last executing test programs: 14m1.637423058s ago: executing program 32 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setuid(0xee01) keyctl$chown(0x4, r5, 0xee01, 0x0) 12m28.354320164s ago: executing program 33 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0xffffffff}, {0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={0x0}}, 0x40000) splice(r1, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 12m11.986958058s ago: executing program 34 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpid() openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$MAP_CREATE(0xe4ffffff00000018, 0x0, 0x50) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 11m32.511999748s ago: executing program 35 (id=225): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f00000000c0)={0x2, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0xc8440, 0x4e8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0x1ff, 0xd, 0x1}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback, 0x0, 0x0, 0x7, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000780)) 11m3.054308587s ago: executing program 36 (id=247): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 10m11.353158114s ago: executing program 37 (id=304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) ptrace$getregs(0xc, r0, 0x5, 0x0) mknod$loop(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) socket(0xa, 0x3, 0x3a) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0xfffffffd, 0x1, 0x40000001, 0x0, 0x6, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) 8m24.959151556s ago: executing program 38 (id=416): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, 0x0, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x200, 0x0) chdir(0x0) link(0x0, 0x0) unshare(0x22020600) 7m54.999303602s ago: executing program 39 (id=447): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000007000080000008000000000", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x1], [0x0, 0x1], 0x8, 0x0, 0x80, 0xe}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0xc, 0x6, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 7m23.046827658s ago: executing program 4 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = inotify_init1(0x80800) inotify_add_watch(r4, 0x0, 0x10000a0) r5 = dup(r4) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000140)={0x40002013}) 7m20.289761485s ago: executing program 4 (id=508): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 7m18.713129704s ago: executing program 4 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m15.273812146s ago: executing program 4 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) unshare(0x400) io_uring_enter(r1, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() fallocate(0xffffffffffffffff, 0x10, 0xfffffffffffff351, 0x20000000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socket$inet6(0xa, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0xa0000}, 0x20) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 7m11.451997758s ago: executing program 4 (id=519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x81401, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x7, 0x6d4, &(0x7f00000011c0)="$eJzs3U+IHFkdB/BvdSY90xGzs/+yUYQMG1h0g8lMmjURhI0ikkOQoJe9DslkM2SSXSazkl3EdFxXwZN4kD14WJF4WBFERFhPi+tZELx4yj3gzUMO6khVV8/09PRMejaZ6dH9fKCm3uv36r1f/bqq+t80HeAT6/wrOdhJkfMnLtwq6/futpfu3W1f75WTTCZpJBPdVYpWUnyUnEt3yWfKG+vhiq3meen+B8XEu++3u7WJeqn6N7bbbpOhPTvJVJKfVpUDSWa6t/9r5GE3jVct1TiX1sf7mIq1uMuEHe8lDsZtdZPOemPjoZuPft4C+9bt7uPmJtPJoXQfXcvnAamvDg+/MoxDa0Nt22tTZ7djAQAAgN039LV8vyce5EFu5fDehAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/H4rubwYW9dLolWdS9H7/v9n3m/rNMYf7iN65Uq2+9cS4AwEAAAAAAACAR3LsQR7kVg736qtF9Zn/81Xlmervp/JGbmYhyzmZW5nPSlaynLkk030DNW/Nr6wsz23e8mcpt1xdXb1db3l66JanN8bVGQx02H8abOoEAAAAAAAAAJ9Y38/59c//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgPyiSA91VtTzTK0+nMZFkKkmzmFnr3hxrsI+kG/qH4w4DAAAA9s7h4j/dwmpRveY/Ur3un8obuZGVLGYlS1nI5eq9gO5L58ZfO+2le3fb18tl84Bf/ceO5q9GTPe9h+Ezz1Y9nl3b4ny+kW/nRGZyMctZzHcyn5UsZCZfr0rzKTJdv3sxfe9uK71YN8d7bkPt4mBsx/rKZXxHq0hauZJWUcZ2MpeavdAbdb+jfbP9oZkMzHinzE7xcm3EHF2u1+Ue/aRe7w/T1Z4fzJUsVvfWbJ37MhtP9ud9c+53eJwMzjSXxtp7UM+sz1JWB2caPecH1ouH6vUe5HqHb6VtzETnx2Wtd/Qd2T7nyRf+9qeLVxs3rl29cvPE/jmMPqbBY6Ldl4nnRsrEUpmJqS3v5DsPDWHqUffh8WjW2egewDu7Wj5fbXs4i/lmXsvlLORMZjOXs5nNl3M67Zzuy+uz2+e1OtcaO7u+Hf98XWgl+VG93lOTWzWUeX2yzmsn2XClm67a+m9Zz9JTI2SpaGZ4lv4+NJSJz9aFco63+x5xxm8wE3N9mXh6+0z84t+rSW4u3bi2fHX+9RHne6Fel6ftOxuv0b98LDu0c/XulsfLU+WdVVZ+uPF4Kdue7rUN5KtZf+IyUQ+2oa2Z6nzutpVnammrM7Uc6cidYSN1254bOku7ajva19ZaazuZS3ktS2vPQgDYtxo59OKhZut+6y+t91o/aF1tXZj62uTZyc81c/DPE3888NvGrxpfKV7Me/le/WgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8kptvvnVtfmlpYXkfFtIYofNvMvqAd4Y29VLRvaW52/vVnezDX489vY+10DuQJrc7on6XZJtxmuMIvpVkd6c4NlrnTOzBLk9mSNOFtVtaSWMtniTX9skP3AG74dTK9ddP3XzzrS8uXp9/deHVhRunz555+Uz7S3O3T11ZXFqY7f4dd5TAbhh8XgoAAAAAAAAAAADsf6N9eaC5xdc2Pp1k1G+8bFB0xrCvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+m86/kYCdF5mZPzpb1e3fbS+XSK6/3nEjSSFJ8Nyk+Ss6lu2S6b7hiq3leuv/Bz1949/32+lgTvf6Nge1+/8/V1dGCf7tX6NRLZpIcqNcPN7lVw4bxLvWN1xktsAHF2h6WCTveSxyM238DAAD//+K9AiI=") socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)='%', 0x1, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) 7m4.56896874s ago: executing program 4 (id=528): syz_usb_connect(0x4, 0x90, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'\x00', 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 6m47.571491531s ago: executing program 40 (id=528): syz_usb_connect(0x4, 0x90, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'\x00', 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @remote}}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) 5m53.521918658s ago: executing program 5 (id=590): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000010"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) io_setup(0x7ff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r4, 0x0) 5m50.290460549s ago: executing program 5 (id=595): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$pppoe(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'macvlan1\x00'}}, 0x1e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) inotify_init() syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000380000000000019078ac1e0001ac1414aa0304907803000000450000000000000000010000000000007f0000010000000000002000eb5bdd472dee388528deb71844"], 0x0) 5m44.349836937s ago: executing program 5 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 5m42.36123738s ago: executing program 5 (id=606): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad8, 0x800, 0x2, 0x3c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x6, 0x6d4}, 0xf0}, 0x1) 5m25.116765232s ago: executing program 41 (id=606): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad8, 0x800, 0x2, 0x3c}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() socket$packet(0x11, 0x3, 0x300) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4000) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x6, 0x6d4}, 0xf0}, 0x1) 4m2.553421767s ago: executing program 0 (id=736): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000500)={r7}) 3m58.672391761s ago: executing program 0 (id=741): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioperm(0x0, 0x44, 0x7) 3m56.297730343s ago: executing program 0 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 3m52.787307217s ago: executing program 0 (id=748): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioperm(0x0, 0x44, 0x7) 3m49.692934658s ago: executing program 0 (id=754): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000030) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r5, &(0x7f0000000380), 0x0, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 3m45.720967219s ago: executing program 0 (id=761): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x1c243811) keyctl$chown(0x4, r4, 0xee00, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) 3m38.909540854s ago: executing program 2 (id=769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m33.938581729s ago: executing program 2 (id=786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x645a95e3f2d9513}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x1, 0x4, 0x7, 0x4, 0x40}, 0xc) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r5 = memfd_secret(0x0) ppoll(&(0x7f0000000100)=[{r5, 0x200}], 0x1, &(0x7f0000000280)={0x77359400}, 0x0, 0x0) lsm_set_self_attr(0x67, &(0x7f0000000000)={0x67, 0x8fe, 0x20}, 0x20, 0x0) 3m31.828118535s ago: executing program 2 (id=776): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioperm(0x0, 0x44, 0x7) 3m29.635633463s ago: executing program 42 (id=761): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x1c243811) keyctl$chown(0x4, r4, 0xee00, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) 3m29.295371008s ago: executing program 2 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) poll(&(0x7f0000000080)=[{r5, 0x8040}], 0x1, 0x3) writev(r5, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}], 0x1) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x9) 3m27.08250358s ago: executing program 2 (id=785): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x1c243811) keyctl$chown(0x4, r3, 0xee00, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0xfff, 0xfffffffa}, 0x10) 3m17.9892517s ago: executing program 2 (id=796): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000340), 0x4) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 3m1.914026211s ago: executing program 43 (id=796): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000340), 0x4) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 2m41.848791097s ago: executing program 8 (id=837): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(0xffffffffffffffff, r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000002a00000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m40.771670962s ago: executing program 8 (id=823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='irq_handler_entry\x00', 0xffffffffffffffff, 0x0, 0x300000000}, 0x9f9a6f51aa9d9e09) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @restrict, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 2m37.583957688s ago: executing program 8 (id=827): r0 = socket$inet6(0xa, 0x400000000001, 0x40000) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)=ANY=[]) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2bc], [0x0, 0x40000000], [0x0, 0x0, 0x8c1a]}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 2m32.372966485s ago: executing program 8 (id=836): socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) getrlimit(0xb, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x7, @remote, 0x80000001}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, @in={0x2, 0x4e20, @private=0xa010101}], 0x68) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000080)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04\xff\x00\x00\x00v{evoo~\x05\xc6\x00\x05\x00\x007\xd9:\x8b\xcd2W\x92\x00', 0x38, 'pJ\x86\x02\x00\x02\x00|\xfag>\xff\xeb\t\xb5{\x82\x00\xb5\x00\x01+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xd6\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00'/56, 0x18, '\xcf\xc2\x9ci\xab\x9d\xe6L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z\x00\x00\x00\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073795d310000000028000480080002400000000008000140000000051400"], 0xe8}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r2, 0x400000) 2m30.588122043s ago: executing program 8 (id=841): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000000000004950400"/32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 2m26.946594878s ago: executing program 8 (id=847): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x9ca00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f00000045c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile, @ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000046c0)=""/215, 0x4a, 0xd7, 0x1}, 0x20) 2m11.741460728s ago: executing program 44 (id=847): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x9ca00) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f00000045c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile, @ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000046c0)=""/215, 0x4a, 0xd7, 0x1}, 0x20) 1m33.773437842s ago: executing program 1 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x67e8, 0x0, 0xff, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffffb443, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) connect$inet(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) 1m30.368052355s ago: executing program 1 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, 0x0) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000ffff27bd01000000df2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05004c0012800e00010069703667726574617000000038000280140007"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1m28.485286734s ago: executing program 1 (id=920): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\a\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400000003000000070000000100000000000000000000005434807c5a6ab02b58ced47fc8869d28497f283cbee52543e789ea262b10570398a1d781bb2cf8e457b21b76f0e88f65"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 1m24.804289503s ago: executing program 1 (id=924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback, 0x80000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) sysinfo(&(0x7f0000000000)=""/196) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) fcntl$notify(r1, 0x402, 0x91ea6c1af182532) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m18.309357216s ago: executing program 1 (id=933): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 1m14.548893007s ago: executing program 1 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='.%\x90-{\x00', 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 58.153275851s ago: executing program 45 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000440)='.%\x90-{\x00', 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 33.594902761s ago: executing program 9 (id=985): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setgroups(0x1, &(0x7f0000000080)=[0x0]) getgroups(0x27, &(0x7f0000002540)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) inotify_init1(0x80000) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f0008000300000064000000050000000000"], 0x78) close(r5) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 29.622446546s ago: executing program 9 (id=991): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x6, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) poll(&(0x7f0000000000), 0x0, 0x15) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 28.105203986s ago: executing program 6 (id=992): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 28.104968788s ago: executing program 7 (id=993): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x8}, [@typed={0x6, 0x1, 0x0, 0x0, @str='&\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) utime(0x0, &(0x7f0000000340)={0x1, 0x100}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 23.403266015s ago: executing program 6 (id=995): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000100)={[{@bsdgroups}, {@abort}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 23.396960657s ago: executing program 9 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)={0x3a, 0x2, 0x2, 0x81, 0x0, [@mcast2]}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r6) unshare(0x20040d00) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xc, 0x20000028, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x640100fe}}}}}}, 0x0) 22.948170993s ago: executing program 7 (id=997): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfb, 0x2b0, &(0x7f0000000540)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x260140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) chmod(0x0, 0x4a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x400) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 20.489673451s ago: executing program 9 (id=998): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 20.489422743s ago: executing program 3 (id=999): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) read$FUSE(r4, &(0x7f00000064c0)={0x2020}, 0x2020) 20.159988004s ago: executing program 7 (id=1000): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7d, 0x8, 0x0, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x43) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x235, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) fcntl$setsig(r3, 0xa, 0x2f) close(r5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 18.01998898s ago: executing program 3 (id=1001): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") socket$nl_route(0x10, 0x3, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, 0x0, 0x8080) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40840) 17.93249133s ago: executing program 6 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = fcntl$dupfd(r1, 0x406, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x95) 16.312990349s ago: executing program 9 (id=1003): sendto$inet(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000240)) r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r4) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x5, 0x8}, {0x5, 0xc, 0x0, 0x4}}}}, 0x15) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x10000, 0x10000004, 0x5, 0xfffffbf9, 0x7fff, 0x40000000, 0x800000, 0x100, 0x5, 0x1, 0x1, 0x0, 0x40000004, 0xf, 0x0, 0x0, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xfff, 0x3c, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xbc23, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000280)={0x7, 0x1f, 0x1, {0x3, @raw_data="47edea20c3870048d94ae08e3824efee08a1dcc94cf642daf5719a6898529af86d217e970287f2176dce967d50a3a45c89095e2610087fa6bc0d065bbb5fa02b311b0826dda86a8d9ac7292d64ab165e5a5e9068bd2af52384b5b02794e6c51bd3ba456a979323cd1f0135b9a45f304d5d20ba01752df873cae25be3eccd701e9660ac62402fbba27201830279ca212e7130e6929eb0fae00da00d5cd1b34c7b6ecfac5f272372812180b990f2ebeddc44d83d4e02e360a9af585c8b7b6cf1c209a73ac6ea185dbc"}, 0x7f}) 15.565739766s ago: executing program 6 (id=1004): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000040, &(0x7f00000022c0)=ANY=[], 0x1, 0x6dc, &(0x7f0000001180)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munlock(&(0x7f000050b000/0x4000)=nil, 0x4000) socket$inet6(0xa, 0x80000, 0x10001) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) 15.565446403s ago: executing program 3 (id=1005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x60) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x11, 0x10, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 15.564260039s ago: executing program 7 (id=1014): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup2(0xffffffffffffffff, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3}, 0x4) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f0800000000000000000000850000002a00000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.498361716s ago: executing program 5 (id=958): syz_emit_vhci(0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x15, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r3, 0x1, 0xb, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) prlimit64(r2, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 3.497544864s ago: executing program 6 (id=1017): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f0008000300000064000000050000000000"], 0x78) close(r1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.496776649s ago: executing program 9 (id=1018): r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) read$FUSE(r4, &(0x7f00000064c0)={0x2020}, 0x2020) 3.495924489s ago: executing program 3 (id=1019): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000480) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x290) 3.493825141s ago: executing program 7 (id=1020): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsmount(r0, 0x0, 0x20) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000580)={0x19, 0x5, 0xc, 0x7, 0x800}) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@errors_remount}, {@fat=@debug}, {@fat=@uid}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@nocase}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") r6 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000005c0)={0x0, 0x4, 0xffffffb8}) 350.9608ms ago: executing program 5 (id=1006): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 119.193401ms ago: executing program 6 (id=1007): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() listen(0xffffffffffffffff, 0x5) socket$netlink(0x10, 0x3, 0x8000000004) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0x5) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 118.708045ms ago: executing program 3 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r5, 0x10, 0x3, 0x7ffd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r6, 0x20, 0x2000, 0x8000) 0s ago: executing program 7 (id=1009): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioperm(0x0, 0x44, 0x7) kernel console output (not intermixed with test programs): hsr_slave_1: entered promiscuous mode [ 465.645556][ T8109] debugfs: 'hsr0' already exists in 'hsr' [ 465.651305][ T8109] Cannot create hsr debugfs directory [ 465.836826][ T8018] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.860856][ T8018] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.877618][ T8018] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 465.888819][ T8018] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.001487][ T5841] Bluetooth: hci1: command tx timeout [ 466.165675][ T7824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.254477][ T7824] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.268300][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.275470][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.340811][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.348010][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.370527][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.442065][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.490561][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.497758][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.515692][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.523225][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.706557][ T8109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.735082][ T8109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.756412][ T8109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.782074][ T8109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.970776][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.120820][ T8109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.146885][ T7824] veth0_vlan: entered promiscuous mode [ 467.179840][ T8109] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.199977][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.207181][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.230206][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.237386][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.261221][ T7824] veth1_vlan: entered promiscuous mode [ 467.276893][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.381109][ T7824] veth0_macvtap: entered promiscuous mode [ 467.405368][ T7824] veth1_macvtap: entered promiscuous mode [ 467.460926][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.505170][ T7824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.553259][ T5966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.574236][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.611302][ T5966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.624242][ T5966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.745233][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.775203][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.847969][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.876402][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.979659][ T8109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.077791][ T5841] Bluetooth: hci1: command tx timeout [ 470.193133][ T5841] Bluetooth: hci1: command tx timeout [ 470.290056][ T8189] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 470.639443][ T8018] veth0_vlan: entered promiscuous mode [ 470.716766][ T8018] veth1_vlan: entered promiscuous mode [ 470.785101][ T8194] loop3: detected capacity change from 0 to 512 [ 470.806447][ T5841] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 470.850068][ T8194] EXT4-fs: Ignoring removed i_version option [ 471.081554][ T8194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.896030][ T8018] veth0_macvtap: entered promiscuous mode [ 473.686291][ T8018] veth1_macvtap: entered promiscuous mode [ 473.736825][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.901436][ T8216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.008476][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.085698][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.357739][ T5955] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.395398][ T6105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.413942][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.484463][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.982148][ T8109] veth0_vlan: entered promiscuous mode [ 478.880986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.942133][ T8109] veth1_vlan: entered promiscuous mode [ 478.974362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.208744][ T6107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.261198][ T6107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.335137][ T8109] veth0_macvtap: entered promiscuous mode [ 482.381141][ T8109] veth1_macvtap: entered promiscuous mode [ 485.686743][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.959894][ T8109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.033709][ T5966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.073177][ T5966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.937691][ T8294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.873451][ T5966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.906802][ T8285] loop6: detected capacity change from 0 to 1024 [ 491.941515][ T5966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.569497][ T8303] loop3: detected capacity change from 0 to 512 [ 493.724529][ T8303] EXT4-fs error (device loop3): ext4_iget_extra_inode:5074: inode #15: comm syz.3.415: corrupted in-inode xattr: invalid ea_ino [ 493.884289][ T8303] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.415: couldn't read orphan inode 15 (err -117) [ 494.315080][ T8303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.462652][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.781397][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.899987][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.906977][ T8332] loop6: detected capacity change from 0 to 128 [ 495.998012][ T8333] loop9: detected capacity change from 0 to 512 [ 496.006899][ T6120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.066597][ T8333] EXT4-fs: Ignoring removed nobh option [ 496.161692][ T6120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.351682][ T8333] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.422: iget: bad i_size value: 38620345925642 [ 497.304550][ T8333] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.422: couldn't read orphan inode 15 (err -117) [ 497.312417][ T8340] binder: 8338:8340 ioctl 4018620d 0 returned -22 [ 497.328929][ T6114] bio_check_eod: 176 callbacks suppressed [ 497.328952][ T6114] kworker/u8:19: attempt to access beyond end of device [ 497.328952][ T6114] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 497.417170][ T8340] loop3: detected capacity change from 0 to 256 [ 497.442330][ T8333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.456212][ T8340] exfat: Deprecated parameter 'utf8' [ 497.495846][ T8340] exfat: Deprecated parameter 'utf8' [ 497.947903][ T8313] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 498.463285][ T8340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 498.743645][ T8018] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.086550][ T8362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.038177][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.045412][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.383168][ T8399] capability: warning: `syz.6.436' uses deprecated v2 capabilities in a way that may be insecure [ 516.284991][ T36] Bluetooth: (null): Invalid header checksum [ 516.314237][ T36] Bluetooth: (null): Invalid header checksum [ 516.354774][ T8417] loop3: detected capacity change from 0 to 2048 [ 516.378108][ T36] Bluetooth: (null): Invalid header checksum [ 516.406755][ T8417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.426410][ T36] Bluetooth: (null): Invalid header checksum [ 516.451772][ T36] Bluetooth: (null): Invalid header checksum [ 516.482026][ T36] Bluetooth: (null): Invalid header checksum [ 516.819216][ T50] Bluetooth: (null): Invalid header checksum [ 517.442798][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.452699][ T50] Bluetooth: (null): Invalid header checksum [ 517.458801][ T50] Bluetooth: (null): Invalid header checksum [ 517.467736][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.479988][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.498564][ T50] Bluetooth: (null): Invalid header checksum [ 517.505238][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.515042][ T50] Bluetooth: (null): Invalid header checksum [ 517.521540][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.738982][ T50] Bluetooth: (null): Invalid header checksum [ 517.788047][ T50] Bluetooth: (null): Invalid header checksum [ 517.802385][ T50] Bluetooth: (null): Invalid header checksum [ 517.976333][ T8434] loop4: detected capacity change from 0 to 512 [ 518.816576][ T8434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 519.397860][ T8434] EXT4-fs (loop4): 1 truncate cleaned up [ 519.415028][ T8434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.331775][ T5837] Bluetooth: hci2: command tx timeout [ 522.285155][ T8109] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.054551][ T70] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.601517][ T5841] Bluetooth: hci2: command tx timeout [ 524.599282][ T8463] xt_TCPMSS: Only works on TCP SYN packets [ 525.671575][ T5841] Bluetooth: hci2: command tx timeout [ 525.988243][ T8472] loop8: detected capacity change from 0 to 128 [ 526.021717][ T70] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.129583][ T8472] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 526.967796][ T70] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.802634][ T8486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.852734][ T5841] Bluetooth: hci2: command tx timeout [ 528.820850][ T6114] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 529.830668][ T70] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.081042][ T8502] netlink: 'syz.8.455': attribute type 1 has an invalid length. [ 530.089270][ T8502] netlink: 'syz.8.455': attribute type 2 has an invalid length. [ 530.676506][ T8497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.061491][ T5994] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 539.021561][ T5994] usb 5-1: Using ep0 maxpacket: 16 [ 539.291160][ T5994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.369026][ T5994] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 539.371513][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 539.646630][ T5994] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.722962][ T5994] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.731000][ T5994] usb 5-1: Manufacturer: syz [ 540.657281][ T5994] usb 5-1: config 0 descriptor?? [ 540.862113][ T5994] usb 5-1: USB disconnect, device number 2 [ 541.007859][ T70] bridge_slave_1: left allmulticast mode [ 541.017851][ T70] bridge_slave_1: left promiscuous mode [ 541.028344][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.248072][ T70] bridge_slave_0: left allmulticast mode [ 541.266021][ T70] bridge_slave_0: left promiscuous mode [ 541.321778][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.787968][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.808035][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.823807][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.832182][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.840629][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 543.014427][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.472'. [ 544.341081][ T8581] loop4: detected capacity change from 0 to 32768 [ 544.875382][ T5837] Bluetooth: hci6: command tx timeout [ 547.091534][ T5837] Bluetooth: hci6: command tx timeout [ 549.588825][ T5841] Bluetooth: hci6: command tx timeout [ 551.682549][ T5837] Bluetooth: hci6: command tx timeout [ 558.659817][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.492'. [ 561.163361][ T5841] Bluetooth: hci6: command 0x0405 tx timeout [ 561.813054][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.669241][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 562.678260][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.493'. [ 563.262681][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.352024][ T70] bond0 (unregistering): Released all slaves [ 564.645745][ T8675] Process accounting resumed [ 567.279996][ T8706] loop4: detected capacity change from 0 to 128 [ 568.324153][ T8706] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 569.698289][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 570.391541][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 570.911376][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 570.911402][ T30] audit: type=1326 audit(2000000353.710:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.9.504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8b0b8eec9 code=0x0 [ 571.260323][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 572.475894][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.515675][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.655420][ T8737] loop8: detected capacity change from 0 to 128 [ 573.591820][ T8742] syz.8.507: attempt to access beyond end of device [ 573.591820][ T8742] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 573.684279][ T8742] syz.8.507: attempt to access beyond end of device [ 573.684279][ T8742] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 574.138866][ T8742] syz.8.507: attempt to access beyond end of device [ 574.138866][ T8742] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 574.592786][ T8742] syz.8.507: attempt to access beyond end of device [ 574.592786][ T8742] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 574.644021][ T8745] Process accounting resumed [ 574.887961][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.910092][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.920021][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.928859][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.937288][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.086700][ T5837] Bluetooth: hci0: command tx timeout [ 579.543769][ T8776] loop9: detected capacity change from 0 to 128 [ 579.586974][ T70] hsr_slave_0: left promiscuous mode [ 579.621448][ T8776] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 579.695437][ T70] hsr_slave_1: left promiscuous mode [ 579.707779][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.806097][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.156034][ T5837] Bluetooth: hci0: command tx timeout [ 580.263922][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.289273][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.247907][ T70] veth1_macvtap: left promiscuous mode [ 581.263817][ T70] veth0_macvtap: left promiscuous mode [ 581.269520][ T70] veth1_vlan: left promiscuous mode [ 581.288961][ T6114] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 581.301002][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 581.691543][ T70] veth0_vlan: left promiscuous mode [ 582.641757][ T5837] Bluetooth: hci0: command tx timeout [ 583.010557][ T8803] loop4: detected capacity change from 0 to 1024 [ 584.711719][ T52] Bluetooth: hci0: command tx timeout [ 584.791586][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 585.242692][ T8818] loop3: detected capacity change from 0 to 40427 [ 585.537317][ T8818] F2FS-fs (loop3): invalid crc value [ 586.364649][ T8818] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 586.377381][ T8818] F2FS-fs (loop3): Start checkpoint disabled! [ 586.404725][ T8818] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 586.422768][ T8818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 586.550168][ T8818] syz.3.523: attempt to access beyond end of device [ 586.550168][ T8818] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 587.395746][ T8833] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 588.084279][ T5966] kworker/u8:9: attempt to access beyond end of device [ 588.084279][ T5966] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 588.193839][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 588.193896][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.193921][ T5966] Workqueue: writeback wb_workfn (flush-7:3) [ 588.193965][ T5966] Call Trace: [ 588.193976][ T5966] [ 588.193990][ T5966] dump_stack_lvl+0x16c/0x1f0 [ 588.194048][ T5966] f2fs_handle_critical_error+0x624/0x9f0 [ 588.194100][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.194144][ T5966] ? f2fs_build_fault_attr+0x53/0x1f0 [ 588.194195][ T5966] f2fs_write_end_io+0x958/0xcf0 [ 588.194252][ T5966] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 588.194310][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.194363][ T5966] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 588.194414][ T5966] bio_endio+0x713/0x860 [ 588.194477][ T5966] submit_bio_noacct+0x306/0x1f60 [ 588.194535][ T5966] __submit_merged_bio+0x33c/0x770 [ 588.194593][ T5966] __submit_merged_write_cond+0x319/0x3f0 [ 588.194658][ T5966] f2fs_write_cache_pages+0x2067/0x2570 [ 588.194747][ T5966] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 588.194808][ T5966] ? __kernel_text_address+0xd/0x40 [ 588.194864][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.194907][ T5966] ? unwind_get_return_address+0x59/0xa0 [ 588.194963][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195005][ T5966] ? arch_stack_walk+0x88/0x100 [ 588.195070][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195199][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195249][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195300][ T5966] f2fs_write_data_pages+0x4ad/0xd90 [ 588.195368][ T5966] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.195441][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195483][ T5966] ? __lock_acquire+0xb8a/0x1c90 [ 588.195529][ T5966] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 588.195592][ T5966] do_writepages+0x27a/0x600 [ 588.195647][ T5966] ? __pfx_do_writepages+0x10/0x10 [ 588.195694][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.195737][ T5966] ? reacquire_held_locks+0xcd/0x1f0 [ 588.195782][ T5966] ? writeback_sb_inodes+0x3b0/0xfa0 [ 588.195845][ T5966] __writeback_single_inode+0x160/0xfb0 [ 588.195913][ T5966] ? __pfx___writeback_single_inode+0x10/0x10 [ 588.195970][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196013][ T5966] ? do_raw_spin_unlock+0x172/0x230 [ 588.196067][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196115][ T5966] writeback_sb_inodes+0x60d/0xfa0 [ 588.196194][ T5966] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 588.196320][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196363][ T5966] ? rcu_is_watching+0x12/0xc0 [ 588.196397][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196439][ T5966] ? queue_io+0x3f6/0x520 [ 588.196495][ T5966] wb_writeback+0x419/0xb70 [ 588.196563][ T5966] ? __pfx_wb_writeback+0x10/0x10 [ 588.196617][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196672][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196715][ T5966] ? mark_held_locks+0x49/0x80 [ 588.196767][ T5966] wb_workfn+0x14d/0xbe0 [ 588.196805][ T5966] ? try_to_wake_up+0x160/0x1870 [ 588.196868][ T5966] ? __pfx_wb_workfn+0x10/0x10 [ 588.196905][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.196952][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.197001][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.197043][ T5966] ? rcu_is_watching+0x12/0xc0 [ 588.197084][ T5966] process_one_work+0x9cf/0x1b70 [ 588.197156][ T5966] ? __pfx_process_one_work+0x10/0x10 [ 588.197209][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.197264][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.197306][ T5966] ? assign_work+0x1a0/0x250 [ 588.197359][ T5966] worker_thread+0x6c8/0xf10 [ 588.197434][ T5966] ? __pfx_worker_thread+0x10/0x10 [ 588.197487][ T5966] kthread+0x3c5/0x780 [ 588.197535][ T5966] ? __pfx_kthread+0x10/0x10 [ 588.197586][ T5966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.197629][ T5966] ? rcu_is_watching+0x12/0xc0 [ 588.197663][ T5966] ? __pfx_kthread+0x10/0x10 [ 588.197713][ T5966] ret_from_fork+0x675/0x7d0 [ 588.197756][ T5966] ? __pfx_kthread+0x10/0x10 [ 588.197805][ T5966] ret_from_fork_asm+0x1a/0x30 [ 588.197874][ T5966] [ 588.197888][ T5966] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 591.677173][ T8861] loop3: detected capacity change from 0 to 1024 [ 592.881993][ T70] team0 (unregistering): Port device team_slave_1 removed [ 593.212616][ T1331] hfsplus: b-tree write err: -5, ino 4 [ 593.250028][ T70] team0 (unregistering): Port device team_slave_0 removed [ 595.645030][ T8893] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 595.653179][ T8893] UDF-fs: Scanning with blocksize 512 failed [ 595.668557][ T8893] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 595.718463][ T8893] UDF-fs: Scanning with blocksize 1024 failed [ 595.741439][ T8893] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 595.749008][ T8893] UDF-fs: Scanning with blocksize 2048 failed [ 595.768833][ T8893] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 595.784124][ T8893] UDF-fs: Scanning with blocksize 4096 failed [ 596.257875][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.535'. [ 600.704044][ T8908] loop3: detected capacity change from 0 to 512 [ 600.772811][ T8908] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.538: inode has both inline data and extents flags [ 600.815036][ T8908] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.538: couldn't read orphan inode 15 (err -117) [ 600.887336][ T8908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.977277][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.988824][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.998866][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.012646][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.026052][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 602.201234][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.113026][ T52] Bluetooth: hci2: command tx timeout [ 605.191701][ T52] Bluetooth: hci2: command tx timeout [ 605.231602][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.530'. [ 607.271514][ T52] Bluetooth: hci2: command tx timeout [ 609.357134][ T52] Bluetooth: hci2: command tx timeout [ 609.950111][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.074743][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.083994][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.092703][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.101748][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.739043][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.807717][ T8913] chnl_net:caif_netlink_parms(): no params data found [ 610.874826][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.892737][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 610.994494][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.076628][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.196352][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.208357][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.216772][ T8913] bridge_slave_0: entered allmulticast mode [ 611.224652][ T8913] bridge_slave_0: entered promiscuous mode [ 611.296191][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.303546][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.310727][ T8913] bridge_slave_1: entered allmulticast mode [ 611.318605][ T8913] bridge_slave_1: entered promiscuous mode [ 611.345157][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.353264][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.360448][ T8752] bridge_slave_0: entered allmulticast mode [ 611.368287][ T8752] bridge_slave_0: entered promiscuous mode [ 611.412609][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.419755][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.428449][ T8752] bridge_slave_1: entered allmulticast mode [ 611.439426][ T8752] bridge_slave_1: entered promiscuous mode [ 611.454432][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.510912][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.529807][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 611.563494][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.698337][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.739723][ T8913] team0: Port device team_slave_0 added [ 611.810216][ T8752] team0: Port device team_slave_0 added [ 611.818620][ T8913] team0: Port device team_slave_1 added [ 611.870067][ T8752] team0: Port device team_slave_1 added [ 611.994110][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.015622][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.022634][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.049863][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.072063][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.079034][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.107229][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.120944][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.128973][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.155481][ T52] Bluetooth: hci1: command tx timeout [ 612.162141][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.186485][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.217633][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.225156][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.253057][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.299765][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.307909][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.317250][ T8965] bridge_slave_0: entered allmulticast mode [ 612.328293][ T8965] bridge_slave_0: entered promiscuous mode [ 612.358570][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.392625][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.399925][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.407212][ T8965] bridge_slave_1: entered allmulticast mode [ 612.418458][ T8965] bridge_slave_1: entered promiscuous mode [ 612.466755][ T8752] hsr_slave_0: entered promiscuous mode [ 612.474240][ T8752] hsr_slave_1: entered promiscuous mode [ 612.480665][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 612.487077][ T8752] Cannot create hsr debugfs directory [ 612.525719][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.631603][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.645385][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.668236][ T8913] hsr_slave_0: entered promiscuous mode [ 612.675694][ T8913] hsr_slave_1: entered promiscuous mode [ 612.682448][ T8913] debugfs: 'hsr0' already exists in 'hsr' [ 612.688193][ T8913] Cannot create hsr debugfs directory [ 612.790306][ T8965] team0: Port device team_slave_0 added [ 612.858872][ T8965] team0: Port device team_slave_1 added [ 613.048975][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.056455][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.085883][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.133984][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.140974][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.167822][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.180852][ T70] bridge_slave_1: left allmulticast mode [ 613.187342][ T70] bridge_slave_1: left promiscuous mode [ 613.196548][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.207014][ T70] bridge_slave_0: left allmulticast mode [ 613.213717][ T70] bridge_slave_0: left promiscuous mode [ 613.219463][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.235321][ T70] bridge_slave_1: left allmulticast mode [ 613.240996][ T70] bridge_slave_1: left promiscuous mode [ 613.247782][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.257295][ T70] bridge_slave_0: left allmulticast mode [ 613.263791][ T70] bridge_slave_0: left promiscuous mode [ 613.269505][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.612324][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.623849][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.634836][ T70] bond0 (unregistering): Released all slaves [ 613.751399][ T70] bond0 (unregistering): Released all slaves [ 614.016915][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.027915][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.038433][ T70] bond0 (unregistering): Released all slaves [ 614.231636][ T52] Bluetooth: hci1: command tx timeout [ 614.308597][ T8965] hsr_slave_0: entered promiscuous mode [ 614.319611][ T8965] hsr_slave_1: entered promiscuous mode [ 614.326173][ T8965] debugfs: 'hsr0' already exists in 'hsr' [ 614.332998][ T8965] Cannot create hsr debugfs directory [ 614.914353][ T70] hsr_slave_0: left promiscuous mode [ 614.920620][ T70] hsr_slave_1: left promiscuous mode [ 614.927254][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.939573][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.959588][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.967216][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.980894][ T70] hsr_slave_0: left promiscuous mode [ 614.987545][ T70] hsr_slave_1: left promiscuous mode [ 614.996410][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.004301][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.012836][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.021300][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.068573][ T70] veth1_macvtap: left promiscuous mode [ 615.074597][ T70] veth0_macvtap: left promiscuous mode [ 615.080276][ T70] veth1_vlan: left promiscuous mode [ 615.086341][ T70] veth0_vlan: left promiscuous mode [ 615.098022][ T70] veth1_macvtap: left promiscuous mode [ 615.104053][ T70] veth0_macvtap: left promiscuous mode [ 615.109723][ T70] veth1_vlan: left promiscuous mode [ 615.116361][ T70] veth0_vlan: left promiscuous mode [ 615.897495][ T70] team0 (unregistering): Port device team_slave_1 removed [ 615.963942][ T70] team0 (unregistering): Port device team_slave_0 removed [ 616.311734][ T52] Bluetooth: hci1: command tx timeout [ 616.655900][ T70] team0 (unregistering): Port device team_slave_1 removed [ 616.691624][ T70] team0 (unregistering): Port device team_slave_0 removed [ 617.380095][ T8913] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 617.413888][ T8913] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 617.430761][ T8913] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 617.456932][ T8913] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 617.682081][ T8752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.704509][ T8752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.718268][ T8752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.769675][ T8752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 618.046872][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.182403][ T8913] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.219356][ T70] IPVS: stop unused estimator thread 0... [ 618.230317][ T8965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.266835][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.274038][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.284905][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.292113][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.300535][ T8965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.339189][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.354923][ T8965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.379756][ T8965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.396236][ T52] Bluetooth: hci1: command tx timeout [ 618.473269][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.508771][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.516008][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.580335][ T8913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.592136][ T8913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.612988][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.620144][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.840093][ T8965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.919782][ T8965] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.956199][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.963421][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.037775][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.044991][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.244987][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.355574][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.401415][ T8913] veth0_vlan: entered promiscuous mode [ 619.448362][ T8913] veth1_vlan: entered promiscuous mode [ 619.507722][ T8752] veth0_vlan: entered promiscuous mode [ 619.558302][ T8913] veth0_macvtap: entered promiscuous mode [ 619.574331][ T8752] veth1_vlan: entered promiscuous mode [ 619.586886][ T8913] veth1_macvtap: entered promiscuous mode [ 619.668183][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.704016][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.715992][ T8752] veth0_macvtap: entered promiscuous mode [ 619.728946][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.749386][ T8752] veth1_macvtap: entered promiscuous mode [ 619.787094][ T5966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.810452][ T5966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.825920][ T5966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.894315][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.912858][ T5966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.943259][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.006219][ T6107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.022685][ T6107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.060850][ T6107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.124810][ T6107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.263392][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.271260][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.406874][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.423576][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.483204][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.491114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.567683][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.582554][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.606988][ T8965] veth0_vlan: entered promiscuous mode [ 620.683575][ T8965] veth1_vlan: entered promiscuous mode [ 620.802068][ T9118] loop3: detected capacity change from 0 to 128 [ 620.810228][ T9118] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 621.062117][ T9118] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.815602][ T8965] veth0_macvtap: entered promiscuous mode [ 623.884495][ T8965] veth1_macvtap: entered promiscuous mode [ 623.939149][ T5955] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 627.910393][ T9142] loop8: detected capacity change from 0 to 16 [ 628.845316][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.968444][ T9142] erofs (device loop8): mounted with root inode @ nid 36. [ 629.017061][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 630.237496][ T8965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.259742][ T9149] loop9: detected capacity change from 0 to 512 [ 630.274325][ T6107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.285776][ T6107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.303677][ T6110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.392617][ T9149] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.551: inode has both inline data and extents flags [ 630.432077][ T6110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.285932][ T9149] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.551: couldn't read orphan inode 15 (err -117) [ 631.428143][ T9149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.114853][ T8018] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.437101][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.916002][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.934436][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.261633][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.468392][ T9178] loop8: detected capacity change from 0 to 1024 [ 634.949101][ T9187] loop3: detected capacity change from 0 to 128 [ 634.965173][ T9187] affs: Unknown parameter 'bs' [ 635.908258][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.004596][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.881299][ T9216] loop3: detected capacity change from 0 to 64 [ 645.198429][ T9226] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.015018][ T9221] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.022923][ T9221] UDF-fs: Scanning with blocksize 512 failed [ 646.098453][ T9221] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.106535][ T9221] UDF-fs: Scanning with blocksize 1024 failed [ 646.123808][ T9221] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.131564][ T9221] UDF-fs: Scanning with blocksize 2048 failed [ 646.146634][ T9221] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 646.154586][ T9221] UDF-fs: Scanning with blocksize 4096 failed [ 650.689210][ T9249] loop3: detected capacity change from 0 to 40427 [ 650.744808][ T9249] F2FS-fs (loop3): invalid crc value [ 650.839394][ T9249] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 650.972142][ T9249] F2FS-fs (loop3): Start checkpoint disabled! [ 651.007174][ T9249] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 651.015279][ T9249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 655.069962][ T9279] loop0: detected capacity change from 0 to 1024 [ 656.067140][ T9281] uprobe: syz.9.581:9281 failed to unregister, leaking uprobe [ 662.645233][ T9322] loop9: detected capacity change from 0 to 512 [ 664.607883][ T9322] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.687825][ T9342] loop2: detected capacity change from 0 to 128 [ 664.721775][ T9322] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.551717][ T9342] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 667.219644][ T8018] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.492493][ T5966] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 669.409161][ T9367] overlayfs: failed to resolve './file1': -2 [ 669.881752][ T9374] tmpfs: Unknown parameter '0xffffffffffffffff' [ 670.344103][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 670.353455][ T9379] block nbd0: Unsupported socket: should be TCP or UNIX. [ 670.383557][ T9375] loop3: detected capacity change from 0 to 1024 [ 671.276142][ T9388] loop8: detected capacity change from 0 to 1024 [ 672.347573][ T9388] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 672.359738][ T9388] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 672.396853][ T9388] JBD2: no valid journal superblock found [ 672.403246][ T9388] EXT4-fs (loop8): Could not load journal inode [ 683.934761][ T9452] loop3: detected capacity change from 0 to 40427 [ 683.953074][ T9455] overlayfs: failed to resolve './file1': -2 [ 684.462040][ T9452] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 684.469841][ T9452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 684.486557][ T9452] F2FS-fs (loop3): invalid crc value [ 684.678920][ T9452] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 684.713828][ T9452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 684.721020][ T9452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 686.234637][ T30] audit: type=1800 audit(2000000468.360:112): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.620" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 687.789603][ T6102] kworker/u8:15: attempt to access beyond end of device [ 687.789603][ T6102] loop3: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 687.875246][ T6102] kworker/u8:15: attempt to access beyond end of device [ 687.875246][ T6102] loop3: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 688.075256][ T9485] loop9: detected capacity change from 0 to 1024 [ 688.906342][ T6102] kworker/u8:15: attempt to access beyond end of device [ 688.906342][ T6102] loop3: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 689.453568][ T5837] Bluetooth: hci6: command 0x1003 tx timeout [ 689.462852][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 689.668050][ T6102] kworker/u8:15: attempt to access beyond end of device [ 689.668050][ T6102] loop3: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 689.913578][ T9494] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 689.931818][ T9494] loop0: detected capacity change from 0 to 256 [ 689.998918][ T6102] kworker/u8:15: attempt to access beyond end of device [ 689.998918][ T6102] loop3: rw=1, sector=57344, nr_sectors = 5296 limit=40427 [ 690.043112][ T9494] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 693.873955][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 693.893850][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 693.905193][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 693.920570][ T9514] loop0: detected capacity change from 0 to 128 [ 693.931853][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 693.939951][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 694.790954][ T9514] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 695.358577][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.391224][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.862130][ T6102] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 696.321091][ T5837] Bluetooth: hci6: command tx timeout [ 697.452008][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 697.719766][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.635'. [ 697.728835][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.9.635'. [ 698.391530][ T52] Bluetooth: hci6: command tx timeout [ 699.934380][ T9562] loop9: detected capacity change from 0 to 128 [ 700.003818][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.300752][ T9513] chnl_net:caif_netlink_parms(): no params data found [ 701.181859][ T52] Bluetooth: hci6: command tx timeout [ 702.336861][ T9572] loop3: detected capacity change from 0 to 64 [ 702.510852][ T9572] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 702.510852][ T9572] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 702.586792][ T9574] netlink: 11 bytes leftover after parsing attributes in process `syz.9.643'. [ 702.882737][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.902785][ T9570] Falling back ldisc for ttyprintk. [ 703.043828][ T9575] ntfs3(nullb0): Primary boot signature is not NTFS. [ 703.059768][ T9575] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 703.194224][ T52] Bluetooth: hci6: command tx timeout [ 704.744301][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.877066][ T9584] Invalid source name [ 704.881189][ T9584] UBIFS error (pid: 9584): cannot open "./file0", error -22 [ 705.430602][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.458303][ T9588] loop9: detected capacity change from 0 to 256 [ 705.544920][ T9588] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 706.531087][ T9598] loop3: detected capacity change from 0 to 128 [ 707.643225][ T9598] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 707.684287][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.722525][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.729830][ T9513] bridge_slave_0: entered allmulticast mode [ 708.133354][ T9513] bridge_slave_0: entered promiscuous mode [ 708.282164][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.289334][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.298675][ T9513] bridge_slave_1: entered allmulticast mode [ 708.335902][ T9513] bridge_slave_1: entered promiscuous mode [ 708.537775][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.588461][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.638507][ T5955] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 709.484960][ T12] bridge_slave_1: left allmulticast mode [ 709.689054][ T12] bridge_slave_1: left promiscuous mode [ 709.858634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.290762][ T12] bridge_slave_0: left allmulticast mode [ 710.319586][ T12] bridge_slave_0: left promiscuous mode [ 710.360953][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.340221][ T9633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.658'. [ 713.081756][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.625107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.660639][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.690106][ T12] bond0 (unregistering): Released all slaves [ 721.723391][ T9513] team0: Port device team_slave_0 added [ 721.733765][ T9513] team0: Port device team_slave_1 added [ 721.786529][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.793846][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.840616][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.895963][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.903091][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.931870][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.066854][ T9513] hsr_slave_0: entered promiscuous mode [ 722.074592][ T9513] hsr_slave_1: entered promiscuous mode [ 722.081219][ T9513] debugfs: 'hsr0' already exists in 'hsr' [ 722.087711][ T9513] Cannot create hsr debugfs directory [ 722.202591][ T12] hsr_slave_0: left promiscuous mode [ 722.208581][ T12] hsr_slave_1: left promiscuous mode [ 722.215159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.223091][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.233420][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.242062][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.260859][ T12] veth1_macvtap: left promiscuous mode [ 722.266781][ T12] veth0_macvtap: left promiscuous mode [ 722.272632][ T12] veth1_vlan: left promiscuous mode [ 722.277944][ T12] veth0_vlan: left promiscuous mode [ 722.653899][ T12] team0 (unregistering): Port device team_slave_1 removed [ 722.688226][ T12] team0 (unregistering): Port device team_slave_0 removed [ 723.586947][ T9513] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 723.599129][ T9513] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 723.612014][ T9513] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 723.625568][ T9513] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 723.740217][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.783962][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.805464][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.812683][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.826570][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.833799][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.198513][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.608999][ T9513] veth0_vlan: entered promiscuous mode [ 724.633491][ T9513] veth1_vlan: entered promiscuous mode [ 724.678193][ T9513] veth0_macvtap: entered promiscuous mode [ 724.694691][ T9513] veth1_macvtap: entered promiscuous mode [ 724.724710][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.747288][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.770881][ T6120] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.798921][ T6120] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.819030][ T6120] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.842308][ T6120] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.912774][ T6120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.920637][ T6120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.989618][ T5967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.999501][ T5967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.564888][ T9744] loop8: detected capacity change from 0 to 40427 [ 727.057184][ T9744] F2FS-fs (loop8): invalid crc value [ 727.291624][ T9744] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 727.884206][ T9744] F2FS-fs (loop8): Start checkpoint disabled! [ 728.108427][ T9744] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 728.277165][ T9766] loop2: detected capacity change from 0 to 128 [ 728.742674][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 730.207102][ T9779] Unsupported ieee802154 address type: 0 [ 733.467328][ T9797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.927748][ T9792] loop8: detected capacity change from 0 to 22 [ 734.934824][ T9792] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 734.986760][ T9792] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 741.215280][ T9835] loop2: detected capacity change from 0 to 128 [ 742.369373][ T6114] kworker/u8:19: attempt to access beyond end of device [ 742.369373][ T6114] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 744.438587][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.438587][ T6114] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 744.438790][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.438790][ T6114] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 744.438951][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.438951][ T6114] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 744.439113][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.439113][ T6114] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 744.439280][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.439280][ T6114] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 744.439445][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.439445][ T6114] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 744.575382][ T9846] tty tty3: ldisc open failed (-12), clearing slot 2 [ 744.693760][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.693760][ T6114] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 744.721082][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.721082][ T6114] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 744.777389][ T6114] kworker/u8:19: attempt to access beyond end of device [ 744.777389][ T6114] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 755.473678][ T9919] netlink: 64 bytes leftover after parsing attributes in process `syz.9.709'. [ 756.647345][ T9915] loop7: detected capacity change from 0 to 128 [ 756.979883][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.014194][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.426764][ T6114] bio_check_eod: 102 callbacks suppressed [ 758.426784][ T6114] kworker/u8:19: attempt to access beyond end of device [ 758.426784][ T6114] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 758.472439][ T6114] kworker/u8:19: attempt to access beyond end of device [ 758.472439][ T6114] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 758.497644][ T6114] kworker/u8:19: attempt to access beyond end of device [ 758.497644][ T6114] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 758.582876][ T6114] kworker/u8:19: attempt to access beyond end of device [ 758.582876][ T6114] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 760.312150][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.312150][ T6114] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 760.333784][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.333784][ T6114] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 760.348052][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.348052][ T6114] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 760.362159][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.362159][ T6114] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 760.375772][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.375772][ T6114] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 760.389892][ T6114] kworker/u8:19: attempt to access beyond end of device [ 760.389892][ T6114] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 766.129544][ T9976] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 766.408573][ T9986] loop2: detected capacity change from 0 to 512 [ 767.456203][ T9986] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.729: inode has both inline data and extents flags [ 767.487630][ T9986] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.729: couldn't read orphan inode 15 (err -117) [ 767.572639][ T9986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.614034][ T9998] loop9: detected capacity change from 0 to 128 [ 772.603439][ T8913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.542248][ T6114] bio_check_eod: 102 callbacks suppressed [ 773.542273][ T6114] kworker/u8:19: attempt to access beyond end of device [ 773.542273][ T6114] loop9: rw=1, sector=145, nr_sectors = 80 limit=128 [ 773.696621][ T6114] kworker/u8:19: attempt to access beyond end of device [ 773.696621][ T6114] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 773.756776][ T6114] kworker/u8:19: attempt to access beyond end of device [ 773.756776][ T6114] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 774.120920][T10037] netlink: 56 bytes leftover after parsing attributes in process `syz.7.738'. [ 774.484366][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.484366][ T6114] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 774.504741][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.504741][ T6114] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 774.521094][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.521094][ T6114] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 774.535317][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.535317][ T6114] loop9: rw=1, sector=313, nr_sectors = 8 limit=128 [ 774.549331][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.549331][ T6114] loop9: rw=1, sector=329, nr_sectors = 8 limit=128 [ 774.763190][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.763190][ T6114] loop9: rw=1, sector=345, nr_sectors = 8 limit=128 [ 774.780860][ T6114] kworker/u8:19: attempt to access beyond end of device [ 774.780860][ T6114] loop9: rw=1, sector=361, nr_sectors = 8 limit=128 [ 778.729960][T10068] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 780.483769][T10079] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 783.410267][T10084] loop7: detected capacity change from 0 to 65536 [ 783.530581][T10084] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 785.511319][T10084] XFS (loop7): Ending clean mount [ 785.868602][ T9513] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 789.433644][T10143] sctp: [Deprecated]: syz.8.762 (pid 10143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.433644][T10143] Use struct sctp_sack_info instead [ 793.505174][T10157] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 797.870665][T10187] netlink: 56 bytes leftover after parsing attributes in process `syz.8.770'. [ 800.935332][T10207] Invalid source name [ 800.939662][T10207] UBIFS error (pid: 10207): cannot open "./file0", error -22 [ 805.306726][T10238] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 807.078703][T10245] loop2: detected capacity change from 0 to 40427 [ 807.228732][T10245] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 807.236690][T10245] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 807.348062][T10245] F2FS-fs (loop2): invalid crc value [ 808.037358][T10245] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 808.086161][T10245] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 808.093300][T10245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 808.247849][T10259] loop7: detected capacity change from 0 to 22 [ 808.263990][T10259] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 808.378718][T10259] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 809.454833][T10266] loop8: detected capacity change from 0 to 128 [ 811.992740][T10275] loop7: detected capacity change from 0 to 2048 [ 812.052718][T10275] NILFS (loop7): invalid segment: Magic number mismatch [ 812.059967][T10275] NILFS (loop7): trying rollback from an earlier position [ 812.165622][T10275] NILFS (loop7): recovery complete [ 812.175942][ T5967] bio_check_eod: 44 callbacks suppressed [ 812.175962][ T5967] kworker/u8:10: attempt to access beyond end of device [ 812.175962][ T5967] loop8: rw=1, sector=145, nr_sectors = 8 limit=128 [ 812.220601][ T5967] kworker/u8:10: attempt to access beyond end of device [ 812.220601][ T5967] loop8: rw=1, sector=161, nr_sectors = 8 limit=128 [ 812.421878][ T5967] kworker/u8:10: attempt to access beyond end of device [ 812.421878][ T5967] loop8: rw=1, sector=177, nr_sectors = 8 limit=128 [ 812.435580][ T5967] kworker/u8:10: attempt to access beyond end of device [ 812.435580][ T5967] loop8: rw=1, sector=193, nr_sectors = 8 limit=128 [ 812.462792][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 812.475364][ T5967] kworker/u8:10: attempt to access beyond end of device [ 812.475364][ T5967] loop8: rw=1, sector=209, nr_sectors = 8 limit=128 [ 812.488896][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 812.489802][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 812.512286][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 812.522232][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.338890][ T5967] kworker/u8:10: attempt to access beyond end of device [ 813.338890][ T5967] loop8: rw=1, sector=225, nr_sectors = 8 limit=128 [ 813.355106][T10284] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 813.392473][ T5967] kworker/u8:10: attempt to access beyond end of device [ 813.392473][ T5967] loop8: rw=1, sector=241, nr_sectors = 8 limit=128 [ 813.406566][ T5967] kworker/u8:10: attempt to access beyond end of device [ 813.406566][ T5967] loop8: rw=1, sector=257, nr_sectors = 8 limit=128 [ 813.421063][ T5967] kworker/u8:10: attempt to access beyond end of device [ 813.421063][ T5967] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 813.444763][ T5967] kworker/u8:10: attempt to access beyond end of device [ 813.444763][ T5967] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 815.776492][ T5841] Bluetooth: hci1: command tx timeout [ 818.010993][ T5841] Bluetooth: hci1: command tx timeout [ 818.261996][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.268304][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.342439][T10326] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 819.518743][T10327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.672835][T10328] loop7: detected capacity change from 0 to 256 [ 820.543269][ T5837] Bluetooth: hci1: command tx timeout [ 820.550060][ T5837] Bluetooth: hci6: command 0x0406 tx timeout [ 820.779309][T10280] chnl_net:caif_netlink_parms(): no params data found [ 820.990222][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.801'. [ 821.120070][T10334] loop9: detected capacity change from 0 to 512 [ 821.159706][T10334] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 822.644034][ T5841] Bluetooth: hci1: command tx timeout [ 822.684713][T10344] loop7: detected capacity change from 0 to 2048 [ 822.699614][T10344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 824.370325][T10350] loop9: detected capacity change from 0 to 512 [ 824.490013][T10350] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 824.562280][T10350] EXT4-fs (loop9): orphan cleanup on readonly fs [ 824.571320][T10350] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:516: comm syz.9.805: Block bitmap for bg 0 marked uninitialized [ 824.905779][T10350] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 825.572522][ T5947] IPVS: starting estimator thread 0... [ 825.614779][T10350] EXT4-fs (loop9): 1 orphan inode deleted [ 825.626519][T10350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 825.694149][T10363] IPVS: using max 21 ests per chain, 50400 per kthread [ 826.017323][ T70] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.075846][T10375] loop3: detected capacity change from 0 to 1024 [ 828.789312][T10375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 828.800341][T10375] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 828.813927][T10375] JBD2: no valid journal superblock found [ 828.819674][T10375] EXT4-fs (loop3): Could not load journal inode [ 828.933703][ T8018] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.077383][T10389] loop3: detected capacity change from 0 to 1024 [ 833.126000][ T70] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.371656][T10280] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.378848][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.727326][T10280] bridge_slave_0: entered allmulticast mode [ 834.034001][T10280] bridge_slave_0: entered promiscuous mode [ 835.039260][T10280] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.055976][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.341810][T10280] bridge_slave_1: entered allmulticast mode [ 835.590639][T10280] bridge_slave_1: entered promiscuous mode [ 839.802731][T10331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 839.813614][T10331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 839.827396][ T70] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.839542][T10331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 839.873502][T10331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 839.881701][T10331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 840.339170][ T70] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.059491][T10280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.116325][T10280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.270026][T10280] team0: Port device team_slave_0 added [ 841.283780][T10280] team0: Port device team_slave_1 added [ 841.405842][T10280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.417385][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.445897][T10280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.496268][T10280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.503682][T10280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.539802][T10280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.601848][ T70] bridge_slave_1: left allmulticast mode [ 841.607528][ T70] bridge_slave_1: left promiscuous mode [ 841.621992][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.635980][ T70] bridge_slave_0: left allmulticast mode [ 841.644922][ T70] bridge_slave_0: left promiscuous mode [ 841.650726][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.913021][T10331] Bluetooth: hci0: command tx timeout [ 842.080315][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.094253][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.108417][ T70] bond0 (unregistering): Released all slaves [ 842.219456][T10280] hsr_slave_0: entered promiscuous mode [ 842.230082][T10280] hsr_slave_1: entered promiscuous mode [ 842.237788][T10280] debugfs: 'hsr0' already exists in 'hsr' [ 842.248810][T10280] Cannot create hsr debugfs directory [ 842.566063][ T70] hsr_slave_0: left promiscuous mode [ 842.580077][ T70] hsr_slave_1: left promiscuous mode [ 842.588582][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.599812][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.612466][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.619863][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.647729][ T70] veth1_macvtap: left promiscuous mode [ 842.660237][ T70] veth0_macvtap: left promiscuous mode [ 842.666469][ T70] veth1_vlan: left promiscuous mode [ 842.671910][ T70] veth0_vlan: left promiscuous mode [ 843.090840][ T70] team0 (unregistering): Port device team_slave_1 removed [ 843.134071][ T70] team0 (unregistering): Port device team_slave_0 removed [ 843.493904][T10430] chnl_net:caif_netlink_parms(): no params data found [ 843.828472][T10430] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.839531][T10430] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.849362][T10430] bridge_slave_0: entered allmulticast mode [ 843.866050][T10430] bridge_slave_0: entered promiscuous mode [ 843.910756][T10430] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.926436][T10430] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.939064][T10430] bridge_slave_1: entered allmulticast mode [ 843.947549][T10430] bridge_slave_1: entered promiscuous mode [ 843.991955][T10331] Bluetooth: hci0: command tx timeout [ 844.059369][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.089650][T10430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.121074][T10430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.187403][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.235443][T10430] team0: Port device team_slave_0 added [ 844.274928][T10430] team0: Port device team_slave_1 added [ 844.332235][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.376745][T10430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.383969][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.419953][T10430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.433210][T10430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.440153][T10430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.473350][T10430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.522652][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.664062][T10430] hsr_slave_0: entered promiscuous mode [ 844.670954][T10430] hsr_slave_1: entered promiscuous mode [ 844.679150][T10430] debugfs: 'hsr0' already exists in 'hsr' [ 844.688772][T10430] Cannot create hsr debugfs directory [ 844.750807][T10280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 844.783384][T10280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 844.855207][T10280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 844.876850][T10280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 845.058938][ T70] bridge_slave_1: left allmulticast mode [ 845.065864][ T70] bridge_slave_1: left promiscuous mode [ 845.074388][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.085784][ T70] bridge_slave_0: left allmulticast mode [ 845.091570][ T70] bridge_slave_0: left promiscuous mode [ 845.097454][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.550725][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.565907][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.581273][ T70] bond0 (unregistering): Released all slaves [ 845.988886][ T70] hsr_slave_0: left promiscuous mode [ 845.999025][ T70] hsr_slave_1: left promiscuous mode [ 846.005755][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.022478][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.032848][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.040242][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.066719][ T70] veth1_macvtap: left promiscuous mode [ 846.071876][T10331] Bluetooth: hci0: command tx timeout [ 846.075686][ T70] veth0_macvtap: left promiscuous mode [ 846.084626][ T70] veth1_vlan: left promiscuous mode [ 846.090353][ T70] veth0_vlan: left promiscuous mode [ 846.667496][ T70] team0 (unregistering): Port device team_slave_1 removed [ 846.715279][ T70] team0 (unregistering): Port device team_slave_0 removed [ 847.237290][T10280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.356174][T10280] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.382611][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.389753][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.434924][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.442122][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.459150][T10430] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 847.478357][T10430] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 847.495866][T10430] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 847.527984][T10430] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 847.778369][T10430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.815308][T10430] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.856915][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.864122][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.905167][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.912380][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.065593][T10280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.151755][T10331] Bluetooth: hci0: command tx timeout [ 848.184746][T10280] veth0_vlan: entered promiscuous mode [ 848.215578][T10280] veth1_vlan: entered promiscuous mode [ 848.303408][T10280] veth0_macvtap: entered promiscuous mode [ 848.331052][T10280] veth1_macvtap: entered promiscuous mode [ 848.360341][T10280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.390307][T10280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.438305][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.448244][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.466917][T10430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.477876][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.489110][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.647837][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.671676][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.732485][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.747637][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.781961][ T5947] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 850.962142][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 851.009756][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 851.087146][T10430] veth0_vlan: entered promiscuous mode [ 851.102032][ T5947] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 851.268351][ T5947] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 851.779473][T10430] veth1_vlan: entered promiscuous mode [ 851.808831][ T5947] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 851.887872][T10430] veth0_macvtap: entered promiscuous mode [ 852.171683][T10430] veth1_macvtap: entered promiscuous mode [ 852.975961][ T5947] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 853.930216][T10430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.938876][T10618] loop8: detected capacity change from 0 to 2048 [ 854.112898][ T5947] usb 4-1: config 1 interface 0 has no altsetting 0 [ 854.120219][ T5947] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 854.129350][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.166303][T10618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.213589][T10430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.333056][ T6110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.406896][ T6110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.421986][ T5947] usb 4-1: can't set config #1, error -71 [ 854.525588][ T5947] usb 4-1: USB disconnect, device number 2 [ 854.554446][ T6110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.342116][ T6110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.931887][ T30] audit: type=1326 audit(2000000640.700:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 858.216392][ T30] audit: type=1326 audit(2000000640.700:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 858.840363][ T30] audit: type=1326 audit(2000000640.700:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 858.920324][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.961458][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.968189][T10649] random: crng reseeded on system resumption [ 860.122697][ T30] audit: type=1326 audit(2000000640.700:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 860.338801][ T30] audit: type=1326 audit(2000000640.700:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 860.431498][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.439367][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.441625][ T30] audit: type=1326 audit(2000000640.700:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 860.541780][ T30] audit: type=1326 audit(2000000640.700:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 860.924693][ T30] audit: type=1326 audit(2000000640.700:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 861.258300][ T30] audit: type=1326 audit(2000000640.700:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 861.824801][ T30] audit: type=1326 audit(2000000640.700:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10631 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c2b8eec9 code=0x7ffc0000 [ 863.269161][ T2147] IPVS: starting estimator thread 0... [ 864.692654][T10684] IPVS: using max 22 ests per chain, 52800 per kthread [ 865.727782][T10692] loop6: detected capacity change from 0 to 128 [ 868.591607][ T6114] bio_check_eod: 102 callbacks suppressed [ 868.591665][ T6114] kworker/u8:19: attempt to access beyond end of device [ 868.591665][ T6114] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 868.850999][ T6114] kworker/u8:19: attempt to access beyond end of device [ 868.850999][ T6114] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 868.883726][ T6114] kworker/u8:19: attempt to access beyond end of device [ 868.883726][ T6114] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 868.934498][T10711] loop8: detected capacity change from 0 to 1024 [ 868.961515][ T6114] kworker/u8:19: attempt to access beyond end of device [ 868.961515][ T6114] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 868.985024][ T6114] kworker/u8:19: attempt to access beyond end of device [ 868.985024][ T6114] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 869.039638][T10711] EXT4-fs: Ignoring removed i_version option [ 869.063007][ T6114] kworker/u8:19: attempt to access beyond end of device [ 869.063007][ T6114] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 869.114741][T10711] EXT4-fs: inline encryption not supported [ 869.198038][T10711] EXT4-fs (loop8): Test dummy encryption mode enabled [ 869.213748][ T6114] kworker/u8:19: attempt to access beyond end of device [ 869.213748][ T6114] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 869.270719][ T6114] kworker/u8:19: attempt to access beyond end of device [ 869.270719][ T6114] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 869.307121][T10711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.311791][ T6114] kworker/u8:19: attempt to access beyond end of device [ 869.311791][ T6114] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 869.336066][ T6114] kworker/u8:19: attempt to access beyond end of device [ 869.336066][ T6114] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 871.128293][T10741] loop7: detected capacity change from 0 to 512 [ 871.663371][T10739] loop3: detected capacity change from 0 to 512 [ 871.677597][T10741] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 871.708259][T10739] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 871.796270][T10741] EXT4-fs (loop7): orphan cleanup on readonly fs [ 872.006841][T10741] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:516: comm syz.7.852: Block bitmap for bg 0 marked uninitialized [ 872.154654][T10745] loop9: detected capacity change from 0 to 128 [ 872.246814][T10745] omfs: sysblock number (f784317bf884317b) is out of range [ 872.749970][T10741] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 872.970146][T10741] EXT4-fs (loop7): 1 orphan inode deleted [ 873.864302][T10741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 875.529298][ T9513] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.678569][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.685331][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.404333][T10781] Invalid ELF section header size [ 884.415290][ T6941] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.436979][ C0] vcan0: j1939_tp_txtimer: 0xffff888055d39000: tx aborted with unknown reason: -2 [ 884.947849][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055d39000: abort rx timeout. Force session deactivation [ 889.641716][T10823] loop3: detected capacity change from 0 to 128 [ 890.786212][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.799743][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.808565][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.829217][T10823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 890.846531][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.857887][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.126773][T10823] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.169315][ T52] Bluetooth: hci2: command tx timeout [ 893.726559][T10858] loop9: detected capacity change from 0 to 1024 [ 893.846812][T10862] loop6: detected capacity change from 0 to 4096 [ 893.868645][T10862] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 893.930289][T10862] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 893.943136][T10862] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 893.987926][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.221872][ T52] Bluetooth: hci2: command tx timeout [ 896.642194][T10877] loop3: detected capacity change from 0 to 2 [ 896.655235][T10877] jffs2: rp_size unrepresentable [ 897.271467][ T52] Bluetooth: hci2: command tx timeout [ 898.467733][ T5967] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.500803][ T52] Bluetooth: hci2: command tx timeout [ 903.284904][ T5967] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.572471][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 906.466822][T10927] ntfs3(nullb0): Primary boot signature is not NTFS. [ 906.605981][T10927] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 907.226098][T10934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 907.475737][ T5967] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.896394][T10939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.578409][T10826] chnl_net:caif_netlink_parms(): no params data found [ 908.633106][T10940] netlink: 68 bytes leftover after parsing attributes in process `syz.6.895'. [ 908.718831][T10940] netlink: 288 bytes leftover after parsing attributes in process `syz.6.895'. [ 909.565347][T10946] binder: 10938:10946 ioctl 4018620d 0 returned -22 [ 909.632526][ T52] Bluetooth: hci0: connection err: -111 [ 909.854795][ T5967] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.160173][T10961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 911.965051][T10964] loop7: detected capacity change from 0 to 512 [ 911.989157][T10964] EXT4-fs: Ignoring removed oldalloc option [ 912.046567][T10966] loop9: detected capacity change from 0 to 16 [ 912.127716][T10964] EXT4-fs: Mount option(s) incompatible with ext2 [ 912.145401][T10973] loop3: detected capacity change from 0 to 64 [ 912.151801][T10966] erofs (device loop9): mounted with root inode @ nid 36. [ 914.273890][T10983] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 915.180050][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.270071][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.278755][T10826] bridge_slave_0: entered allmulticast mode [ 916.323059][T10826] bridge_slave_0: entered promiscuous mode [ 916.729259][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.753024][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.761173][T10826] bridge_slave_1: entered allmulticast mode [ 916.810985][T10826] bridge_slave_1: entered promiscuous mode [ 918.675094][T11010] loop9: detected capacity change from 0 to 128 [ 918.927575][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.024021][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 919.054379][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 920.107354][T11010] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 920.173192][T11010] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.266440][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.370232][T11023] loop7: detected capacity change from 0 to 64 [ 920.449401][T11023] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 920.449401][T11023] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 922.439709][T11034] ntfs3(nullb0): Primary boot signature is not NTFS. [ 922.449152][T11034] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 922.866344][ T8018] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 924.102456][T10826] team0: Port device team_slave_0 added [ 924.764896][T10826] team0: Port device team_slave_1 added [ 924.945112][ T5967] bridge_slave_1: left allmulticast mode [ 925.151635][ T5967] bridge_slave_1: left promiscuous mode [ 925.431211][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.134909][T11062] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 926.623342][ T5967] bridge_slave_0: left allmulticast mode [ 926.641513][ T5967] bridge_slave_0: left promiscuous mode [ 926.647339][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.719528][T11072] loop7: detected capacity change from 0 to 64 [ 929.099522][T11078] loop9: detected capacity change from 0 to 64 [ 929.117203][T11078] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 929.117203][T11078] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 930.742438][T11091] ntfs3(nullb0): Primary boot signature is not NTFS. [ 930.752887][T11091] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 932.803562][T11099] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 934.488685][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.930'. [ 934.516763][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.930'. [ 935.606112][T11115] loop7: detected capacity change from 0 to 64 [ 935.613606][T11115] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 935.613606][T11115] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 936.317400][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 939.137904][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 939.513174][T11130] ntfs3(nullb0): Primary boot signature is not NTFS. [ 939.521109][T11130] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 939.607272][T11132] ceph: No mds server is up or the cluster is laggy [ 939.614816][ T2147] libceph: connect (1)[c::]:6789 error -101 [ 939.620914][ T2147] libceph: mon0 (1)[c::]:6789 connect error [ 941.119181][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.125589][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.475518][T10331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 943.232010][T11156] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 943.394699][T11160] loop9: detected capacity change from 0 to 64 [ 943.621482][T11160] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 943.621482][T11160] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 944.036386][T11164] ntfs3(nullb0): Primary boot signature is not NTFS. [ 944.046391][T11164] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 945.173599][T11170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.938769][T11171] tipc: Can't bind to reserved service type 0 [ 946.329357][T11176] loop6: detected capacity change from 0 to 128 [ 946.573221][T11176] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 946.971752][T11176] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.566301][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 947.624843][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 947.636516][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 948.003272][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 948.013609][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.294418][T10430] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 948.411716][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 948.411739][ T30] audit: type=1326 audit(2000000731.160:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 948.485212][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.581714][ T30] audit: type=1326 audit(2000000731.160:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 948.632753][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.173479][ T5967] bond0 (unregistering): Released all slaves [ 949.186046][ T30] audit: type=1326 audit(2000000731.160:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 949.234952][T11187] tmpfs: Unknown parameter 'mLave' [ 949.291520][ T30] audit: type=1326 audit(2000000731.160:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 949.360306][ T30] audit: type=1326 audit(2000000731.260:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 949.497020][ T30] audit: type=1326 audit(2000000731.260:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 949.590776][ T30] audit: type=1326 audit(2000000731.390:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea7cfc1785 code=0x7ffc0000 [ 950.044864][ T30] audit: type=1326 audit(2000000731.820:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 950.087680][T10331] Bluetooth: hci5: command tx timeout [ 950.519889][ T30] audit: type=1326 audit(2000000731.930:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 950.543101][ T30] audit: type=1326 audit(2000000731.930:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7cf8eec9 code=0x7ffc0000 [ 950.591857][T11199] loop9: detected capacity change from 0 to 2048 [ 950.612890][T11199] NILFS (loop9): invalid segment: Magic number mismatch [ 950.619829][T11199] NILFS (loop9): trying rollback from an earlier position [ 950.648753][T11199] NILFS (loop9): recovery complete [ 950.675061][T11202] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 952.234254][T10331] Bluetooth: hci5: command tx timeout [ 954.439544][ T5841] Bluetooth: hci5: command tx timeout [ 955.111494][ T5841] Bluetooth: hci7: command 0x1003 tx timeout [ 955.119195][T10331] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 955.189707][T11234] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 957.227843][T10331] Bluetooth: hci5: command tx timeout [ 957.753404][T11239] loop7: detected capacity change from 0 to 1024 [ 957.777197][T11243] loop9: detected capacity change from 0 to 512 [ 957.818445][T11243] EXT4-fs: Ignoring removed oldalloc option [ 957.904845][T11243] EXT4-fs: Mount option(s) incompatible with ext2 [ 958.260297][T11249] loop6: detected capacity change from 0 to 64 [ 958.267750][T11249] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 958.267750][T11249] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 958.562183][T11251] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 959.742274][T11255] ntfs3(nullb0): Primary boot signature is not NTFS. [ 959.751611][T11255] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 960.467502][T11260] loop3: detected capacity change from 0 to 512 [ 960.578473][T11260] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 961.609039][T10331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 961.629771][T10331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 961.647962][T10331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 961.681660][T10331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 961.690829][T10331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 962.107862][ T5967] hsr_slave_0: left promiscuous mode [ 962.307240][T11279] loop6: detected capacity change from 0 to 256 [ 963.877766][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 963.883863][T10331] Bluetooth: hci1: command tx timeout [ 963.894364][ T5967] hsr_slave_1: left promiscuous mode [ 963.900532][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.931521][T11050] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 964.072398][T11279] FAT-fs (loop6): Directory bread(block 64) failed [ 964.078933][T11279] FAT-fs (loop6): Directory bread(block 65) failed [ 964.085551][T11279] FAT-fs (loop6): Directory bread(block 66) failed [ 964.092099][T11279] FAT-fs (loop6): Directory bread(block 67) failed [ 964.099196][T11279] FAT-fs (loop6): Directory bread(block 68) failed [ 964.105727][T11279] FAT-fs (loop6): Directory bread(block 69) failed [ 964.112423][T11279] FAT-fs (loop6): Directory bread(block 70) failed [ 964.118934][T11279] FAT-fs (loop6): Directory bread(block 71) failed [ 964.125546][T11279] FAT-fs (loop6): Directory bread(block 72) failed [ 964.132241][T11279] FAT-fs (loop6): Directory bread(block 73) failed [ 964.181566][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.586099][T11050] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 964.655616][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.830940][T11050] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.843431][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.875759][T11050] usb 10-1: Product: syz [ 964.880079][T11050] usb 10-1: Manufacturer: syz [ 964.915763][T11050] usb 10-1: SerialNumber: syz [ 965.740282][ T5967] veth1_macvtap: left promiscuous mode [ 965.747801][ T5967] veth0_macvtap: left promiscuous mode [ 965.754302][ T5967] veth1_vlan: left promiscuous mode [ 965.759683][ T5967] veth0_vlan: left promiscuous mode [ 965.893361][T11050] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 965.919504][ T5841] Bluetooth: hci1: command tx timeout [ 965.951674][T11050] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 965.966797][T11050] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 965.987847][T11292] loop3: detected capacity change from 0 to 64 [ 965.996424][T11292] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 965.996424][T11292] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 966.461399][T11296] loop6: detected capacity change from 0 to 1024 [ 966.480086][T11296] EXT4-fs: Ignoring removed orlov option [ 967.016873][T11050] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 967.082091][T11297] ntfs3(nullb0): Primary boot signature is not NTFS. [ 967.092763][T11297] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 967.658945][T11296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 967.671517][T11296] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.719706][T11294] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.972: inode has both inline data and extents flags [ 967.818308][T11304] input: syz1 as /devices/virtual/input/input6 [ 968.036178][T11050] usb 10-1: USB disconnect, device number 2 [ 968.092252][ T5841] Bluetooth: hci1: command tx timeout [ 970.151489][T10331] Bluetooth: hci1: command tx timeout [ 971.758212][T11301] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 972.638509][T10430] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 973.883211][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.978'. [ 973.911452][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.978'. [ 975.213405][T11321] loop3: detected capacity change from 0 to 512 [ 975.229662][T11321] EXT4-fs: Ignoring removed oldalloc option [ 975.459340][T11321] EXT4-fs: Mount option(s) incompatible with ext2 [ 976.335457][T11324] loop9: detected capacity change from 0 to 128 [ 976.902899][T11331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 979.279084][T11340] binder: 11338:11340 ioctl 4018620d 0 returned -22 [ 981.059750][T11349] loop7: detected capacity change from 0 to 64 [ 981.337111][T11349] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 981.337111][T11349] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 982.404146][T11354] ntfs3(nullb0): Primary boot signature is not NTFS. [ 982.413815][T11354] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 982.947084][T11357] loop6: detected capacity change from 0 to 64 [ 982.972574][T11357] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 982.972574][T11357] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 982.978553][T11359] loop3: detected capacity change from 0 to 512 [ 982.993839][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.089820][T11359] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.989: inode has both inline data and extents flags [ 983.126705][T11359] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.989: couldn't read orphan inode 15 (err -117) [ 983.172165][T11364] ntfs3(nullb0): Primary boot signature is not NTFS. [ 983.181413][T11364] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 983.803661][T11359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.766205][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 985.766232][ T30] audit: type=1804 audit(2000000767.900:156): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.989" name="/newroot/209/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 986.094269][ T30] audit: type=1800 audit(2000000767.900:157): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.989" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 986.176234][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.524724][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 986.664891][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 986.796891][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 989.257266][T11387] overlayfs: missing 'lowerdir' [ 989.263324][T11381] ceph: No mds server is up or the cluster is laggy [ 989.269289][ T9004] libceph: connect (1)[c::]:6789 error -101 [ 989.320567][ T9004] libceph: mon0 (1)[c::]:6789 connect error [ 989.751787][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 990.068845][T11391] loop6: detected capacity change from 0 to 512 [ 990.107197][T11391] EXT4-fs: Ignoring removed oldalloc option [ 990.193539][T11391] EXT4-fs: Mount option(s) incompatible with ext2 [ 990.330233][T11393] loop7: detected capacity change from 0 to 128 [ 991.754143][T11398] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 991.762168][T11398] FAT-fs (loop7): Filesystem has been set read-only [ 991.772888][T11398] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 992.461274][T11401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 993.549577][T11409] overlayfs: missing 'lowerdir' [ 994.795463][T11413] loop7: detected capacity change from 0 to 128 [ 994.844181][T11415] loop3: detected capacity change from 0 to 64 [ 994.855233][T11415] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 994.855233][T11415] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 994.876940][T11413] EXT4-fs warning (device loop7): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 994.907705][T11413] EXT4-fs (loop7): Encoding requested by superblock is unknown [ 995.033306][T11418] ntfs3(nullb0): Primary boot signature is not NTFS. [ 995.044221][T11418] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 996.121998][T11417] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 998.220906][T10331] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 998.225410][T11433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 998.724741][T11432] loop6: detected capacity change from 0 to 1024 [ 999.891175][T11180] chnl_net:caif_netlink_parms(): no params data found [ 1000.050497][ T5967] IPVS: stop unused estimator thread 0... [ 1000.285036][ T5967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.311138][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.320139][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.327958][T11180] bridge_slave_0: entered allmulticast mode [ 1000.337726][T11180] bridge_slave_0: entered promiscuous mode [ 1000.360698][T11264] chnl_net:caif_netlink_parms(): no params data found [ 1000.384538][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.392557][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.399791][T11180] bridge_slave_1: entered allmulticast mode [ 1000.408848][T11180] bridge_slave_1: entered promiscuous mode [ 1000.461464][ T5967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.517023][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.580530][ T5967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.599703][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.664948][T11180] team0: Port device team_slave_0 added [ 1000.697128][T11180] team0: Port device team_slave_1 added [ 1000.724088][ T5967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.844248][T11264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.854126][T11264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.862969][T11264] bridge_slave_0: entered allmulticast mode [ 1000.871129][T11264] bridge_slave_0: entered promiscuous mode [ 1000.899711][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.906973][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.943136][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.966099][T11264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.977896][T11264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.988623][T11264] bridge_slave_1: entered allmulticast mode [ 1000.997366][T11264] bridge_slave_1: entered promiscuous mode [ 1001.006419][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.014034][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.045020][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.149995][T11264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.169834][T11264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.298342][T11180] hsr_slave_0: entered promiscuous mode [ 1001.305330][T11180] hsr_slave_1: entered promiscuous mode [ 1001.312145][T11180] debugfs: 'hsr0' already exists in 'hsr' [ 1001.317893][T11180] Cannot create hsr debugfs directory [ 1001.327291][T11264] team0: Port device team_slave_0 added [ 1001.337339][T11264] team0: Port device team_slave_1 added [ 1001.362794][ T5967] bridge_slave_1: left allmulticast mode [ 1001.368478][ T5967] bridge_slave_1: left promiscuous mode [ 1001.376374][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.386266][ T5967] bridge_slave_0: left allmulticast mode [ 1001.401163][ T5967] bridge_slave_0: left promiscuous mode [ 1001.409591][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.422444][ T5967] bridge_slave_1: left allmulticast mode [ 1001.428916][ T5967] bridge_slave_1: left promiscuous mode [ 1001.435541][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.446513][ T5967] bridge_slave_0: left allmulticast mode [ 1001.455289][ T5967] bridge_slave_0: left promiscuous mode [ 1001.461063][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.663535][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.680606][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.692537][ T5967] bond0 (unregistering): Released all slaves [ 1002.020435][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.032531][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.043707][ T5967] bond0 (unregistering): Released all slaves [ 1002.184639][T11264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.197260][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.234948][T11264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.261629][T11264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.268602][T11264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.296267][T11264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.505069][T11264] hsr_slave_0: entered promiscuous mode [ 1002.511992][T11264] hsr_slave_1: entered promiscuous mode [ 1002.518463][T11264] debugfs: 'hsr0' already exists in 'hsr' [ 1002.526656][T11264] Cannot create hsr debugfs directory [ 1002.560781][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.567453][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.728987][ T5967] hsr_slave_0: left promiscuous mode [ 1002.747757][ T5967] hsr_slave_1: left promiscuous mode [ 1002.755302][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.771764][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.780151][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.801508][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.840199][ T5967] veth1_macvtap: left promiscuous mode [ 1002.862141][ T5967] veth0_macvtap: left promiscuous mode [ 1002.872548][ T5967] veth1_vlan: left promiscuous mode [ 1002.878121][ T5967] veth0_vlan: left promiscuous mode [ 1003.099827][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 1003.153446][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 1003.565508][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.578385][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.595504][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.605406][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.614544][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.788892][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 1003.831704][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 1005.099166][T11507] chnl_net:caif_netlink_parms(): no params data found [ 1005.328632][T11507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.337197][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.346848][T11507] bridge_slave_0: entered allmulticast mode [ 1005.357164][T11507] bridge_slave_0: entered promiscuous mode [ 1005.384468][T11507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.392013][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.399203][T11507] bridge_slave_1: entered allmulticast mode [ 1005.407895][T11507] bridge_slave_1: entered promiscuous mode [ 1005.415964][ T5967] bridge_slave_1: left allmulticast mode [ 1005.425935][ T5967] bridge_slave_1: left promiscuous mode [ 1005.434955][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.445878][ T5967] bridge_slave_0: left allmulticast mode [ 1005.451653][ T5967] bridge_slave_0: left promiscuous mode [ 1005.457494][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.598797][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.623802][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.635383][ T5967] bond0 (unregistering): Released all slaves [ 1005.674937][T10331] Bluetooth: hci2: command tx timeout [ 1005.757894][T11507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.775932][ T5967] hsr_slave_0: left promiscuous mode [ 1005.783142][ T5967] hsr_slave_1: left promiscuous mode [ 1005.789269][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.797233][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.015793][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 1006.053536][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 1006.311086][T11507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.431307][T11264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1006.455178][T11264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1006.468082][T11507] team0: Port device team_slave_0 added [ 1006.478037][T11507] team0: Port device team_slave_1 added [ 1006.518902][T11264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1006.539111][T11264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1006.602961][T11507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.610436][T11507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.649443][T11507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.676281][T11507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.684009][T11507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.715374][T11507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.833226][T11507] hsr_slave_0: entered promiscuous mode [ 1006.840048][T11507] hsr_slave_1: entered promiscuous mode [ 1006.847274][T11507] debugfs: 'hsr0' already exists in 'hsr' [ 1006.853641][T11507] Cannot create hsr debugfs directory [ 1006.989198][T11264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.043032][T11264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.109759][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.116981][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.142325][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.149501][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.724209][T11507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1007.751897][T10331] Bluetooth: hci2: command tx timeout [ 1007.788675][T11507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1007.840594][T11264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.847840][T11507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1007.870759][T11507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1008.034718][T11507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.061042][T11507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.078480][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.085673][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.120562][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.127759][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.493746][T11264] veth0_vlan: entered promiscuous mode [ 1008.524552][T11264] veth1_vlan: entered promiscuous mode [ 1008.615020][T11264] veth0_macvtap: entered promiscuous mode [ 1008.626695][T11264] veth1_macvtap: entered promiscuous mode [ 1008.668220][T11264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.691153][T11264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.751229][ T5955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.786507][T11507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.807561][ T5955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.841612][ T5955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.864912][ T5955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.998982][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.009380][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.085395][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.098665][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.053349][T11640] loop7: detected capacity change from 0 to 512 [ 1010.290913][T10331] Bluetooth: hci2: command tx timeout [ 1011.251735][T11646] usb usb1: check_ctrlrecip: process 11646 (syz.3.1019) requesting ep 01 but needs 81 [ 1011.262390][T11646] usb usb1: usbfs: process 11646 (syz.3.1019) did not claim interface 0 before use [ 1012.311944][T10331] Bluetooth: hci2: command tx timeout [ 1012.792947][ C1] ------------[ cut here ]------------ [ 1012.798796][ C1] ODEBUG: free active (active state 0) object: ffff88806c654890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1012.812679][ C1] WARNING: CPU: 1 PID: 11637 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1012.822290][ C1] Modules linked in: [ 1012.826482][ C1] CPU: 1 UID: 0 PID: 11637 Comm: syz.9.1018 Not tainted syzkaller #0 PREEMPT(full) [ 1012.835900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1012.846013][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1012.851888][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 fa f1 8b 4c 89 e6 48 c7 c7 a0 ee f1 8b e8 6f b2 c9 fc 90 <0f> 0b 90 90 58 83 05 56 e7 d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1012.871547][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1012.877637][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 1012.885644][ C1] RDX: ffff8880343ddac0 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1012.893657][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1012.901668][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f540 [ 1012.909666][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a516c30 R15: ffffc90000a08b18 [ 1012.917689][ C1] FS: 00007fb8b1b126c0(0000) GS:ffff888124adc000(0000) knlGS:0000000000000000 [ 1012.926662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1012.933282][ C1] CR2: 0000001b30217ff8 CR3: 000000005f832000 CR4: 0000000000350ef0 [ 1012.941267][ C1] Call Trace: [ 1012.944577][ C1] [ 1012.947423][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1012.953118][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1012.958965][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1012.964653][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1012.970255][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1012.976409][ C1] kfree+0x291/0x6d0 [ 1012.980348][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1012.985532][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1012.990679][ C1] rose_timer_expiry+0x53f/0x630 [ 1012.995679][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1013.001175][ C1] call_timer_fn+0x19a/0x620 [ 1013.005827][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1013.010972][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.016683][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.022371][ C1] ? mark_held_locks+0x49/0x80 [ 1013.027176][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1013.032698][ C1] __run_timers+0x6ef/0x960 [ 1013.037249][ C1] ? __pfx___run_timers+0x10/0x10 [ 1013.042335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.048026][ C1] run_timer_base+0x114/0x190 [ 1013.052759][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1013.057987][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.063680][ C1] run_timer_softirq+0x1a/0x40 [ 1013.068472][ C1] handle_softirqs+0x219/0x8e0 [ 1013.073324][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1013.078655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.084342][ C1] __irq_exit_rcu+0x109/0x170 [ 1013.089065][ C1] irq_exit_rcu+0x9/0x30 [ 1013.093343][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1013.099020][ C1] [ 1013.101979][ C1] [ 1013.104916][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1013.110921][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1013.116174][ C1] Code: 37 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 58 ea 0e 0f 82 74 02 00 00 8b 35 fa 88 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 36 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 1013.135939][ C1] RSP: 0018:ffffc90003faf650 EFLAGS: 00000206 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1013.136110][T11650] overlayfs: missing 'lowerdir' [ 1013.142057][ C1] RAX: 0000000000000046 RBX: ffffffff8e290c40 RCX: 00000000ffce192d [ 1013.142102][ C1] RDX: 0000000000000000 RSI: ffffffff8dadca01 RDI: ffffffff8bf1e940 [ 1013.142128][ C1] RBP: 0000000000000000 R08: 5a638b1d2248410d R09: 0000000000000000 [ 1013.142153][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 1013.142179][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1013.142246][ C1] schedule+0x21c/0x3a0 [ 1013.191185][ C1] ? schedule+0x1fd/0x3a0 [ 1013.195593][ C1] schedule_timeout+0x257/0x290 [ 1013.200489][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1013.205955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.211669][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 1013.217439][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.223166][ C1] unix_wait_for_peer+0x24e/0x280 [ 1013.228236][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1013.233866][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1013.239987][ C1] unix_dgram_sendmsg+0x1419/0x17f0 [ 1013.245273][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1013.250868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.256583][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.262274][ C1] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1013.268407][ C1] ____sys_sendmsg+0xa98/0xc70 [ 1013.273250][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.278919][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 1013.284468][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1013.289787][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.295492][ C1] ? kfree+0x252/0x6d0 [ 1013.299618][ C1] ___sys_sendmsg+0x134/0x1d0 [ 1013.304368][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.309668][ C1] ? __pfx___might_resched+0x10/0x10 [ 1013.315046][ C1] __sys_sendmmsg+0x200/0x420 [ 1013.319776][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1013.325042][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 1013.330294][ C1] ? __pfx_do_futex+0x10/0x10 [ 1013.335050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.340747][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.346436][ C1] ? xfd_validate_state+0x61/0x180 [ 1013.351648][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 1013.356629][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.362319][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1013.367570][ C1] do_syscall_64+0xcd/0xfa0 [ 1013.372163][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.378083][ C1] RIP: 0033:0x7fb8b0b8eec9 [ 1013.382563][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.402230][ C1] RSP: 002b:00007fb8b1b12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1013.410677][ C1] RAX: ffffffffffffffda RBX: 00007fb8b0de5fa0 RCX: 00007fb8b0b8eec9 [ 1013.418714][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 1013.426731][ C1] RBP: 00007fb8b0c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.434771][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.442788][ C1] R13: 00007fb8b0de6038 R14: 00007fb8b0de5fa0 R15: 00007ffde36659b8 [ 1013.450817][ C1] [ 1013.453893][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1013.461185][ C1] CPU: 1 UID: 0 PID: 11637 Comm: syz.9.1018 Not tainted syzkaller #0 PREEMPT(full) [ 1013.470584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1013.480664][ C1] Call Trace: [ 1013.483950][ C1] [ 1013.486806][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1013.491445][ C1] vpanic+0x640/0x6f0 [ 1013.495485][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1013.500716][ C1] panic+0xca/0xd0 [ 1013.504477][ C1] ? __pfx_panic+0x10/0x10 [ 1013.508945][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 1013.514092][ C1] check_panic_on_warn+0xab/0xb0 [ 1013.519076][ C1] __warn+0xf6/0x3c0 [ 1013.523008][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1013.528679][ C1] report_bug+0x3c3/0x580 [ 1013.533051][ C1] ? debug_print_object+0x1a2/0x2b0 [ 1013.538284][ C1] handle_bug+0x184/0x210 [ 1013.542638][ C1] exc_invalid_op+0x17/0x50 [ 1013.547169][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1013.552042][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1013.557879][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 fa f1 8b 4c 89 e6 48 c7 c7 a0 ee f1 8b e8 6f b2 c9 fc 90 <0f> 0b 90 90 58 83 05 56 e7 d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1013.577515][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 1013.583606][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 1013.591679][ C1] RDX: ffff8880343ddac0 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1013.599667][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1013.607653][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f540 [ 1013.615653][ C1] R13: ffffffff8b901fe0 R14: ffffffff8a516c30 R15: ffffc90000a08b18 [ 1013.623637][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1013.629303][ C1] ? __warn_printk+0x198/0x350 [ 1013.634083][ C1] ? __warn_printk+0x1a5/0x350 [ 1013.638868][ C1] ? debug_print_object+0x1a1/0x2b0 [ 1013.644078][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1013.649722][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1013.655555][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.661216][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 1013.666802][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1013.672919][ C1] kfree+0x291/0x6d0 [ 1013.676843][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1013.681987][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1013.687120][ C1] rose_timer_expiry+0x53f/0x630 [ 1013.692085][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1013.697564][ C1] call_timer_fn+0x19a/0x620 [ 1013.702181][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1013.707308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.712966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.718611][ C1] ? mark_held_locks+0x49/0x80 [ 1013.723393][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1013.728885][ C1] __run_timers+0x6ef/0x960 [ 1013.733418][ C1] ? __pfx___run_timers+0x10/0x10 [ 1013.738484][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.744157][ C1] run_timer_base+0x114/0x190 [ 1013.748851][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1013.754067][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.759720][ C1] run_timer_softirq+0x1a/0x40 [ 1013.764514][ C1] handle_softirqs+0x219/0x8e0 [ 1013.769321][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1013.774636][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.780296][ C1] __irq_exit_rcu+0x109/0x170 [ 1013.785004][ C1] irq_exit_rcu+0x9/0x30 [ 1013.789253][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1013.794913][ C1] [ 1013.797838][ C1] [ 1013.800765][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1013.806757][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1013.811974][ C1] Code: 37 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 a2 58 ea 0e 0f 82 74 02 00 00 8b 35 fa 88 ea 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 36 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 1013.831609][ C1] RSP: 0018:ffffc90003faf650 EFLAGS: 00000206 [ 1013.837711][ C1] RAX: 0000000000000046 RBX: ffffffff8e290c40 RCX: 00000000ffce192d [ 1013.845696][ C1] RDX: 0000000000000000 RSI: ffffffff8dadca01 RDI: ffffffff8bf1e940 [ 1013.853678][ C1] RBP: 0000000000000000 R08: 5a638b1d2248410d R09: 0000000000000000 [ 1013.861654][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 1013.869629][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1013.877649][ C1] schedule+0x21c/0x3a0 [ 1013.881837][ C1] ? schedule+0x1fd/0x3a0 [ 1013.886193][ C1] schedule_timeout+0x257/0x290 [ 1013.891057][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1013.896462][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.902113][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 1013.907848][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.913504][ C1] unix_wait_for_peer+0x24e/0x280 [ 1013.918551][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1013.924126][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1013.930225][ C1] unix_dgram_sendmsg+0x1419/0x17f0 [ 1013.935464][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1013.941055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.946711][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.952366][ C1] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1013.958486][ C1] ____sys_sendmsg+0xa98/0xc70 [ 1013.963266][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.968912][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 1013.974402][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1013.979711][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1013.985355][ C1] ? kfree+0x252/0x6d0 [ 1013.989467][ C1] ___sys_sendmsg+0x134/0x1d0 [ 1013.994172][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.999442][ C1] ? __pfx___might_resched+0x10/0x10 [ 1014.004776][ C1] __sys_sendmmsg+0x200/0x420 [ 1014.009544][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1014.014787][ C1] ? unix_dgram_connect+0x4e5/0xc80 [ 1014.020027][ C1] ? __pfx_do_futex+0x10/0x10 [ 1014.024725][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.030452][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.036098][ C1] ? xfd_validate_state+0x61/0x180 [ 1014.041232][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 1014.046202][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.051849][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.057079][ C1] do_syscall_64+0xcd/0xfa0 [ 1014.061617][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.067523][ C1] RIP: 0033:0x7fb8b0b8eec9 [ 1014.071944][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.091583][ C1] RSP: 002b:00007fb8b1b12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1014.100012][ C1] RAX: ffffffffffffffda RBX: 00007fb8b0de5fa0 RCX: 00007fb8b0b8eec9 [ 1014.107986][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 1014.115960][ C1] RBP: 00007fb8b0c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1014.123930][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.131902][ C1] R13: 00007fb8b0de6038 R14: 00007fb8b0de5fa0 R15: 00007ffde36659b8 [ 1014.139902][ C1] [ 1014.143129][ C1] Kernel Offset: disabled [ 1014.147447][ C1] Rebooting in 86400 seconds..