T29] audit: type=1800 audit(1724273375.995:2): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13" name="file1" dev="loop4" ino=1048603 res=0 errno=0 [ 63.933931][ T5364] syz.4.13: attempt to access beyond end of device [ 63.933931][ T5364] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 64.451406][ T5369] autofs4:pid:5369:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 64.486201][ T5369] loop3: detected capacity change from 0 to 1024 [ 65.183615][ T5371] loop1: detected capacity change from 0 to 256 [ 65.190732][ T5371] ======================================================= [ 65.190732][ T5371] WARNING: The mand mount option has been deprecated and [ 65.190732][ T5371] and is ignored by this kernel. Remove the mand [ 65.190732][ T5371] option from the mount to silence this warning. [ 65.190732][ T5371] ======================================================= [ 65.388136][ T12] hfsplus: b-tree write err: -5, ino 4 [ 65.509672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.527434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.546456][ T5375] loop4: detected capacity change from 0 to 512 [ 65.581424][ T5371] FAT-fs (loop1): Directory bread(block 64) failed [ 65.600478][ T5371] FAT-fs (loop1): Directory bread(block 65) failed [ 65.619738][ T5375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.639505][ T5371] FAT-fs (loop1): Directory bread(block 66) failed [ 65.647929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 65.680354][ T5371] FAT-fs (loop1): Directory bread(block 67) failed [ 65.712177][ T5375] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.724554][ T5371] FAT-fs (loop1): Directory bread(block 68) failed [ 65.734316][ T5371] FAT-fs (loop1): Directory bread(block 69) failed [ 65.765857][ T5375] EXT4-fs (loop4): 1 truncate cleaned up [ 65.773809][ T5371] FAT-fs (loop1): Directory bread(block 70) failed [ 65.774531][ T5379] Zero length message leads to an empty skb [ 65.781015][ T5371] FAT-fs (loop1): Directory bread(block 71) failed [ 65.789885][ T5375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.811764][ T5371] FAT-fs (loop1): Directory bread(block 72) failed [ 65.826824][ T5371] FAT-fs (loop1): Directory bread(block 73) failed [ 66.515594][ T5386] loop0: detected capacity change from 0 to 256 [ 66.609824][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.618078][ T5390] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.864722][ T5225] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.481590][ T5396] loop0: detected capacity change from 0 to 512 [ 67.508592][ T5396] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.549513][ T5397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.603054][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.707332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.746796][ T5396] EXT4-fs (loop0): 1 truncate cleaned up [ 67.793871][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.803894][ T5396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.807687][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.830726][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.844745][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.866075][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.874925][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.058546][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.837849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.989034][ T5227] Bluetooth: hci0: command tx timeout [ 70.028113][ T5422] loop1: detected capacity change from 0 to 16 [ 70.277566][ T5422] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.527230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 71.040700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 71.162210][ T5231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.179120][ T5227] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 71.197457][ T5422] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 71.210516][ T29] audit: type=1800 audit(1724273383.485:3): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.26" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 71.265185][ T5422] syz.1.26 (5422) used greatest stack depth: 18744 bytes left [ 71.366441][ T5428] Bluetooth: MGMT ver 1.23 [ 71.367408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.243652][ T5227] Bluetooth: hci0: command tx timeout [ 72.257746][ C1] BUG: spinlock recursion on CPU#1, syz.4.28/5436 [ 72.257752][ T5436] ------------[ cut here ]------------ [ 72.257765][ C1] lock: 0xffff8880b903ea40, .magic: dead4ead, .owner: syz.4.28/5436, .owner_cpu: 0 [ 72.257820][ C1] CPU: 1 UID: 0 PID: 5436 Comm: syz.4.28 Not tainted 6.11.0-rc4-next-20240821-syzkaller #0 [ 72.257841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.257854][ C1] Call Trace: [ 72.257861][ C1] [ 72.257868][ C1] dump_stack_lvl+0x241/0x360 [ 72.257894][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.257919][ C1] ? spin_bug+0x13b/0x1d0 [ 72.257940][ C1] do_raw_spin_lock+0x227/0x370 [ 72.257962][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 72.257983][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 72.258005][ C1] raw_spin_rq_lock_nested+0xb0/0x140 [ 72.258027][ C1] try_to_wake_up+0x804/0x1480 [ 72.258043][ C1] ? detach_buf_split+0x9e8/0xb80 [ 72.258064][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 72.258080][ C1] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 72.258098][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 72.258119][ C1] ? virtqueue_get_buf_ctx+0x6dc/0xde0 [ 72.258138][ C1] complete+0xac/0x1c0 [ 72.258159][ C1] random_recv_done+0x138/0x1e0 [ 72.258177][ C1] ? __pfx_random_recv_done+0x10/0x10 [ 72.258196][ C1] ? __pfx_random_recv_done+0x10/0x10 [ 72.258213][ C1] ? __pfx_vring_interrupt+0x10/0x10 [ 72.258230][ C1] vring_interrupt+0x21d/0x380 [ 72.258247][ C1] ? __pfx_vring_interrupt+0x10/0x10 [ 72.258264][ C1] __handle_irq_event_percpu+0x29a/0xa80 [ 72.258282][ C1] ? handle_irq_event+0x81/0x1f0 [ 72.258302][ C1] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 72.258321][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 72.258344][ C1] handle_irq_event+0x89/0x1f0 [ 72.258361][ C1] ? handle_edge_irq+0x257/0xc20 [ 72.258378][ C1] handle_edge_irq+0x25f/0xc20 [ 72.258397][ C1] __common_interrupt+0x136/0x230 [ 72.258419][ C1] common_interrupt+0xb4/0xd0 [ 72.258435][ C1] [ 72.258441][ C1] [ 72.258448][ C1] ? serial8250_console_write+0x1099/0x1770 [ 72.258468][ C1] ? lock_acquire+0xe3/0x550 [ 72.258492][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 72.258508][ C1] ? __pfx_lock_release+0x10/0x10 [ 72.258530][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 72.258552][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 72.258572][ C1] ? console_flush_all+0x3a8/0xfd0 [ 72.258592][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 72.258613][ C1] ? console_flush_all+0x865/0xfd0 [ 72.258633][ C1] ? console_flush_all+0x152/0xfd0 [ 72.258652][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 72.258674][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 72.258694][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 72.258718][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 72.258737][ C1] ? futex_unqueue+0xcb/0xf0 [ 72.258759][ C1] ? console_unlock+0x13b/0x4d0 [ 72.258778][ C1] ? __pfx_console_unlock+0x10/0x10 [ 72.258800][ C1] ? _printk+0xd5/0x120 [ 72.258820][ C1] ? _printk+0xd5/0x120 [ 72.258838][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 72.258863][ C1] ? vprintk_emit+0x5dc/0x7c0 [ 72.258881][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 72.258898][ C1] ? __pfx_futex_wait+0x10/0x10 [ 72.258918][ C1] ? _printk+0xd5/0x120 [ 72.258939][ C1] ? __pfx__printk+0x10/0x10 [ 72.258959][ C1] ? __pfx_do_futex+0x10/0x10 [ 72.258979][ C1] ? sched_clock_cpu+0x76/0x490 [ 72.258998][ C1] ? __warn_printk+0x237/0x360 [ 72.259015][ C1] ? __se_sys_futex+0x3f9/0x480 [ 72.259036][ C1] ? __futex_wait+0x192/0x320 [ 72.259051][ C1] ? __pfx___warn_printk+0x10/0x10 [ 72.259069][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.259092][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.259114][ C1] ? __irq_exit_rcu+0x100/0x1c0 [ 72.259136][ C1] ? syscall_exit_to_user_mode+0x25a/0x370 [ 72.259158][ C1] ? do_syscall_64+0x100/0x230 [ 72.259179][ C1] ? clear_bhb_loop+0x35/0x90 [ 72.259201][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.259226][ C1] [ 72.655893][ T5436] syscall 202 left IRQs disabled [ 72.655947][ T5436] WARNING: CPU: 0 PID: 5436 at kernel/entry/common.c:188 syscall_exit_to_user_mode+0x25b/0x370 [ 72.671181][ T5436] Modules linked in: [ 72.675060][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.4.28 Not tainted 6.11.0-rc4-next-20240821-syzkaller #0 [ 72.685010][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.695064][ T5436] RIP: 0010:syscall_exit_to_user_mode+0x25b/0x370 [ 72.701475][ T5436] Code: 74 0b f6 f7 c3 00 00 40 00 0f 84 5b ff ff ff e8 eb 64 78 f5 e9 51 ff ff ff 90 48 c7 c7 2b bf 08 8e 4c 89 fe e8 46 20 98 f5 90 <0f> 0b 90 90 e8 9c ea dd f5 fb f6 c3 76 0f 84 dc fd ff ff 4c 89 f7 [ 72.721096][ T5436] RSP: 0018:ffffc900045f7ed8 EFLAGS: 00010046 [ 72.727182][ T5436] RAX: c999ce14ae27ec00 RBX: 0000000000000000 RCX: ffff888021b39e00 [ 72.735136][ T5436] RDX: 0000000040000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.743088][ T5436] RBP: ffffc900045f7f48 R08: ffffffff8155acc2 R09: 1ffff1101720519a [ 72.751058][ T5436] R10: dffffc0000000000 R11: ffffed101720519b R12: ffff888021b39e00 [ 72.759002][ T5436] R13: 0000000000000000 R14: ffffc900045f7f58 R15: 00000000000000ca [ 72.766947][ T5436] FS: 00007f77256b66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 72.775854][ T5436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.782412][ T5436] CR2: 000000002003e000 CR3: 0000000068250000 CR4: 00000000003506f0 [ 72.790361][ T5436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.798309][ T5436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.806254][ T5436] Call Trace: [ 72.809509][ T5436] [ 72.812418][ T5436] ? __warn+0x163/0x4e0 [ 72.816570][ T5436] ? syscall_exit_to_user_mode+0x25b/0x370 [ 72.822354][ T5436] ? report_bug+0x2b3/0x500 [ 72.826832][ T5436] ? syscall_exit_to_user_mode+0x25b/0x370 [ 72.832614][ T5436] ? handle_bug+0x60/0x90 [ 72.836943][ T5436] ? exc_invalid_op+0x1a/0x50 [ 72.841598][ T5436] ? asm_exc_invalid_op+0x1a/0x20 [ 72.846600][ T5436] ? __warn_printk+0x292/0x360 [ 72.851338][ T5436] ? syscall_exit_to_user_mode+0x25b/0x370 [ 72.857120][ T5436] ? syscall_exit_to_user_mode+0x25a/0x370 [ 72.862906][ T5436] do_syscall_64+0x100/0x230 [ 72.867476][ T5436] ? clear_bhb_loop+0x35/0x90 [ 72.872131][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.878007][ T5436] RIP: 0033:0x7f7724979e79 [ 72.882399][ T5436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.901995][ T5436] RSP: 002b:00007f77256b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 72.910382][ T5436] RAX: 0000000000000000 RBX: 00007f7724b16138 RCX: 00007f7724979e79 [ 72.918326][ T5436] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7724b16138 [ 72.926271][ T5436] RBP: 00007f7724b16130 R08: 0000000000000000 R09: 0000000000000000 [ 72.934219][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7724b1613c [ 72.942166][ T5436] R13: 0000000000000000 R14: 00007ffff49c5180 R15: 00007ffff49c5268 [ 72.950117][ T5436] [ 72.953136][ T5436] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.960387][ T5436] CPU: 0 UID: 0 PID: 5436 Comm: syz.4.28 Not tainted 6.11.0-rc4-next-20240821-syzkaller #0 [ 72.970334][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.980366][ T5436] Call Trace: [ 72.983622][ T5436] [ 72.986529][ T5436] dump_stack_lvl+0x241/0x360 [ 72.991185][ T5436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.996358][ T5436] ? __pfx__printk+0x10/0x10 [ 73.000922][ T5436] ? _printk+0xd5/0x120 [ 73.005053][ T5436] ? __init_begin+0x41000/0x41000 [ 73.010055][ T5436] ? vscnprintf+0x5d/0x90 [ 73.014357][ T5436] panic+0x349/0x870 [ 73.018234][ T5436] ? __warn+0x172/0x4e0 [ 73.022365][ T5436] ? __pfx_panic+0x10/0x10 [ 73.026758][ T5436] ? show_trace_log_lvl+0x3b2/0x410 [ 73.031937][ T5436] __warn+0x346/0x4e0 [ 73.035893][ T5436] ? syscall_exit_to_user_mode+0x25b/0x370 [ 73.041679][ T5436] report_bug+0x2b3/0x500 [ 73.045985][ T5436] ? syscall_exit_to_user_mode+0x25b/0x370 [ 73.051770][ T5436] handle_bug+0x60/0x90 [ 73.055904][ T5436] exc_invalid_op+0x1a/0x50 [ 73.060384][ T5436] asm_exc_invalid_op+0x1a/0x20 [ 73.065220][ T5436] RIP: 0010:syscall_exit_to_user_mode+0x25b/0x370 [ 73.071610][ T5436] Code: 74 0b f6 f7 c3 00 00 40 00 0f 84 5b ff ff ff e8 eb 64 78 f5 e9 51 ff ff ff 90 48 c7 c7 2b bf 08 8e 4c 89 fe e8 46 20 98 f5 90 <0f> 0b 90 90 e8 9c ea dd f5 fb f6 c3 76 0f 84 dc fd ff ff 4c 89 f7 [ 73.091208][ T5436] RSP: 0018:ffffc900045f7ed8 EFLAGS: 00010046 [ 73.097265][ T5436] RAX: c999ce14ae27ec00 RBX: 0000000000000000 RCX: ffff888021b39e00 [ 73.105213][ T5436] RDX: 0000000040000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.113162][ T5436] RBP: ffffc900045f7f48 R08: ffffffff8155acc2 R09: 1ffff1101720519a [ 73.121109][ T5436] R10: dffffc0000000000 R11: ffffed101720519b R12: ffff888021b39e00 [ 73.129057][ T5436] R13: 0000000000000000 R14: ffffc900045f7f58 R15: 00000000000000ca [ 73.137021][ T5436] ? __warn_printk+0x292/0x360 [ 73.141765][ T5436] ? syscall_exit_to_user_mode+0x25a/0x370 [ 73.147549][ T5436] do_syscall_64+0x100/0x230 [ 73.152115][ T5436] ? clear_bhb_loop+0x35/0x90 [ 73.156779][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.162669][ T5436] RIP: 0033:0x7f7724979e79 [ 73.167060][ T5436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.186642][ T5436] RSP: 002b:00007f77256b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 73.195033][ T5436] RAX: 0000000000000000 RBX: 00007f7724b16138 RCX: 00007f7724979e79 [ 73.202985][ T5436] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7724b16138 [ 73.210945][ T5436] RBP: 00007f7724b16130 R08: 0000000000000000 R09: 0000000000000000 [ 73.218889][ T5436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7724b1613c [ 73.226834][ T5436] R13: 0000000000000000 R14: 00007ffff49c5180 R15: 00007ffff49c5268 [ 73.234784][ T5436] [ 74.345334][ T5436] Shutting down cpus with NMI [ 74.350629][ T5436] Kernel Offset: disabled [ 74.354949][ T5436] Rebooting in 86400 seconds..