last executing test programs: 6m45.25220072s ago: executing program 4 (id=29): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) rt_sigaction(0x40, &(0x7f00000027c0)={0x0, 0x1, 0x0, {[0xab8]}}, 0x0, 0x8, &(0x7f00000028c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x9, 0x0) 6m44.020393819s ago: executing program 4 (id=32): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1c4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3a42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0xff) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 6m42.564539342s ago: executing program 4 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x3, 0x4}) 6m42.231555357s ago: executing program 4 (id=38): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) 6m41.250972533s ago: executing program 4 (id=40): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) getpid() 6m39.898769744s ago: executing program 4 (id=41): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x801, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(r0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x149) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r0, 0x2, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000525000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r7, 0xcbd1000) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f00000012c0)='./file0/file0\x00', 0x2080d0, &(0x7f0000000200)=ANY=[], 0x1, 0x1508, &(0x7f0000003000)="$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") bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 6m24.194964029s ago: executing program 32 (id=41): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x801, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(r0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x149) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r0, 0x2, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000525000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r7, 0xcbd1000) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f00000012c0)='./file0/file0\x00', 0x2080d0, &(0x7f0000000200)=ANY=[], 0x1, 0x1508, &(0x7f0000003000)="$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") bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 5m1.286692237s ago: executing program 0 (id=282): pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf25030000005400018038000400140001000200ce7c20e40001000000000000000020000200e9ff4d21fffffffc00000000000000000000ffffac14140bde030000170001006574683a6261746164765f736c6176655f310000300001802c0004001400010002004e200000000000000000000000001400020002004e227f00000100000000000000000c0002800800020001000000240006800400020004000500080006002400000008000100780400000800010024cb00001c000580080001007564700008000100756470000700010069620000"], 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x24044001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x0, 0x1, 0xfffffffb, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f0000000180)={0x200000, 0x0, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4m56.583958031s ago: executing program 0 (id=292): syz_emit_ethernet(0x1da, &(0x7f0000000780)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x1a4, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff, 0x9, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}}}}}}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r2}, 0x38) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 4m55.818519392s ago: executing program 0 (id=294): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0300000000000000000000011000000380000000000000000000000300"], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003000)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {&(0x7f0000002480)=""/95, 0x5f}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/203, 0xcb}], 0xa}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b00)=""/87, 0x57}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x6, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)={r7, r8+10000000}) sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008c90, &(0x7f0000003080)=ANY=[@ANYBLOB="64ff74732c60088e9405fc0fb433690d46a8646f74732c646f74724e52c62b0e646f0b6439a007d77423732c6e6f646f74732c646f"], 0x0, 0x200, &(0x7f00000000c0)="$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") 4m54.285852047s ago: executing program 0 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4m54.04256332s ago: executing program 0 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tgkill(0x0, 0x0, 0x21) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) open$dir(&(0x7f0000000240)='./file3\x00', 0x20040, 0x40) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m51.690253497s ago: executing program 0 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e000368"], 0x44}}, 0x20000010) r6 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x2038) lseek(r6, 0x5, 0x1) r7 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m35.319664284s ago: executing program 33 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0200000000000200240012800b00010065727370616e000014000280050016000000000006000e000368"], 0x44}}, 0x20000010) r6 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00') read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x2038) lseek(r6, 0x5, 0x1) r7 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.49259923s ago: executing program 5 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19.141471685s ago: executing program 5 (id=941): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x0, 0x3) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r7, 0xffffffffffffffff, 0x0, 0x7ffff004) 16.599921475s ago: executing program 3 (id=945): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xe8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x82, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x48}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 12.617615896s ago: executing program 3 (id=954): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 9.916106958s ago: executing program 6 (id=958): open(0x0, 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) getpid() 9.12927925s ago: executing program 1 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x0) 9.09173273s ago: executing program 2 (id=961): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) 8.030456566s ago: executing program 1 (id=962): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'pimreg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x8000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x12003, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 8.029749637s ago: executing program 6 (id=963): mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x8, 0xc, 0x7}, {0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2749dcb7db3981e2}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x7fff, 0xa, 0x5, 0x8506, 0x200000, 0xfffffffb, 0x8, 0x6, 0xfffffffe, 0xfffffff8, 0x8e, 0x3, 0x9, 0x80, 0x4, 0x0, 0x1, 0x4, 0x8001, 0xb7, 0x1, 0x401, 0x7fff, 0x80000000, 0x1, 0x7, 0x7, 0x5, 0x7, 0xfffffffd, 0x3, 0x3, 0x6, 0x1, 0xaf7b, 0x6, 0x0, 0x7, 0x9, 0x109, 0x7, 0x822, 0x1, 0x7, 0xce, 0x80, 0x2005, 0x1698, 0x8, 0x10002, 0x8000001, 0x6, 0x1, 0x200, 0xffffffff, 0x0, 0x5, 0x9, 0x2, 0x1, 0x1a, 0x72a5cdfe, 0x5ca, 0x0, 0xd4, 0x4, 0x2, 0x1, 0x3, 0x1, 0x7fff, 0x9, 0xf146d1c, 0x800, 0x4, 0x4, 0x0, 0x3, 0x8, 0x80000001, 0x1000, 0x1, 0xb27, 0x900, 0x9, 0x5, 0x20000000, 0xffff, 0x0, 0x2, 0x3, 0x9, 0x2, 0x3b4, 0x0, 0xffffffff, 0x5, 0xffff, 0x2, 0xbffffd, 0x1, 0x3ff, 0xffffffff, 0x4, 0x7, 0x6, 0x80000000, 0x40, 0x4, 0x2, 0x9, 0x10f, 0x6, 0x6, 0x1901e503, 0x2, 0x2, 0x5, 0x2, 0x7, 0x0, 0x2, 0x1, 0x410, 0x0, 0x621, 0xf8, 0x8001, 0x8, 0x9, 0xfff, 0x2, 0x207ff, 0x54, 0x6, 0x1ff, 0x9, 0x40, 0xd08d, 0x400, 0x7, 0x6, 0x3, 0xc70, 0x4638, 0x8, 0x99, 0x8, 0x4, 0x7, 0xbe, 0xfffffff7, 0x4, 0x8, 0xfffffff9, 0x8000, 0x401, 0xe09d, 0x0, 0x3, 0x4000006, 0xb3, 0x8, 0xd40b, 0x27, 0x9, 0x8, 0x1, 0xfffff801, 0x3, 0x50d1, 0x8, 0x6, 0x10, 0x6, 0x9, 0x3, 0x3, 0xae, 0x1, 0x9, 0x4f73, 0xf69, 0x8, 0xffffffe8, 0x7, 0x1, 0x3ff, 0x9, 0x671, 0x3ff, 0x8, 0x8, 0x0, 0xbd, 0x1, 0x4, 0x5, 0x3, 0x9, 0xfffffff7, 0x3, 0x2, 0x0, 0x80001, 0x526a, 0x7, 0x5, 0x6, 0x3, 0x3a440, 0x7fff, 0x89, 0x0, 0x3d8, 0x4, 0x8, 0x1, 0x9, 0xdb, 0x81, 0x6, 0x2, 0xfffffffd, 0x5, 0x200, 0xfffffffd, 0xfff, 0x6, 0x5, 0x7, 0x9, 0x5, 0x7, 0x7fffffff, 0x372f5507, 0xd51, 0x10001, 0x7, 0x7f, 0x8, 0xe, 0x7, 0x40001, 0xfff, 0x9, 0x401, 0x40000000, 0x7, 0x0, 0x6, 0x6, 0x40, 0x4, 0x600000]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x404}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002b80)=ANY=[], 0x0) r5 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='\xd0\x9e^\xa0\xee\xc8\x17T\xcdGI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1X\xd0\fCg(\xaelJ\xdf\xab\x87', &(0x7f00000006c0)='sockfs\x00\x05\xb1\xf5\xecx\xdd\x1b;\xa2+\x86\xfb\x97\x147\xa6\x97\x84l\x81qn\x9e\xa2\xed^+\xef4\xf1\xac\x15\xa7\f\xfe\x80\xbb\xba\nM~\xf6\xb4vy\xf1\xf4\r\x8d\x94\xeb)1.P\xfb\xa4\xa5\x9e\xe62\xae\x92\x93X \x0eT\f\x8dD\x02\x02pT\xae\xe9\xa9`3\xe0\xd9Z`\xf0\x92 \xe0_>\xdd\xfa\xd3R\x93%\xe3\xe6\xd6\xf6\xfdkw\x13\xb9\x8ai\xed\xc29\x93\xb2\xd0\x1a\x06\x9dP\xc1 \n\xc8\x04B\x03\x99C\x04=\xc0\xe2', 0x0) read(r5, 0x0, 0x0) 8.028722996s ago: executing program 2 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 7.84221116s ago: executing program 3 (id=965): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1fd, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, 0x0, &(0x7f0000000880)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6.561439429s ago: executing program 1 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f0000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0xfc, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000073010d00000000009500000000000000f1be3631f6cdf4d7dfcd4dcc35dfd6d736146d9e6126c50a8876"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 5.8570106s ago: executing program 2 (id=967): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) setreuid(0xee01, 0x0) 5.84147825s ago: executing program 3 (id=968): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x1, 0x122e, &(0x7f0000002580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 4.962336494s ago: executing program 6 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x14, r1, 0x601}, 0x14}}, 0xc000) 4.828132616s ago: executing program 2 (id=970): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socket(0x840000000002, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 4.827739226s ago: executing program 5 (id=971): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) getpid() 3.90795961s ago: executing program 6 (id=972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x0) 3.816592512s ago: executing program 1 (id=973): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xe8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), 0x0, 0x0, 0x82, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x48}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 3.188376601s ago: executing program 6 (id=974): open(0x0, 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) getpid() 2.434954333s ago: executing program 5 (id=975): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 2.379137194s ago: executing program 1 (id=976): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f0000000040), 0x8) 1.565274326s ago: executing program 6 (id=977): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0xfd, 0x2ae, &(0x7f0000000840)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x80004001}], 0x1, 0x22, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='_H', 0x2}], 0x1}}], 0x2, 0xc8000) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.476797108s ago: executing program 2 (id=978): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 1.2942877s ago: executing program 5 (id=979): mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x2, 0x8, 0xc, 0x7}, {0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x2749dcb7db3981e2}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x7fff, 0xa, 0x5, 0x8506, 0x200000, 0xfffffffb, 0x8, 0x6, 0xfffffffe, 0xfffffff8, 0x8e, 0x3, 0x9, 0x80, 0x4, 0x0, 0x1, 0x4, 0x8001, 0xb7, 0x1, 0x401, 0x7fff, 0x80000000, 0x1, 0x7, 0x7, 0x5, 0x7, 0xfffffffd, 0x3, 0x3, 0x6, 0x1, 0xaf7b, 0x6, 0x0, 0x7, 0x9, 0x109, 0x7, 0x822, 0x1, 0x7, 0xce, 0x80, 0x2005, 0x1698, 0x8, 0x10002, 0x8000001, 0x6, 0x1, 0x200, 0xffffffff, 0x0, 0x5, 0x9, 0x2, 0x1, 0x1a, 0x72a5cdfe, 0x5ca, 0x0, 0xd4, 0x4, 0x2, 0x1, 0x3, 0x1, 0x7fff, 0x9, 0xf146d1c, 0x800, 0x4, 0x4, 0x0, 0x3, 0x8, 0x80000001, 0x1000, 0x1, 0xb27, 0x900, 0x9, 0x5, 0x20000000, 0xffff, 0x0, 0x2, 0x3, 0x9, 0x2, 0x3b4, 0x0, 0xffffffff, 0x5, 0xffff, 0x2, 0xbffffd, 0x1, 0x3ff, 0xffffffff, 0x4, 0x7, 0x6, 0x80000000, 0x40, 0x4, 0x2, 0x9, 0x10f, 0x6, 0x6, 0x1901e503, 0x2, 0x2, 0x5, 0x2, 0x7, 0x0, 0x2, 0x1, 0x410, 0x0, 0x621, 0xf8, 0x8001, 0x8, 0x9, 0xfff, 0x2, 0x207ff, 0x54, 0x6, 0x1ff, 0x9, 0x40, 0xd08d, 0x400, 0x7, 0x6, 0x3, 0xc70, 0x4638, 0x8, 0x99, 0x8, 0x4, 0x7, 0xbe, 0xfffffff7, 0x4, 0x8, 0xfffffff9, 0x8000, 0x401, 0xe09d, 0x0, 0x3, 0x4000006, 0xb3, 0x8, 0xd40b, 0x27, 0x9, 0x8, 0x1, 0xfffff801, 0x3, 0x50d1, 0x8, 0x6, 0x10, 0x6, 0x9, 0x3, 0x3, 0xae, 0x1, 0x9, 0x4f73, 0xf69, 0x8, 0xffffffe8, 0x7, 0x1, 0x3ff, 0x9, 0x671, 0x3ff, 0x8, 0x8, 0x0, 0xbd, 0x1, 0x4, 0x5, 0x3, 0x9, 0xfffffff7, 0x3, 0x2, 0x0, 0x80001, 0x526a, 0x7, 0x5, 0x6, 0x3, 0x3a440, 0x7fff, 0x89, 0x0, 0x3d8, 0x4, 0x8, 0x1, 0x9, 0xdb, 0x81, 0x6, 0x2, 0xfffffffd, 0x5, 0x200, 0xfffffffd, 0xfff, 0x6, 0x5, 0x7, 0x9, 0x5, 0x7, 0x7fffffff, 0x372f5507, 0xd51, 0x10001, 0x7, 0x7f, 0x8, 0xe, 0x7, 0x40001, 0xfff, 0x9, 0x401, 0x40000000, 0x7, 0x0, 0x6, 0x6, 0x40, 0x4, 0x600000]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x404}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002b80)=ANY=[], 0x0) r5 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000480)='\xd0\x9e^\xa0\xee\xc8\x17T\xcdGI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1X\xd0\fCg(\xaelJ\xdf\xab\x87', &(0x7f00000006c0)='sockfs\x00\x05\xb1\xf5\xecx\xdd\x1b;\xa2+\x86\xfb\x97\x147\xa6\x97\x84l\x81qn\x9e\xa2\xed^+\xef4\xf1\xac\x15\xa7\f\xfe\x80\xbb\xba\nM~\xf6\xb4vy\xf1\xf4\r\x8d\x94\xeb)1.P\xfb\xa4\xa5\x9e\xe62\xae\x92\x93X \x0eT\f\x8dD\x02\x02pT\xae\xe9\xa9`3\xe0\xd9Z`\xf0\x92 \xe0_>\xdd\xfa\xd3R\x93%\xe3\xe6\xd6\xf6\xfdkw\x13\xb9\x8ai\xed\xc29\x93\xb2\xd0\x1a\x06\x9dP\xc1 \n\xc8\x04B\x03\x99C\x04=\xc0\xe2', 0x0) read(r5, 0x0, 0x0) 1.27699026s ago: executing program 3 (id=980): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 970.231865ms ago: executing program 2 (id=981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 147.572868ms ago: executing program 5 (id=982): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x2, 0x20, 0x11, 0x1b, 0x9, 0x61, 0x4, 0xb5, 0xfffffffffffffffd}) 103.425469ms ago: executing program 3 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x14, r1, 0x601}, 0x14}}, 0xc000) 0s ago: executing program 1 (id=984): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000500)="95c58af109efe20b1be1c498e203211790d56b668509f132e381aa3798ead477a79d8a42eaeb4fe175d90f7f55cdc98f043fa6e5f664500f9fdf50aaa4527a6861344d90908a334b5164196f645ea32bd6d49f56660771d1f06a1e82396e01d8c761e40f1d2b16b10fbfb8b082b1347b260eba924ca4da449045861f83eb1c0e333b1d7d2207b19d7d6545deb902d78319717419a748f29a5906a5ec989376742db458b4f902c6000f53ad341bcbc960eb89e7ea7a27e769200550ae512348b2b0273f69", 0xc4, 0x6, 0x0, 0xaa05aaaa330da95}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000600)="ca879eb49e1e464902a92d4ab5735ae16a25c512d5563e6e33a574d557c2a59a46b14482ee1688bea0d071d373c34aee56353ef980d9a8a7a67335e3c05aa6c11460", 0x42, 0x7, 0x0, 0x1}]) syz_fuse_handle_req(r3, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r5, 0x40480923, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() pselect6(0x40, &(0x7f0000000280)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): ] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.513401][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 183.580083][ T5397] loop5: detected capacity change from 0 to 512 [ 183.660654][ T5397] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 183.693309][ T5397] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.095251][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 188.548141][ T5458] loop2: detected capacity change from 0 to 1024 [ 188.551386][ T5458] EXT4-fs: Ignoring removed i_version option [ 188.838058][ T5458] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.258: Invalid block bitmap block 0 in block_group 0 [ 188.843599][ T5458] Quota error (device loop2): write_blk: dquota write failed [ 188.843902][ T5458] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 188.844215][ T5458] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.258: Failed to acquire dquot type 0 [ 188.849325][ T5458] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.258: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.856244][ T5458] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.258: Invalid inode bitmap blk 0 in block_group 0 [ 188.859170][ T5458] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 188.860593][ T5458] EXT4-fs (loop2): 1 orphan inode deleted [ 188.860722][ T5458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.869705][ T9] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 188.870457][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0 [ 188.888423][ T5458] EXT4-fs (loop2): unmounting filesystem. [ 191.048348][ T5468] loop3: detected capacity change from 0 to 512 [ 191.066968][ T5468] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 191.081742][ T5468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.090263][ T5468] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:511: comm syz.3.259: Block bitmap for bg 0 marked uninitialized [ 191.263315][ T5468] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 191.283623][ T5468] EXT4-fs (loop3): 1 orphan inode deleted [ 191.306594][ T5468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.389583][ T5468] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 191.488995][ T5468] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 191.612010][ T5476] loop2: detected capacity change from 0 to 256 [ 191.768910][ T5476] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 192.420621][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 192.823484][ T5480] loop3: detected capacity change from 0 to 512 [ 192.956570][ T5480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.026872][ T5480] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.421854][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 193.682750][ T5491] loop3: detected capacity change from 0 to 1024 [ 193.833436][ T4812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.357504][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.364280][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473613][ T5491] loop3: detected capacity change from 0 to 1024 [ 194.497396][ T4812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.643979][ T4812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.680257][ T4812] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.782739][ T5491] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.823302][ T5491] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 194.858893][ T5491] EXT4-fs error (device loop3): ext4_get_journal_inode:5735: inode #5: comm syz.3.262: unexpected bad inode w/o EXT4_IGET_BAD [ 194.919549][ T5491] EXT4-fs (loop3): no journal found [ 194.944110][ T5491] EXT4-fs (loop3): can't get journal size [ 194.985973][ T5491] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 195.464835][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 195.577038][ T26] audit: type=1326 audit(1752727599.609:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.607828][ T26] audit: type=1326 audit(1752727599.639:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.640739][ T26] audit: type=1326 audit(1752727599.639:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.672409][ T26] audit: type=1326 audit(1752727599.639:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.701734][ T26] audit: type=1326 audit(1752727599.639:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.730078][ T26] audit: type=1326 audit(1752727599.659:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.754185][ T26] audit: type=1326 audit(1752727599.659:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.786232][ T26] audit: type=1326 audit(1752727599.659:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.831115][ T26] audit: type=1326 audit(2000000000.000:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 195.860071][ T26] audit: type=1326 audit(2000000000.030:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5526 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 196.389086][ T5538] loop1: detected capacity change from 0 to 256 [ 198.291713][ T5538] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 199.833800][ T5545] loop2: detected capacity change from 0 to 8192 [ 199.931178][ T5545] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.207807][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 201.553226][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 201.559359][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 201.565506][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 201.565518][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 204.282280][ T5615] loop2: detected capacity change from 0 to 2048 [ 204.392555][ T4812] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.549241][ T5619] loop5: detected capacity change from 0 to 256 [ 204.575755][ T5619] FAT-fs (loop5): Directory bread(block 64) failed [ 204.582418][ T5619] FAT-fs (loop5): Directory bread(block 65) failed [ 204.590174][ T5619] FAT-fs (loop5): Directory bread(block 66) failed [ 204.601436][ T5619] FAT-fs (loop5): Directory bread(block 67) failed [ 204.608216][ T5619] FAT-fs (loop5): Directory bread(block 68) failed [ 204.614892][ T5619] FAT-fs (loop5): Directory bread(block 69) failed [ 204.621533][ T5619] FAT-fs (loop5): Directory bread(block 70) failed [ 204.628201][ T5619] FAT-fs (loop5): Directory bread(block 71) failed [ 204.635204][ T5619] FAT-fs (loop5): Directory bread(block 72) failed [ 204.641778][ T5619] FAT-fs (loop5): Directory bread(block 73) failed [ 205.883912][ T5626] syz.5.290[5626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.884087][ T5626] syz.5.290[5626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.507249][ T5615] loop2: detected capacity change from 0 to 40427 [ 206.800310][ T5615] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.002440][ T5615] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 207.062477][ T5615] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.448225][ T26] audit: type=1804 audit(2000000011.810:50): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.288" name="/newroot/56/file2/bus" dev="loop2" ino=10 res=1 errno=0 [ 207.492620][ T5615] syz.2.288: attempt to access beyond end of device [ 207.492620][ T5615] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.137280][ T5655] loop0: detected capacity change from 0 to 128 [ 208.430267][ T4395] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.670307][ T5660] usb usb8: usbfs: process 5660 (syz.1.295) did not claim interface 0 before use [ 208.776595][ T5615] overlayfs: failed to resolve './file1': -2 [ 208.844254][ T5663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.296'. [ 209.424435][ T5669] loop0: detected capacity change from 0 to 256 [ 209.483858][ T5669] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 211.875397][ T5695] loop5: detected capacity change from 0 to 512 [ 211.944975][ T5695] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 212.007761][ T5695] EXT4-fs (loop5): orphan cleanup on readonly fs [ 212.037441][ T5695] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.301: bad orphan inode 15 [ 212.112359][ T5695] ext4_test_bit(bit=14, block=18) = 1 [ 212.155433][ T5695] is_bad_inode(inode)=0 [ 212.163198][ T5695] NEXT_ORPHAN(inode)=1023 [ 212.168127][ T5695] max_ino=32 [ 212.182785][ T5695] i_nlink=0 [ 212.218595][ T5695] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2934: inode #15: comm syz.5.301: corrupted xattr block 19 [ 212.257090][ T5695] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 212.301817][ T5695] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 212.714388][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.732575][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.741122][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.521543][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 213.699058][ T5711] loop5: detected capacity change from 0 to 16 [ 213.725368][ T5711] erofs: (device loop5): mounted with root inode @ nid 36. [ 216.996023][ T5732] loop3: detected capacity change from 0 to 1024 [ 220.254644][ T5732] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 220.492473][ T5735] netlink: 96 bytes leftover after parsing attributes in process `syz.5.308'. [ 220.866043][ T5740] usb usb8: usbfs: process 5740 (syz.3.309) did not claim interface 0 before use [ 222.126326][ T5751] loop2: detected capacity change from 0 to 256 [ 224.185991][ T5751] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 224.936458][ T5773] loop1: detected capacity change from 0 to 256 [ 225.190896][ T5773] device wireguard0 entered promiscuous mode [ 228.141044][ T5786] loop3: detected capacity change from 0 to 8192 [ 228.305389][ T5796] block device autoloading is deprecated and will be removed. [ 228.503586][ T5786] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.761261][ T5798] usb usb8: usbfs: process 5798 (syz.1.323) did not claim interface 0 before use [ 229.710834][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.721634][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.733017][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.753699][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.762494][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.770015][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.447816][ T5813] overlayfs: failed to resolve './file1': -2 [ 231.240529][ T5817] loop2: detected capacity change from 0 to 512 [ 231.284218][ T5817] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.373320][ T5817] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 231.401000][ T5817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 231.411085][ T5385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.435144][ T5817] System zones: 1-12 [ 231.451914][ T5817] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.328: corrupted in-inode xattr [ 231.467014][ T5817] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.328: couldn't read orphan inode 15 (err -117) [ 231.482744][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 231.540871][ T5817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 231.668362][ T5385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.742447][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 231.793614][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 233.175525][ T5385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.235607][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.244224][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.252646][ T5804] device bridge_slave_0 entered promiscuous mode [ 233.338826][ T5385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.390004][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.403430][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.421688][ T5804] device bridge_slave_1 entered promiscuous mode [ 233.567438][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.610377][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.860175][ T5804] team0: Port device team_slave_0 added [ 233.953404][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 234.267047][ T5804] team0: Port device team_slave_1 added [ 234.284521][ T5841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.313812][ T5841] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.333501][ T5841] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 234.347735][ T5841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.372944][ T5841] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.401270][ T5841] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 234.424263][ T5853] fuse: Bad value for 'fd' [ 234.437355][ T5841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.469312][ T5841] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.478301][ T5841] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 234.513395][ T26] audit: type=1107 audit(2000000038.870:51): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 234.637430][ T5841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 234.649522][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.660935][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.669934][ T5841] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 234.693296][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.712368][ T5841] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 234.739067][ T5841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.754194][ T5841] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 234.762312][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.778747][ T5841] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 234.784085][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.816953][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.097594][ T5804] device hsr_slave_0 entered promiscuous mode [ 235.130626][ T5804] device hsr_slave_1 entered promiscuous mode [ 235.150408][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.225814][ T5804] Cannot create hsr debugfs directory [ 235.236412][ T5863] loop5: detected capacity change from 0 to 16 [ 235.274104][ T5863] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 235.803195][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.373107][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.515513][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.673155][ T4282] Bluetooth: hci5: command 0x0c1a tx timeout [ 236.753382][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 237.875257][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 237.976801][ T5895] fuse: Unknown parameter '0x0000000000000003' [ 238.017861][ T5891] loop1: detected capacity change from 0 to 8192 [ 238.051352][ T5891] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.117918][ T5804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 238.182835][ T5804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 238.311340][ T5804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 238.443358][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 238.593334][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 238.764852][ T5804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 238.773761][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 238.925360][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.744171][ T5916] loop3: detected capacity change from 0 to 256 [ 239.757229][ T5916] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 240.031988][ T5920] loop2: detected capacity change from 0 to 16 [ 240.175703][ T5920] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 240.878419][ T5385] device hsr_slave_0 left promiscuous mode [ 240.934869][ T5385] device hsr_slave_1 left promiscuous mode [ 240.970237][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.981553][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.993202][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 241.017689][ T5385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.050025][ T5385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.133885][ T5385] device bridge_slave_1 left promiscuous mode [ 241.273651][ T5929] loop3: detected capacity change from 0 to 256 [ 242.273732][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.815784][ T5385] device bridge_slave_0 left promiscuous mode [ 242.822089][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.007847][ T5385] device veth1_macvtap left promiscuous mode [ 243.053171][ T5385] device veth0_macvtap left promiscuous mode [ 243.083310][ T5385] device veth1_vlan left promiscuous mode [ 243.089207][ T5385] device veth0_vlan left promiscuous mode [ 244.007840][ T5939] block device autoloading is deprecated and will be removed. [ 244.946910][ T5943] loop2: detected capacity change from 0 to 4096 [ 244.990139][ T5943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.082631][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 245.438049][ T5385] team0 (unregistering): Port device team_slave_1 removed [ 245.488619][ T5385] team0 (unregistering): Port device team_slave_0 removed [ 245.551547][ T5385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.608245][ T5385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.481898][ T5385] bond0 (unregistering): Released all slaves [ 246.531997][ T5953] fuse: Unknown parameter 'grou00000000000000000000' [ 246.736825][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.846356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.885914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.951264][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.045707][ T5960] loop2: detected capacity change from 0 to 512 [ 247.095675][ T5962] loop5: detected capacity change from 0 to 256 [ 247.104135][ T5960] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 247.110688][ T5962] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 247.127711][ T5960] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 247.214231][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.240958][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.301806][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.309065][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.362201][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.371228][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.380140][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.387477][ T5799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.404405][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.449735][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.633784][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 248.652162][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.759335][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.842447][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.922035][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.938721][ T5967] loop5: detected capacity change from 0 to 16 [ 249.010427][ T5967] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 249.242275][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.304466][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.354535][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.410209][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.669227][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.732954][ T5656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.756494][ T5804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.020041][ T5990] block device autoloading is deprecated and will be removed. [ 251.778512][ T5992] loop1: detected capacity change from 0 to 16 [ 251.820665][ T5992] erofs: (device loop1): mounted with root inode @ nid 36. [ 253.403402][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.410702][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.438786][ T5799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.550418][ T6018] loop2: detected capacity change from 0 to 16 [ 253.571887][ T6018] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 255.162925][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 255.211922][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.241627][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.500048][ T6047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.564462][ T26] audit: type=1326 audit(2000000059.910:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 255.796750][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.803339][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.172150][ T26] audit: type=1326 audit(2000000059.910:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 256.207965][ T26] audit: type=1326 audit(2000000059.920:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 256.414778][ T26] audit: type=1326 audit(2000000059.920:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 256.442818][ T26] audit: type=1326 audit(2000000059.920:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 256.506963][ T26] audit: type=1326 audit(2000000059.920:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b6fb8d58a code=0x7ffc0000 [ 256.591922][ T6060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.378'. [ 256.601122][ T6060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.378'. [ 256.612247][ T6060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.378'. [ 257.338905][ T26] audit: type=1326 audit(2000000059.930:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6fbc11e5 code=0x7ffc0000 [ 257.375728][ T26] audit: type=1326 audit(2000000060.130:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 257.455580][ T26] audit: type=1326 audit(2000000060.130:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 257.576731][ T6067] loop3: detected capacity change from 0 to 16 [ 257.585731][ T26] audit: type=1326 audit(2000000060.130:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f6b6fb8e929 code=0x7ffc0000 [ 257.608352][ T6067] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 257.659767][ T4812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.856361][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 257.886360][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.998788][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 258.094979][ T6063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.102991][ T6063] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.110492][ T6063] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 258.136952][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.220202][ T6063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.235660][ T6063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.255215][ T6063] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 258.281556][ T6063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.295766][ T6063] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.309027][ T6063] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 258.323770][ T6063] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 258.335765][ T6063] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 258.347862][ T6063] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 258.358416][ T6063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.366992][ T6063] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.378947][ T6063] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 258.418781][ T6075] device bridge_slave_0 left promiscuous mode [ 258.438578][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.530810][ T5804] device veth0_vlan entered promiscuous mode [ 258.561750][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.610325][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.645700][ T5804] device veth1_vlan entered promiscuous mode [ 258.677044][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.695042][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.737478][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 258.873982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.144123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.358732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.584713][ T5804] device veth0_macvtap entered promiscuous mode [ 259.624843][ T5804] device veth1_macvtap entered promiscuous mode [ 259.701435][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.712325][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.733355][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.762815][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.792829][ T6095] loop1: detected capacity change from 0 to 512 [ 259.813147][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.829144][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.841020][ T6095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 259.856368][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.862384][ T6098] loop2: detected capacity change from 0 to 16 [ 259.868937][ T6095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 259.892932][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.910225][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.919109][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.932868][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.941409][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.955740][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.972688][ T6098] erofs: (device loop2): mounted with root inode @ nid 36. [ 260.042195][ T6095] System zones: 1-12 [ 260.094416][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.113434][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.115984][ T6095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 260.124438][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.149835][ T6095] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.390: bg 0: block 361: padding at end of block bitmap is not set [ 260.163151][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.193440][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.269670][ T6103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.393852][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.393900][ T4282] Bluetooth: hci5: command 0x0c1a tx timeout [ 260.433192][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 260.612905][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 260.619517][ T26] audit: type=1326 audit(2000000064.960:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 260.890145][ T6095] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 260.919505][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.929862][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.940509][ T6095] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.390: invalid indirect mapped block 12 (level 1) [ 260.954519][ T26] audit: type=1326 audit(2000000064.960:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 260.976723][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.006305][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.017623][ T6095] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.390: invalid indirect mapped block 2 (level 2) [ 261.030836][ T26] audit: type=1326 audit(2000000064.960:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.053818][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.065456][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.080566][ T26] audit: type=1326 audit(2000000064.960:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.104044][ T6095] EXT4-fs (loop1): 1 truncate cleaned up [ 261.109767][ T6095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.128190][ T6105] loop3: detected capacity change from 0 to 16 [ 261.150022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.156448][ T6105] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 261.172728][ T26] audit: type=1326 audit(2000000064.960:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.231514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.281906][ T5804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.309909][ T5804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.314986][ T26] audit: type=1326 audit(2000000064.970:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.343195][ T5804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.351965][ T5804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.389102][ T26] audit: type=1326 audit(2000000064.970:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.466296][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.392'. [ 261.553567][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.392'. [ 261.584434][ T6107] netlink: 104 bytes leftover after parsing attributes in process `syz.2.392'. [ 261.617943][ T26] audit: type=1326 audit(2000000064.970:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 261.774696][ T6115] loop3: detected capacity change from 0 to 256 [ 262.253134][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 262.273146][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 262.433179][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 262.439260][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 262.513188][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 262.723541][ T6115] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 262.832484][ T26] audit: type=1326 audit(2000000064.970:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 263.079173][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 263.166182][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.201932][ T26] audit: type=1326 audit(2000000064.970:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.5.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 263.235386][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.307516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.318099][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.338366][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.402863][ T6114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.412445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.443902][ T6114] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.449956][ T6114] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 263.496922][ T6114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.510431][ T6125] loop1: detected capacity change from 0 to 512 [ 263.540608][ T6114] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 263.548008][ T6114] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 263.581547][ T6114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 263.594861][ T6114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 263.601125][ T6114] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 263.662518][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.693542][ T6114] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 263.707628][ T6125] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.736660][ T6114] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 263.766602][ T6114] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 263.774765][ T6114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.782716][ T6114] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.789359][ T6114] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 264.817049][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 264.941237][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 265.889323][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 265.897808][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 265.897832][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.903882][ T4273] Bluetooth: hci5: command 0x0c1a tx timeout [ 265.903952][ T4273] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.396721][ T6153] block device autoloading is deprecated and will be removed. [ 267.672957][ T6170] loop5: detected capacity change from 0 to 16 [ 267.717769][ T6170] erofs: (device loop5): mounted with root inode @ nid 36. [ 267.806925][ T6171] tipc: Enabling of bearer rejected, failed to enable media [ 268.119899][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 268.127317][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 268.128363][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 268.133904][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 268.139875][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 268.156298][ T6173] loop3: detected capacity change from 0 to 256 [ 268.172393][ T6173] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 268.322711][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.5.407'. [ 268.331877][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.5.407'. [ 268.342003][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.5.407'. [ 268.455231][ T6163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.674984][ T6187] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.711039][ T6187] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 270.891775][ T6199] loop6: detected capacity change from 0 to 512 [ 270.901108][ T6187] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 270.989454][ T6202] hub 2-0:1.0: USB hub found [ 270.995886][ T6202] hub 2-0:1.0: 1 port detected [ 271.994291][ T6187] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.001180][ T6199] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 272.010720][ T6187] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 272.020861][ T6187] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 272.029032][ T6187] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.037499][ T6187] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 272.047420][ T6187] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 272.056375][ T6187] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.075456][ T6187] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 272.081449][ T6187] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 272.093280][ T6187] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.099447][ T6199] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.103655][ T6187] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 272.115998][ T6187] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 272.554111][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 272.683166][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.336058][ T6215] fuse: Unknown parameter 'fd0x0000000000000003' [ 273.401628][ T6217] loop3: detected capacity change from 0 to 16 [ 273.557482][ T6217] erofs: (device loop3): mounted with root inode @ nid 36. [ 273.850969][ T6221] loop2: detected capacity change from 0 to 512 [ 273.957913][ T6221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.053180][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.059275][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 275.034528][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 275.040625][ T4282] Bluetooth: hci5: command 0x0c1a tx timeout [ 275.158168][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 275.190519][ T6221] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.319368][ T6221] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.595671][ T6221] EXT4-fs (loop2): 1 truncate cleaned up [ 275.636691][ T6221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.646358][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 275.646373][ T26] audit: type=1326 audit(2000000079.950:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 275.738806][ T26] audit: type=1326 audit(2000000079.950:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 275.761073][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.779505][ T26] audit: type=1326 audit(2000000079.970:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 276.133644][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 276.141355][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 276.593766][ T26] audit: type=1326 audit(2000000079.970:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 276.664414][ T26] audit: type=1326 audit(2000000079.970:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 276.683538][ T6252] loop1: detected capacity change from 0 to 512 [ 276.760931][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 276.871956][ T6252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 276.975110][ T6252] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.073149][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 277.079236][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 277.439448][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 277.686899][ T6253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.701581][ T6253] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.713467][ T6253] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 277.720880][ T6253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.727846][ T6253] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.886310][ T6276] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 277.905991][ T6253] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 277.947176][ T6253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.021681][ T6253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 278.059453][ T6253] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 278.115378][ T6253] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.148061][ T6253] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 278.156835][ T6253] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 278.191383][ T6253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.210346][ T6253] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 278.217536][ T6253] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 278.590843][ T6290] fuse: Bad value for 'fd' [ 279.402590][ T6295] netlink: 104 bytes leftover after parsing attributes in process `syz.5.434'. [ 279.727841][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.745694][ T6304] loop3: detected capacity change from 0 to 512 [ 279.761055][ T6304] EXT4-fs: Invalid want_extra_isize 2 [ 279.812017][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.954363][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.193337][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.193472][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.404990][ T4812] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.235437][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 282.241533][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 282.248429][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 282.273203][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 282.303150][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 282.802918][ T6314] loop3: detected capacity change from 0 to 256 [ 285.128533][ T6314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbf8b2267, utbl_chksum : 0xe619d30d) [ 287.111002][ T6341] fuse: Bad value for 'fd' [ 287.740243][ T6342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.813439][ T6342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 287.819458][ T6342] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 287.944079][ T6366] loop6: detected capacity change from 0 to 256 [ 287.955320][ T6366] exfat: Unknown parameter 'Ϙ' [ 289.793252][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.236524][ T6342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.261307][ T6342] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 290.842207][ T6342] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 290.884694][ T6342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.892555][ T4812] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 290.988188][ T6342] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 291.111148][ T6342] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 291.243417][ T6342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 291.309740][ T6342] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 291.313281][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.377135][ T6342] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 291.426963][ T6342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.634997][ T6342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 291.699874][ T6342] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 291.873383][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 292.722031][ T6446] netlink: 68 bytes leftover after parsing attributes in process `syz.5.451'. [ 292.800967][ T4269] Bluetooth: hci5: unexpected event for opcode 0x200d [ 292.913402][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.393564][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 293.473463][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.778472][ T6459] loop1: detected capacity change from 0 to 512 [ 294.943919][ T6469] fuse: Bad value for 'fd' [ 294.958649][ T6459] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 294.993152][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 295.032745][ T6472] loop3: detected capacity change from 0 to 256 [ 295.050081][ T6472] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 295.083442][ T6459] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 295.131214][ T6459] EXT4-fs (loop1): 1 truncate cleaned up [ 295.194906][ T6459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.311797][ T6459] EXT4-fs (loop1): unmounting filesystem. [ 295.553307][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 296.961698][ T6493] loop3: detected capacity change from 0 to 256 [ 296.993601][ T6482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.001400][ T6493] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.014577][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 297.020572][ T6493] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 297.029836][ T6482] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 297.089535][ T6493] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 297.134508][ T6482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.153801][ T6497] fuse: Bad value for 'fd' [ 297.155132][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 297.232981][ T6482] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 297.444376][ T6482] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.863621][ T6482] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 298.923261][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.973265][ T6482] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 298.981050][ T6504] fuse: Bad value for 'fd' [ 299.073180][ T6482] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 299.153199][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.298775][ T6482] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 299.331191][ T6482] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 299.368729][ T6482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.434798][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 299.442477][ T6512] netlink: 68 bytes leftover after parsing attributes in process `syz.3.465'. [ 299.467257][ T6482] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 299.473190][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.606605][ T4269] Bluetooth: hci2: unexpected event for opcode 0x200d [ 301.054760][ T6527] rtc_cmos 00:00: Alarms can be up to one day in the future [ 301.767791][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 301.773344][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 301.773376][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 301.779402][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 302.019555][ T6531] fuse: Bad value for 'fd' [ 302.290826][ T6535] loop1: detected capacity change from 0 to 512 [ 302.413565][ T6537] fuse: Bad value for 'fd' [ 302.429210][ T6535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.446991][ T6535] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.502857][ T6542] syz.6.474[6542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.503486][ T6542] syz.6.474[6542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.648863][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 302.911603][ T6551] loop6: detected capacity change from 0 to 16 [ 302.949161][ T6551] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 303.193084][ T4328] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 303.374554][ T6569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.481'. [ 303.405270][ T4328] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 303.426309][ T4269] Bluetooth: hci3: unexpected event for opcode 0x200d [ 303.444620][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.491458][ T6574] overlayfs: failed to resolve './file0': -2 [ 303.516912][ T4328] usb 4-1: config 0 descriptor?? [ 303.573561][ T6557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.586539][ T6557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 303.596739][ T6557] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 303.655381][ T6557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.678125][ T6557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 303.741565][ T6557] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 303.793413][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 303.841470][ T6557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.873417][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 303.879946][ T6557] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 303.893293][ T6557] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 303.939195][ T4328] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 304.049008][ T6557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 304.074641][ T6557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 304.097585][ T6557] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 304.113507][ T4328] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 304.159629][ T6581] netlink: 104 bytes leftover after parsing attributes in process `syz.6.483'. [ 304.830210][ T4328] asix: probe of 4-1:0.0 failed with error -32 [ 304.845707][ T6557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.873598][ T6557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 304.888352][ T6557] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 305.137675][ T6588] loop5: detected capacity change from 0 to 512 [ 305.239045][ T6588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 305.274418][ T6588] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.495947][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 305.633365][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.713213][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.873562][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 306.113240][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 306.272380][ T4341] usb 4-1: USB disconnect, device number 3 [ 306.453164][ T26] audit: type=1107 audit(2000000110.810:93): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 306.490664][ T6611] overlayfs: failed to resolve './file1': -2 [ 306.722790][ T6608] usb usb8: usbfs: process 6608 (syz.3.488) did not claim interface 0 before use [ 306.913405][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.753160][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 307.793155][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 308.334385][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 309.234779][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 309.631482][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 310.466338][ T6651] netlink: 68 bytes leftover after parsing attributes in process `syz.5.496'. [ 310.502574][ T6653] loop2: detected capacity change from 0 to 512 [ 310.534950][ T4283] Bluetooth: hci5: unexpected event for opcode 0x200d [ 310.648914][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 310.702623][ T6653] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.983946][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 311.243233][ T6643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.249252][ T6643] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.274636][ T6643] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 311.283843][ T6643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.446864][ T6665] loop2: detected capacity change from 0 to 512 [ 311.614674][ T6666] loop6: detected capacity change from 0 to 512 [ 313.255394][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.038129][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.263626][ T6643] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 314.280712][ T6665] EXT4-fs: failed to create workqueue [ 314.286232][ T6665] EXT4-fs (loop2): mount failed [ 315.120187][ T6666] EXT4-fs warning (device loop6): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop6. [ 315.251745][ T6643] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 315.313272][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 315.676906][ T6643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.695099][ T6643] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.715853][ T6643] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 315.738994][ T6643] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 315.924781][ T6643] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 316.786504][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 316.792688][ T6643] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 316.814725][ T6643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.873320][ T6643] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.933311][ T6643] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 317.226675][ T6680] usb usb8: usbfs: process 6680 (syz.2.503) did not claim interface 0 before use [ 317.242727][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249165][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.115974][ T4283] Bluetooth: hci5: command 0x0c1a tx timeout [ 318.122273][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.420149][ T6695] input: syz1 as /devices/virtual/input/input6 [ 318.614163][ T6702] loop3: detected capacity change from 0 to 512 [ 318.853199][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.896469][ T6702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.452279][ T6702] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.233524][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 320.239767][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 320.896145][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 321.004300][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 322.836731][ T6757] fuse: Bad value for 'fd' [ 322.958434][ T6751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.970467][ T6751] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 322.980751][ T6751] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 322.989301][ T6751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.334790][ T6751] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 323.349999][ T6751] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 323.363349][ T6751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.387305][ T6751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 323.409512][ T6751] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 323.417383][ T6751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 323.423868][ T6751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 323.432262][ T6751] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 323.440170][ T6751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.449732][ T6751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 323.459193][ T6751] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 323.638321][ T6737] loop2: detected capacity change from 0 to 40427 [ 323.685739][ T6737] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 323.759506][ T6737] F2FS-fs (loop2): invalid crc value [ 323.818886][ T6776] loop3: detected capacity change from 0 to 512 [ 323.921499][ T6737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.954504][ T6776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 323.993242][ T6776] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.349108][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 324.616340][ T6796] block device autoloading is deprecated and will be removed. [ 324.913732][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.993156][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.393240][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 325.473517][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 325.479980][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.993302][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 327.013714][ T6813] netlink: 96 bytes leftover after parsing attributes in process `syz.3.531'. [ 327.073096][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 327.322095][ T6826] fuse: Invalid rootmode [ 327.475763][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 327.553390][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 327.656144][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 327.720464][ T6834] usb usb8: usbfs: process 6834 (syz.5.537) did not claim interface 0 before use [ 327.922804][ T6828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.014224][ T6828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 328.020501][ T6828] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 328.036002][ T6828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.042224][ T6828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 328.049490][ T6828] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 328.058005][ T6828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 328.064545][ T6828] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 328.071714][ T6828] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 328.080891][ T6828] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 328.089879][ T6828] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 328.097308][ T6828] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 328.106285][ T6828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.112406][ T6828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 328.119553][ T6828] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 328.325296][ T26] audit: type=1326 audit(2000000132.690:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 328.444099][ T6845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.539'. [ 328.673872][ T6853] block device autoloading is deprecated and will be removed. [ 329.860280][ T26] audit: type=1326 audit(2000000132.820:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 329.883252][ T4283] Bluetooth: hci3: unexpected event for opcode 0x200d [ 329.890121][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.898407][ T26] audit: type=1326 audit(2000000132.820:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 329.921874][ T26] audit: type=1326 audit(2000000132.820:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 329.944887][ T26] audit: type=1326 audit(2000000132.820:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 329.970789][ T26] audit: type=1326 audit(2000000132.820:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 330.106270][ T26] audit: type=1326 audit(2000000132.820:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 330.134232][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.143518][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.143519][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 330.197155][ T26] audit: type=1326 audit(2000000132.820:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 330.219637][ T26] audit: type=1326 audit(2000000132.820:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 330.242635][ T26] audit: type=1326 audit(2000000132.820:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 330.324790][ T6867] netlink: 96 bytes leftover after parsing attributes in process `syz.6.545'. [ 330.943546][ T6872] syz.6.549[6872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.943649][ T6872] syz.6.549[6872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.520020][ T6889] loop5: detected capacity change from 0 to 512 [ 331.815025][ T6889] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.553: casefold flag without casefold feature [ 331.831827][ T6889] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.553: couldn't read orphan inode 15 (err -117) [ 331.847565][ T6889] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 331.953250][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 332.460790][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 332.466933][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 332.472969][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 332.828955][ T6895] usb usb8: usbfs: process 6895 (syz.2.552) did not claim interface 0 before use [ 334.674356][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 337.355116][ T6924] netlink: 68 bytes leftover after parsing attributes in process `syz.1.558'. [ 337.408156][ T4283] Bluetooth: hci4: unexpected event for opcode 0x200d [ 337.683147][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 337.874813][ T27] usb 3-1: config 1 has an invalid interface number: 255 but max is 2 [ 337.890689][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.926627][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.960746][ T27] usb 3-1: config 1 has no interface number 0 [ 338.004650][ T6925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 338.012296][ T6925] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 338.020273][ T6925] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 338.029364][ T6925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.037389][ T6925] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 338.065793][ T27] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.084454][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.092674][ T27] usb 3-1: SerialNumber: syz [ 338.110664][ T6925] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 338.141193][ T6925] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 338.174433][ T6925] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 338.200509][ T6925] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 338.252778][ T6941] fuse: Bad value for 'fd' [ 338.322366][ T27] usb 3-1: USB disconnect, device number 2 [ 338.349350][ T6944] netlink: 96 bytes leftover after parsing attributes in process `syz.1.563'. [ 338.358787][ T6925] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 338.385658][ T6925] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 338.401533][ T6925] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 338.422010][ T6925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.448182][ T6925] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.456863][ T6925] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 339.309439][ T6973] loop2: detected capacity change from 0 to 1024 [ 339.316961][ T6973] EXT4-fs: Ignoring removed i_version option [ 339.753415][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 340.090655][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 340.193195][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 340.433398][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 340.433542][ T4269] Bluetooth: hci5: command 0x0c1a tx timeout [ 342.605097][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 342.611176][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 342.617313][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 342.623699][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 342.623733][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 342.761624][ T6973] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.571: Invalid block bitmap block 0 in block_group 0 [ 342.781379][ T6973] __quota_error: 14 callbacks suppressed [ 342.781400][ T6973] Quota error (device loop2): write_blk: dquota write failed [ 342.795021][ T6973] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 342.805134][ T6973] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.571: Failed to acquire dquot type 0 [ 342.817429][ T6973] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.571: Freeing blocks not in datazone - block = 0, count = 4096 [ 342.832735][ T6973] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.571: Invalid inode bitmap blk 0 in block_group 0 [ 342.852871][ T6973] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 342.861918][ T6973] EXT4-fs (loop2): 1 orphan inode deleted [ 342.867858][ T6973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 343.051909][ T4439] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 343.130545][ T4439] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 0 [ 343.203602][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 343.518587][ T6991] netlink: 68 bytes leftover after parsing attributes in process `syz.2.574'. [ 343.624298][ T4285] Bluetooth: hci3: unexpected event for opcode 0x200d [ 344.301253][ T7003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.308220][ T7003] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 344.329298][ T7003] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 344.338168][ T7003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.345178][ T7003] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 344.355460][ T7003] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 344.367379][ T7003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.377161][ T7003] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 344.385180][ T7003] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 344.393305][ T7003] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 344.402655][ T7003] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 344.486942][ T7003] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 344.498905][ T7003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.505425][ T7003] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 344.512012][ T7003] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 344.520065][ T7013] fuse: Bad value for 'rootmode' [ 346.113218][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 346.363191][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 346.433287][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 346.439369][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 346.513206][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.080501][ T26] audit: type=1326 audit(2000000152.440:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 348.144452][ T7042] loop5: detected capacity change from 0 to 512 [ 348.176077][ T26] audit: type=1326 audit(2000000152.500:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 348.203309][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 348.208109][ T7044] loop1: detected capacity change from 0 to 2048 [ 348.316218][ T26] audit: type=1326 audit(2000000152.510:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 348.361622][ T7042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 348.433100][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 348.486559][ T7042] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.513389][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 348.519475][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 348.578677][ T26] audit: type=1326 audit(2000000152.510:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 348.601329][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 348.611058][ T26] audit: type=1326 audit(2000000152.510:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.6.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 348.942876][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 349.053856][ T7058] netlink: 96 bytes leftover after parsing attributes in process `syz.2.594'. [ 349.099407][ T7061] loop6: detected capacity change from 0 to 16 [ 349.204592][ T7061] erofs: (device loop6): mounted with root inode @ nid 36. [ 349.297790][ T7044] loop1: detected capacity change from 0 to 40427 [ 349.465026][ T7070] fuse: Bad value for 'rootmode' [ 350.108511][ T7044] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.326572][ T7044] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 350.471810][ T7044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.759673][ T7090] netlink: 104 bytes leftover after parsing attributes in process `syz.6.598'. [ 350.768993][ T7090] netlink: 104 bytes leftover after parsing attributes in process `syz.6.598'. [ 350.779115][ T7090] netlink: 104 bytes leftover after parsing attributes in process `syz.6.598'. [ 350.863189][ T26] audit: type=1804 audit(2000000155.220:123): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.590" name="/newroot/122/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 350.889049][ T7044] syz.1.590: attempt to access beyond end of device [ 350.889049][ T7044] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.307611][ T7044] overlayfs: failed to resolve './file1': -2 [ 352.467157][ T7109] loop2: detected capacity change from 0 to 512 [ 352.580847][ T7109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 352.637241][ T7109] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.990034][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 353.601296][ T7126] loop1: detected capacity change from 0 to 16 [ 353.617592][ T7126] erofs: (device loop1): mounted with root inode @ nid 36. [ 353.699522][ T7129] fuse: Bad value for 'rootmode' [ 355.153128][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 356.368063][ T7153] netlink: 96 bytes leftover after parsing attributes in process `syz.2.616'. [ 356.443563][ T7154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.615'. [ 356.453572][ T7154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.615'. [ 356.463624][ T7154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.615'. [ 357.128670][ T7169] loop3: detected capacity change from 0 to 512 [ 357.378216][ T7169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 357.393354][ T7169] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.353321][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 358.745716][ T7187] fuse: Bad value for 'rootmode' [ 360.688946][ T7208] block device autoloading is deprecated and will be removed. [ 361.403291][ T4812] udevd[4812]: setting owner of /dev/md2 to uid=0, gid=6 failed: No such file or directory [ 361.841238][ T7199] loop6: detected capacity change from 0 to 8192 [ 361.897721][ T7199] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 362.594558][ T7220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.613390][ T7220] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 363.372146][ T7220] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 363.410830][ T7220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.436893][ T7220] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 363.492170][ T7220] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 363.515473][ T7220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.538554][ T7220] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 363.562681][ T7220] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 363.599539][ T7220] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 363.611840][ T7220] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 363.631897][ T7220] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 363.670332][ T7220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.713430][ T7220] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 363.737907][ T7220] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 364.433079][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.078796][ T7260] syz.3.641[7260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.078999][ T7260] syz.3.641[7260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.483600][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.554680][ T4273] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.633188][ T4273] Bluetooth: hci5: command 0x0c1a tx timeout [ 365.713114][ T4273] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.234015][ T7276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.645'. [ 366.630080][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 367.553117][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 367.633148][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 367.723125][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 368.616420][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 369.908626][ T7289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.133782][ T7289] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.203172][ T7289] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 371.220891][ T7289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.243393][ T7289] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.265486][ T7289] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 371.283360][ T7289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.342050][ T7289] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.390008][ T7289] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 371.425660][ T7289] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 371.451251][ T7289] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 371.518264][ T7289] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 371.538946][ T7289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.581367][ T7289] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 371.598885][ T7320] netlink: 96 bytes leftover after parsing attributes in process `syz.6.658'. [ 371.610934][ T7289] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 371.973468][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.220749][ T7332] loop5: detected capacity change from 0 to 2048 [ 372.450908][ T7332] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 372.666184][ T4665] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 372.712070][ T4665] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 372.978168][ T7349] loop6: detected capacity change from 0 to 8192 [ 373.033276][ T7349] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.043757][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 373.273169][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.292534][ T26] audit: type=1326 audit(2000000177.650:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 373.374576][ T4273] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.387406][ T26] audit: type=1326 audit(2000000177.750:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 373.547387][ T4273] Bluetooth: hci5: command 0x0c1a tx timeout [ 373.555182][ T4273] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.801398][ T26] audit: type=1326 audit(2000000178.160:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 373.995596][ T26] audit: type=1326 audit(2000000178.190:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.026828][ T26] audit: type=1326 audit(2000000178.190:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.049125][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 374.093833][ T26] audit: type=1326 audit(2000000178.220:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.182382][ T26] audit: type=1326 audit(2000000178.220:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.233200][ T26] audit: type=1326 audit(2000000178.220:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.434147][ T26] audit: type=1326 audit(2000000178.220:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 374.488578][ T7375] loop3: detected capacity change from 0 to 128 [ 374.495862][ T7375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.502499][ T7375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.966400][ T7375] EXT4-fs (loop3): Test dummy encryption mode enabled [ 375.343108][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 375.403127][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 375.537543][ T7375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 375.547887][ T7375] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 375.643108][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 375.649209][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 375.865525][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 377.040160][ T7383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.083254][ T7383] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 377.089629][ T7383] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 377.103115][ T7383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.133333][ T7383] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 377.173139][ T7383] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 377.188398][ T7383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.233567][ T7383] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 377.282358][ T7383] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 377.330646][ T7383] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 377.372493][ T7383] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 377.410817][ T7383] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 377.438385][ T7383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.464465][ T7383] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 377.490559][ T7383] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 378.038927][ T7404] syz.3.679[7404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.039098][ T7404] syz.3.679[7404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.129846][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 378.280409][ T7409] cgroup: noprefix used incorrectly [ 378.352627][ T7409] loop2: detected capacity change from 0 to 1024 [ 378.688375][ T7409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 378.749654][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.758659][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.439296][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 379.445498][ T4273] Bluetooth: hci4: command 0x0c1a tx timeout [ 379.451568][ T4273] Bluetooth: hci5: command 0x0c1a tx timeout [ 379.473067][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.263863][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 380.492287][ T7423] loop6: detected capacity change from 0 to 16 [ 380.826409][ T7423] erofs: (device loop6): mounted with root inode @ nid 36. [ 381.234477][ T7418] loop3: detected capacity change from 0 to 8192 [ 381.244636][ T7427] fuse: Unknown parameter 'user_i00000000000000000000' [ 381.285684][ T7418] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.544203][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 381.550415][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 381.557118][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 381.563874][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 381.633672][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 384.290942][ T7472] syz.6.696[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.291051][ T7472] syz.6.696[7472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.434067][ T7443] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.453648][ T7443] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 384.462880][ T7443] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 384.608458][ T7477] fuse: Bad value for 'fd' [ 385.857888][ T7443] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.868081][ T7443] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.875675][ T7443] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 385.885396][ T7443] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.894443][ T7443] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.923206][ T7443] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 385.933533][ T7443] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 385.941390][ T7443] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 385.962733][ T7480] loop3: detected capacity change from 0 to 1024 [ 385.981650][ T7443] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 386.017079][ T7480] EXT4-fs (loop3): invalid inodes per group: 0 [ 386.017079][ T7480] [ 386.033447][ T7443] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 386.049221][ T7443] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 386.069213][ T7443] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 386.360966][ T7484] fuse: Unknown parameter 'user_i00000000000000000000' [ 386.523160][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 387.369580][ T7489] loop2: detected capacity change from 0 to 8192 [ 387.425295][ T7489] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.873166][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 387.963207][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 387.969302][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 388.203511][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 388.830170][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 389.953250][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 390.095392][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 390.101482][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 390.918901][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 392.272522][ T7528] fuse: Unknown parameter 'user_i00000000000000000000' [ 392.530461][ T7525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.693415][ T7525] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 392.707355][ T7525] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 393.553567][ T7525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.583192][ T7525] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 393.600049][ T7525] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 393.629528][ T7525] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.651889][ T7525] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 393.725199][ T7525] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 393.757355][ T7525] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.813464][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.819549][ T4273] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.954819][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 395.960288][ T7525] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 395.966843][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 395.995544][ T7525] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 396.040598][ T7525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.192270][ T7525] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 396.200829][ T7525] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 397.391625][ T7567] device bridge_slave_1 left promiscuous mode [ 397.439189][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.479932][ T7567] device bridge_slave_0 left promiscuous mode [ 397.491943][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.873112][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 397.879231][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 398.033339][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 398.033489][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 398.113464][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.346435][ T7582] loop3: detected capacity change from 0 to 512 [ 398.361482][ T7582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 399.427857][ T7582] EXT4-fs (loop3): orphan cleanup on readonly fs [ 399.437950][ T7582] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.723: bg 0: block 248: padding at end of block bitmap is not set [ 399.455811][ T7582] Quota error (device loop3): write_blk: dquota write failed [ 399.463725][ T7582] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 399.474086][ T7582] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.723: Failed to acquire dquot type 1 [ 399.490442][ T7582] EXT4-fs (loop3): 1 truncate cleaned up [ 399.506191][ T7582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 400.193557][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 400.671207][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 401.296605][ T7594] loop2: detected capacity change from 0 to 8192 [ 401.669172][ T7594] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.899477][ T26] audit: type=1326 audit(2000000207.260:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 402.921705][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.079412][ T26] audit: type=1326 audit(2000000207.290:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.133573][ T7607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.152082][ T7607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 403.192624][ T7607] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 403.203494][ T7607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.209786][ T7607] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 403.330217][ T26] audit: type=1326 audit(2000000207.300:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.608727][ T7607] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 403.639460][ T26] audit: type=1326 audit(2000000207.310:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.669639][ T7607] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.675968][ T26] audit: type=1326 audit(2000000207.310:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.703246][ T7607] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 403.709664][ T7607] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 403.709900][ T26] audit: type=1326 audit(2000000207.310:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.739185][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.749504][ T7607] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.750917][ T26] audit: type=1326 audit(2000000207.310:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.779624][ T26] audit: type=1326 audit(2000000207.310:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 403.802095][ T7607] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 403.980704][ T7607] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 404.860096][ T7607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.919289][ T7607] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 404.943443][ T7607] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 405.083255][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 405.128224][ T7637] netlink: 96 bytes leftover after parsing attributes in process `syz.5.741'. [ 405.339664][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 405.723113][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.793077][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 406.237131][ T7642] loop1: detected capacity change from 0 to 8192 [ 406.277620][ T7642] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.946190][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.153119][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 407.563783][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 407.803199][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 408.049105][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 408.062211][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.6.751'. [ 408.139443][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.6.751'. [ 408.268913][ T7669] 9pnet_fd: Insufficient options for proto=fd [ 409.023733][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 409.165502][ T7677] 9pnet_fd: Insufficient options for proto=fd [ 409.889523][ T7677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.210968][ T7677] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 410.220302][ T7677] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 410.230540][ T7677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.248033][ T7677] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 410.258198][ T7677] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 410.270351][ T7677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.277123][ T7687] fuse: Bad value for 'fd' [ 410.286194][ T7677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 410.292502][ T7677] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 410.301809][ T7688] fuse: Bad value for 'fd' [ 410.308918][ T7677] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.316323][ T7677] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 410.328778][ T7677] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 410.336390][ T7677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.342674][ T7677] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 410.355190][ T7677] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 410.830942][ T7679] loop3: detected capacity change from 0 to 40427 [ 410.966340][ T7679] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 410.996503][ T7679] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 411.016824][ T7679] F2FS-fs (loop3): invalid crc value [ 411.150439][ T7679] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.181005][ T7694] loop5: detected capacity change from 0 to 8192 [ 411.294848][ T7694] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.368860][ T7679] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 411.533189][ T7679] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 411.873258][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.273094][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.279205][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.353099][ T4285] Bluetooth: hci1: command 0x0c1a tx timeout [ 412.374877][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.403106][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 414.409730][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 414.415949][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 414.480714][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 414.481487][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 414.606079][ T7727] netlink: 68 bytes leftover after parsing attributes in process `syz.1.768'. [ 414.834132][ T4283] Bluetooth: hci4: unexpected event for opcode 0x200d [ 415.730375][ T6411] Bluetooth: hci0: Frame reassembly failed (-84) [ 416.836333][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'. [ 417.082311][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 419.139619][ T7764] netlink: 104 bytes leftover after parsing attributes in process `syz.5.777'. [ 419.148684][ T7764] netlink: 104 bytes leftover after parsing attributes in process `syz.5.777'. [ 419.158154][ T7764] netlink: 104 bytes leftover after parsing attributes in process `syz.5.777'. [ 419.875377][ T7772] loop5: detected capacity change from 0 to 512 [ 420.296300][ T7785] netlink: 96 bytes leftover after parsing attributes in process `syz.2.784'. [ 420.508571][ T7772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.571007][ T7772] EXT4-fs (loop5): Test dummy encryption mode enabled [ 420.799939][ T7772] EXT4-fs (loop5): 1 truncate cleaned up [ 420.919386][ T7772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 421.093427][ T7794] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 423.997155][ T4665] EXT4-fs (loop5): unmounting filesystem. [ 424.212002][ T7810] fuse: Unknown parameter '0x0000000000000004' [ 424.243767][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.790'. [ 424.252841][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.790'. [ 424.262503][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.1.790'. [ 425.791014][ T7832] netlink: 96 bytes leftover after parsing attributes in process `syz.1.796'. [ 427.092733][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 427.092749][ T26] audit: type=1326 audit(2000000231.450:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.195026][ T26] audit: type=1326 audit(2000000231.500:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.218299][ T26] audit: type=1326 audit(2000000231.500:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.241442][ T26] audit: type=1326 audit(2000000231.500:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.276613][ T26] audit: type=1326 audit(2000000231.510:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.304995][ T26] audit: type=1326 audit(2000000231.520:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.357960][ T26] audit: type=1326 audit(2000000231.520:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.433499][ T26] audit: type=1326 audit(2000000231.520:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.463625][ T7855] fuse: Unknown parameter '0x0000000000000004' [ 427.551142][ T26] audit: type=1326 audit(2000000231.520:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7849 comm="syz.6.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 427.801000][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.6.804'. [ 427.810342][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.6.804'. [ 427.821251][ T7859] netlink: 104 bytes leftover after parsing attributes in process `syz.6.804'. [ 428.675180][ T7861] loop3: detected capacity change from 0 to 8192 [ 428.710378][ T7861] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.006939][ T7876] netlink: 96 bytes leftover after parsing attributes in process `syz.1.810'. [ 432.593988][ T7891] loop1: detected capacity change from 0 to 2048 [ 432.630613][ T4812] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 433.529617][ T7902] loop2: detected capacity change from 0 to 8192 [ 433.576963][ T7891] loop1: detected capacity change from 0 to 40427 [ 433.648458][ T7902] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.707862][ T7891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 433.839429][ T7891] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 433.867855][ T7891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.959446][ T26] audit: type=1804 audit(2000000238.320:165): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.814" name="/newroot/166/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 433.998731][ T7891] syz.1.814: attempt to access beyond end of device [ 433.998731][ T7891] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.129100][ T7891] overlayfs: failed to resolve './file1': -2 [ 435.383568][ T26] audit: type=1326 audit(2000000239.750:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 435.462122][ T26] audit: type=1326 audit(2000000239.780:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.237815][ T26] audit: type=1326 audit(2000000239.780:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.260367][ T26] audit: type=1326 audit(2000000239.780:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.304169][ T26] audit: type=1326 audit(2000000239.780:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.368803][ T26] audit: type=1326 audit(2000000239.790:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.445817][ T26] audit: type=1326 audit(2000000239.790:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 436.738647][ T26] audit: type=1326 audit(2000000239.790:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 437.069439][ T26] audit: type=1326 audit(2000000239.790:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 440.128991][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.135494][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.843671][ T7986] loop1: detected capacity change from 0 to 512 [ 441.853681][ T7986] EXT4-fs: Ignoring removed orlov option [ 442.158962][ T7986] EXT4-fs (loop1): 1 orphan inode deleted [ 442.165314][ T7986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 442.181651][ T7986] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.227219][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 442.793849][ T6409] __quota_error: 5 callbacks suppressed [ 442.793865][ T6409] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 443.210256][ T6409] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:24: Failed to release dquot type 1 [ 444.751306][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 444.954418][ T26] audit: type=1326 audit(2000000249.320:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.042801][ T26] audit: type=1326 audit(2000000249.350:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.074757][ T26] audit: type=1326 audit(2000000249.350:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.098683][ T26] audit: type=1326 audit(2000000249.460:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.165785][ T26] audit: type=1326 audit(2000000249.460:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.228843][ T26] audit: type=1326 audit(2000000249.460:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f54c3bc11e5 code=0x7ffc0000 [ 445.375291][ T26] audit: type=1326 audit(2000000249.490:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.487862][ T26] audit: type=1326 audit(2000000249.490:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 445.510087][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.640579][ T26] audit: type=1326 audit(2000000249.490:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.1.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 448.323922][ T8026] fuse: Unknown parameter '0x0000000000000004' [ 449.910422][ T8039] fuse: Unknown parameter 'fd0x0000000000000004' [ 450.065042][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 450.065058][ T26] audit: type=1326 audit(2000000254.430:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.146483][ T26] audit: type=1326 audit(2000000254.460:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.244622][ T26] audit: type=1326 audit(2000000254.460:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.340513][ T8045] loop2: detected capacity change from 0 to 256 [ 450.353528][ T26] audit: type=1326 audit(2000000254.480:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.525235][ T8045] FAT-fs (loop2): Directory bread(block 64) failed [ 450.553129][ T8045] FAT-fs (loop2): Directory bread(block 65) failed [ 450.594532][ T8045] FAT-fs (loop2): Directory bread(block 66) failed [ 450.643027][ T26] audit: type=1326 audit(2000000254.500:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.665870][ T8045] FAT-fs (loop2): Directory bread(block 67) failed [ 450.666456][ T26] audit: type=1326 audit(2000000254.500:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 450.672540][ T8045] FAT-fs (loop2): Directory bread(block 68) failed [ 450.703158][ T26] audit: type=1326 audit(2000000254.560:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ac07c11e5 code=0x7ffc0000 [ 450.815202][ T8045] FAT-fs (loop2): Directory bread(block 69) failed [ 450.835276][ T8045] FAT-fs (loop2): Directory bread(block 70) failed [ 450.939232][ T8045] FAT-fs (loop2): Directory bread(block 71) failed [ 451.064176][ T8045] FAT-fs (loop2): Directory bread(block 72) failed [ 451.118227][ T26] audit: type=1326 audit(2000000254.710:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8043 comm="syz.6.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6ac078e929 code=0x7ffc0000 [ 451.219431][ T8045] FAT-fs (loop2): Directory bread(block 73) failed [ 453.200064][ T8067] fuse: Unknown parameter '0x0000000000000004' [ 453.547487][ T8072] loop3: detected capacity change from 0 to 2048 [ 454.148097][ T8077] fuse: Unknown parameter 'fd0x0000000000000004' [ 454.561293][ T8072] loop3: detected capacity change from 0 to 40427 [ 454.672607][ T8072] F2FS-fs (loop3): Found nat_bits in checkpoint [ 454.841189][ T8072] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 454.903356][ T8072] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 455.081929][ T26] audit: type=1804 audit(2000000259.440:198): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.863" name="/newroot/191/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 457.137416][ T4267] syz-executor: attempt to access beyond end of device [ 457.137416][ T4267] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 457.348197][ T8105] loop2: detected capacity change from 0 to 512 [ 457.611880][ T8105] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.872: casefold flag without casefold feature [ 457.628371][ T8105] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.872: couldn't read orphan inode 15 (err -117) [ 457.641915][ T8105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 459.390923][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 464.530809][ T8154] loop6: detected capacity change from 0 to 8192 [ 464.655600][ T8154] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.932262][ T8163] netlink: 96 bytes leftover after parsing attributes in process `syz.2.889'. [ 466.210229][ T8181] loop6: detected capacity change from 0 to 512 [ 466.234264][ T8181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.267769][ T8181] EXT4-fs (loop6): Test dummy encryption mode enabled [ 466.342656][ T8181] EXT4-fs (loop6): 1 truncate cleaned up [ 466.370463][ T8181] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 467.985556][ T26] audit: type=1326 audit(2000000272.340:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 468.095025][ T26] audit: type=1326 audit(2000000272.350:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 468.121377][ T26] audit: type=1326 audit(2000000272.350:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 468.370804][ T26] audit: type=1326 audit(2000000272.350:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.084165][ T26] audit: type=1326 audit(2000000272.350:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.163187][ T8183] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 469.180385][ T26] audit: type=1326 audit(2000000272.350:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.213491][ T26] audit: type=1326 audit(2000000272.350:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.384037][ T26] audit: type=1326 audit(2000000272.370:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.423309][ T8208] netlink: 96 bytes leftover after parsing attributes in process `syz.2.900'. [ 469.440367][ T26] audit: type=1326 audit(2000000272.400:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 469.462533][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.090666][ T26] audit: type=1326 audit(2000000272.400:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.2.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5c98e929 code=0x7ffc0000 [ 470.112915][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.325681][ T5804] EXT4-fs (loop6): unmounting filesystem. [ 470.587560][ T8218] loop1: detected capacity change from 0 to 8192 [ 470.632440][ T8218] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.664076][ T8229] loop2: detected capacity change from 0 to 512 [ 470.680126][ T8229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.701985][ T8229] EXT4-fs (loop2): orphan cleanup on readonly fs [ 470.715245][ T8229] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.903: bg 0: block 248: padding at end of block bitmap is not set [ 470.730897][ T8229] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.903: Failed to acquire dquot type 1 [ 470.745436][ T8229] EXT4-fs (loop2): 1 truncate cleaned up [ 470.754298][ T8229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 471.953278][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 473.133672][ T8252] netlink: 96 bytes leftover after parsing attributes in process `syz.5.913'. [ 478.432559][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 478.432576][ T26] audit: type=1326 audit(2000000282.790:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 478.481044][ T26] audit: type=1326 audit(2000000282.820:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 480.005368][ T26] audit: type=1326 audit(2000000282.830:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 480.044247][ T8303] tipc: Started in network mode [ 480.218742][ T8303] tipc: Node identity ac14140f, cluster identity 4711 [ 480.254887][ T26] audit: type=1326 audit(2000000282.830:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 480.278124][ T26] audit: type=1326 audit(2000000282.830:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8299 comm="syz.5.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110ab8e929 code=0x7ffc0000 [ 480.313195][ T8303] tipc: New replicast peer: 255.255.255.83 [ 480.327359][ T8303] tipc: Enabled bearer , priority 10 [ 480.499217][ T8315] loop2: detected capacity change from 0 to 2048 [ 481.804502][ T14] tipc: Node number set to 2886997007 [ 483.341788][ T8326] loop3: detected capacity change from 0 to 8192 [ 483.440638][ T8326] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.741795][ T8376] loop2: detected capacity change from 0 to 16 [ 487.759134][ T8376] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 127766) [ 487.770287][ T8373] netlink: 104 bytes leftover after parsing attributes in process `syz.3.945'. [ 489.024158][ T26] audit: type=1326 audit(2000000293.390:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 489.100844][ T26] audit: type=1326 audit(2000000293.390:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 489.197290][ T26] audit: type=1326 audit(2000000293.390:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 489.280689][ T26] audit: type=1326 audit(2000000293.390:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 489.373111][ T26] audit: type=1326 audit(2000000293.390:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c3b8e929 code=0x7ffc0000 [ 491.752491][ T8401] loop1: detected capacity change from 0 to 8192 [ 491.770568][ T8401] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.013272][ T8418] loop2: detected capacity change from 0 to 1024 [ 494.067914][ T8418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 495.006108][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 498.211557][ T8456] loop2: detected capacity change from 0 to 512 [ 499.044499][ T8457] kthread_run failed with err -4 [ 499.176582][ T8450] loop3: detected capacity change from 0 to 8192 [ 499.280483][ T8450] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.093882][ T8456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 500.133194][ T8456] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.183320][ T8474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.973'. [ 500.192389][ T8474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.973'. [ 500.264195][ T8456] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.970: corrupted inode contents [ 500.452670][ T8456] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.970: mark_inode_dirty error [ 500.534252][ T8456] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.970: corrupted inode contents [ 500.602464][ T8456] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.970: mark_inode_dirty error [ 501.525210][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 501.627679][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.634079][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.744719][ T8486] loop6: detected capacity change from 0 to 256 [ 501.898135][ T8493] tipc: Failed to remove unknown binding: 66,1,1/2886997007:51150265/51150266 [ 501.963269][ T8493] tipc: Failed to remove unknown binding: 66,1,1/2886997007:51150265/51150266 [ 503.483006][ T8503] [ 503.485773][ T8503] ============================= [ 503.490644][ T8503] WARNING: suspicious RCU usage [ 503.495593][ T8503] 6.1.145-syzkaller #0 Not tainted [ 503.500735][ T8503] ----------------------------- [ 503.505654][ T8503] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 503.514213][ T8503] [ 503.514213][ T8503] other info that might help us debug this: [ 503.514213][ T8503] [ 503.524519][ T8503] [ 503.524519][ T8503] rcu_scheduler_active = 2, debug_locks = 1 [ 503.532619][ T8503] 1 lock held by syz.2.981/8503: [ 503.537716][ T8503] #0: ffffffff8cb2afa0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 503.548027][ T8503] [ 503.548027][ T8503] stack backtrace: [ 503.554071][ T8503] CPU: 0 PID: 8503 Comm: syz.2.981 Not tainted 6.1.145-syzkaller #0 [ 503.562095][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.572207][ T8503] Call Trace: [ 503.575508][ T8503] [ 503.578460][ T8503] dump_stack_lvl+0x168/0x22e [ 503.583177][ T8503] ? show_regs_print_info+0x12/0x12 [ 503.588405][ T8503] ? load_image+0x3b0/0x3b0 [ 503.592944][ T8503] lockdep_rcu_suspicious+0x1dd/0x300 [ 503.598359][ T8503] get_callchain_entry+0x2a5/0x3b0 [ 503.603522][ T8503] get_perf_callchain+0x9f/0x480 [ 503.608500][ T8503] ? put_callchain_entry+0xb0/0xb0 [ 503.613648][ T8503] ? verify_lock_unused+0x140/0x140 [ 503.618872][ T8503] __bpf_get_stack+0x2ce/0x4f0 [ 503.623669][ T8503] ? stack_map_get_build_id_offset+0x9c0/0x9c0 [ 503.629850][ T8503] ? __cant_sleep+0x210/0x210 [ 503.634558][ T8503] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 503.640216][ T8503] bpf_get_stack_raw_tp+0x189/0x1c0 [ 503.645468][ T8503] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 503.650948][ T8503] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 503.656346][ T8503] bpf_prog_test_run_syscall+0x30d/0x490 [ 503.662004][ T8503] ? sock_gen_cookie+0x60/0x60 [ 503.666793][ T8503] ? sock_gen_cookie+0x60/0x60 [ 503.671586][ T8503] bpf_prog_test_run+0x31e/0x390 [ 503.676558][ T8503] __sys_bpf+0x593/0x6d0 [ 503.680825][ T8503] ? bpf_link_show_fdinfo+0x310/0x310 [ 503.686235][ T8503] ? lock_chain_count+0x20/0x20 [ 503.691111][ T8503] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 503.697122][ T8503] __x64_sys_bpf+0x78/0x90 [ 503.701564][ T8503] do_syscall_64+0x4c/0xa0 [ 503.706019][ T8503] ? clear_bhb_loop+0x60/0xb0 [ 503.710724][ T8503] ? clear_bhb_loop+0x60/0xb0 [ 503.715427][ T8503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.721342][ T8503] RIP: 0033:0x7f0d5c98e929 [ 503.725784][ T8503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.745502][ T8503] RSP: 002b:00007f0d5d734038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 503.753936][ T8503] RAX: ffffffffffffffda RBX: 00007f0d5cbb6160 RCX: 00007f0d5c98e929 [ 503.761931][ T8503] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 503.769930][ T8503] RBP: 00007f0d5ca10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 503.778005][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.785991][ T8503] R13: 0000000000000000 R14: 00007f0d5cbb6160 R15: 00007ffc64633198 [ 503.793998][ T8503] [ 504.521795][ T8510] block device autoloading is deprecated and will be removed.