last executing test programs: 12m29.695455476s ago: executing program 4 (id=5): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 12m29.010417873s ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000004c0)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m27.620096195s ago: executing program 4 (id=26): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@shortname_winnt}, {}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 12m26.596054592s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x9) dup(0xffffffffffffffff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 12m24.142457622s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) 12m23.521498892s ago: executing program 32 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) 12m22.986360285s ago: executing program 1 (id=41): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) mkdir(0x0, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001900010026bd7000060000000a001000fec7db577eb6e9010005000b00000600"], 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x40000d0) pipe2$9p(0x0, 0x4880) move_mount(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) ustat(0x80, 0x0) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) 12m21.184755425s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000400)='./file1\x00', 0xc000035c) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0x5, 0x4) 12m17.025602657s ago: executing program 1 (id=55): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) mkdir(0x0, 0x22) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001900010026bd7000060000000a001000fec7db577eb6e9010005000b00000600"], 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x40000d0) pipe2$9p(0x0, 0x4880) move_mount(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) ustat(0x80, 0x0) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) 12m15.188413422s ago: executing program 1 (id=60): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12m10.934294991s ago: executing program 1 (id=65): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 12m10.161222394s ago: executing program 1 (id=66): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x14, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000080)='./file1\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000f4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 11m54.670144693s ago: executing program 33 (id=66): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x14, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000080)='./file1\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000f4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 10m41.713709051s ago: executing program 0 (id=229): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000080), 0xfe, 0x45d, &(0x7f0000001a80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000001980)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x3, 0xa, 0x4}, {0x0, 0x5, 0xe, 0x9}, {0x2, 0x94, 0xe, 0x5}], 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES8, @ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000009500000000ebff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = inotify_init1(0x0) r5 = dup(r4) inotify_rm_watch(r5, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 10m39.91992515s ago: executing program 0 (id=235): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f0000000c80)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="1d7a74b6fb2230952223e73a952484e1f152e17f006dbbe4eb26a8af2c7721da585ecc6a2483e695344a44dc8704229dc9f902b3cdbcb7f7377f06d9e5d4a3a0b37b0cdaae85deeb8e7a04dfb291fee38779a9c397a937ad55986cea4ae2e6aff63a2efcdf7ab6668104cbb66bf1fc8734d3297a55a196f51f9ae20aeb9bdd0427"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1a) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000180)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYRES32=0x1, @ANYBLOB="000000f34279"], 0x48) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x32) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000800)=ANY=[@ANYBLOB="3b16877482388d72ae4086610e6d5661d45ec669101e8297e2f7beeab5bc30814b874004939ee1029511178039ee2a934f919a4d035dc3645eff67b70c5a17d05fd3cbc63c8f67e77261025fe00f5045891ca0f2b90fe9b2630461a23a2c545005d12b1efa4cbb302abae62592cd3aaf581eca21098329e797f9dd0e71c2a4398a677c410e90546e8fe608059ad414d4e3e17c04198b9fd71eee709d3c2616d894c8b9490fb77ab32d1427a2b7f3f9bb317d5897a5170045e2f1e6058204451cf74795129226971aa161f2b59ccd2efa727e63be4eb51eec3872b0d9e6", @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000140)=@hci, 0xfffffe0b, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000580)=""/132, 0x84}], 0x2c, &(0x7f0000000640)=""/217, 0xd9}, 0x22) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m38.778634969s ago: executing program 0 (id=236): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 10m38.546410396s ago: executing program 0 (id=237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240900000003000000ff0009240605060208000a0924030003030005490c240206", @ANYBLOB="7df1798ed605724f07fb39ed051486f3aba907acf017faf7ffffffffffffff447db8ef438b593734a8ca8c54d7478b82569c55e64fe9ffe16d72499d63558bae95bfa175d82a2d309291abbd9e3e5b30edef"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x14020000) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000400)='./bus\x00', 0x8801, 0x0) write$binfmt_script(r9, &(0x7f0000000080), 0x208e24b) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000740), 0x10) 10m35.698134016s ago: executing program 0 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 10m34.031514582s ago: executing program 0 (id=249): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1a) clock_adjtime(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x4000814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) 10m33.368132046s ago: executing program 34 (id=249): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff1a) clock_adjtime(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe32fa770305bfcda}, 0x4000814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) 7m49.023895341s ago: executing program 3 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) 7m48.211922408s ago: executing program 3 (id=527): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x4010) 7m47.863439152s ago: executing program 3 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040050}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, &(0x7f0000000440)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req={0xffff, 0x0, 0x483, 0x2}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {0x0, 0x2000000000000}, [@common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x2, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 7m44.965512199s ago: executing program 3 (id=531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000001980)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x5, 0x3, 0xa, 0x4}, {0x0, 0x5, 0xe, 0x9}, {0x2, 0x94, 0xe, 0x5}, {0x1, 0x3, 0x7, 0x9}], 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x49468a436c662cb5, 0xc, &(0x7f0000001f00)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001880)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYBLOB="0008000000020000bc0012800c0101006d6163766c616e0004000280080003000300000008000100100000000a0004000180c200200300000a000400473736a1ba5d138765c1eda400ebffff020000000800070005c12005bd755c60bdb093c03dc86f493ac33e5ee8d79a464ea148013678d92ef51a6559cc565f82b7b41d9f9f0ac5677f2cf4aee83230047e3a1a19b618d28c1f5603f19e125d4d0b8a2e5d8f8d60988a33cfbac139498cf3710f46482390060ea8e16f8cc4a9b5ce87c2dac02ebaf6f1636e7381fb32", @ANYRESOCT], 0xf0}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000081) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES8=r6, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000009500000000ebff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r8 = inotify_init1(0x0) r9 = dup(r8) inotify_rm_watch(r9, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 7m43.717628792s ago: executing program 3 (id=533): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 7m43.305288629s ago: executing program 3 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) 7m27.545961868s ago: executing program 35 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) 15.346612812s ago: executing program 8 (id=1730): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000400), 0x2, 0x169880) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9}) 10.995444066s ago: executing program 7 (id=1737): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 8.931352307s ago: executing program 7 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 8.929898969s ago: executing program 5 (id=1742): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) 7.94156982s ago: executing program 7 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb0, r2, 0xac6499fd1b243c0f, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffbac7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="00032bbd7004fddbdf25106bf90debc3000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x408c1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000f67f017d0a27edcb1c00000000000000e31200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 7.892602663s ago: executing program 8 (id=1745): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b40), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, &(0x7f0000000140)='\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 6.966338568s ago: executing program 2 (id=1746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd7090504030000000e060d05"], 0x0) 6.786344028s ago: executing program 7 (id=1747): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e40), 0x40040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000ec0)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) socket$unix(0x1, 0xc17a9ab45fe0440f, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40880}, 0x24000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000101000a54000000060a09040000000000fcffff010000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f626a726566000014000280080003400000001208000540000000031400000011000100"/121], 0x7c}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xc, @multicast, 'ip6tnl0\x00'}}, 0x1e) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x8864, {@snap={0x0, 0x0, '~', "3fab95", 0x892f}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) 6.646027138s ago: executing program 6 (id=1749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 6.614379533s ago: executing program 5 (id=1750): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5.52909327s ago: executing program 6 (id=1751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 5.528768019s ago: executing program 8 (id=1752): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={r1, 0xc, 0x8}, 0x8) 5.409202825s ago: executing program 2 (id=1753): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000080)={0x1, 0x4, 0x8, 0xfff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x310, 0x0, 0x310, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @local, [0xff, 0x0, 0x0, 0xff000000], [0xff000000, 0x0, 0x0, 0xffffffff], '\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2b, 0x0, 0x4, 0x59}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x5, 0x3], 0x1, 0x4, 0x4, [@empty, @local, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4}, {0x4, 0x0, 0x1}, {0x1, 0x4, 0x7}, 0x5, 0x6}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0xff, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'veth1_to_team\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x8, 0x10, 0x1, 0x8}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x4, 0xf05f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 5.310471697s ago: executing program 8 (id=1754): write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.305362396s ago: executing program 6 (id=1755): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000400), 0x2, 0x169880) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9}) 5.166586362s ago: executing program 8 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) close(r5) 4.278014083s ago: executing program 8 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(0xffffffffffffffff, 0x8b) 4.260912381s ago: executing program 5 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.201110819s ago: executing program 5 (id=1759): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)="cacdec4b5b990a68440fc33f9ae5725ed85bef6e75a1c682", 0x18}, {&(0x7f0000000600)='\x00T', 0x2}, {&(0x7f0000000640)="685114cc8fd5340cd16509465f1f614f4e8edf1255a2ec7fa9b6a160bc78fcf81b0a7112719635d5e052344ca29bc212174b977a3aa46acdb132c40815cb83d1a861df636f", 0x45}], 0x3, 0xffffffff, 0x4) 3.074002218s ago: executing program 2 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000100)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.361979605s ago: executing program 5 (id=1762): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x818, &(0x7f0000000340), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.115708688s ago: executing program 2 (id=1763): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000b40), 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, &(0x7f0000000140)='\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 831.517241ms ago: executing program 2 (id=1764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002466c3940841706002fbb0102030109022d00013003b008090400620394982fd7090504030000000e060d05"], 0x0) 643.61847ms ago: executing program 6 (id=1765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000"], 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 366.507829ms ago: executing program 6 (id=1766): write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 194.430719ms ago: executing program 7 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 145.061347ms ago: executing program 6 (id=1768): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 98.499017ms ago: executing program 2 (id=1769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=1770): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000300000400000000000000ff1862000003000000000000", @ANYRESOCT, @ANYBLOB="000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000030000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000008c0)=[{0x1, 0x5, 0x8, 0x7}, {0x3, 0x1, 0xa, 0xb}, {0x2, 0x3, 0x5, 0xa}, {0x2, 0x1, 0x0, 0xc}, {0x3, 0x5, 0x0, 0xa}, {0x0, 0x3, 0xf, 0x5}, {0x1, 0x1, 0x9, 0xb}, {0x5, 0x3, 0x8, 0xc}, {0x0, 0x1, 0xc, 0x1}], 0x10, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@minixdf}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$eJzs3AuYjtXXMPC19t43YxJPkxyGe+1186TBJklySMghSZIkySkhIUkSEkNOSUhCzknOITlMTHI+n3JOkiRJEpJT2N+lf+/n/9b/ffver77Pe72zfte1r9nruZ+1nr1nzTP3fT/XNfN9pyFV61erVJeZ4S/Bf3xJBYAEAOgPANkBIACAkkklk64cz6Ix9a+9iPh7PTL9Wq9AXEvS/4xN+p+xSf8zNul/xib9z9ik/xmb9D9jk/4LkZFtnZHnBhkZd8jn/xmZnP//BzlcdOzX64ve1Pm/kCL9z9ik/xmb9D9jk/5nZJmv9QLENSbv///5Kv4nx6T/GZv0X4iM7Fp//izj2o5r/fMnhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECJjOOevMgDwb/NrvS4hhBBCCCGEEEL8fXzm3z2QcI0WIoQQQgghhBBCiP+HEBRoMBBAJsgMCZAFEuE6yArXQzbIDjG4AZLgRsgBN0FOyAW5IQ8kQ17IByEQWGCIID8UgDjcDAXhFkiBQlAYioCDolAMboXicBuUgNuhJNwBpeBOKA1loCyUg7ugPNwNFaAiVIJ7oDJUgapQDe6F6nAf1ID7oSY8ALXgQagND0EdeBjqwiNQDx6F+vAYNIDHoSE0gsbQBJr+X+W/BN3gZegOPSAVekIveAV6Qx/oC/2gP7wKA+A1GAivwyAYDEPgDRgKb8IweAuGwwgYCW/DKBgNY2AsjIPxMAHegYnwLkyC92AyTIGpMA2mwwyYCe/DLJgNc+ADmAsfwjyYDwtgIaTBR7AIFkM6fAxL4BNYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgKn8I22A47YCfsgt2wBz6DvfA57IMvYD98+V/MP/u7/M4ICKhQoUGDmTATJmACJmIiZsWsmA2zYQxjmIRJmANzYE7MibkxNyZjMubDfEhIyMiYH/NjHONYEAtiCqZgYSyMDh0Ww2JYHG/DElgCS2JJLIWlsDSWwTJYDstheSyPFbACVsJKWBkrY1WsivfivXgf1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgW22I7bIftsT12wA7YETtiJ+yEnbELdsGX8CV8GV/GHlhZ9cRe2At7Y2/si/2wH76KA/A1fA1fx0E4GIfgG/gGvonD8AwOxxE4EkdieTUax+BY5AZX3j4TcCJOxEk4CSfjFJyC03A6zsCZOBNn4WycjR/gXPwQP8T5OB8XYhqm4SJcjOmYjkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8VPcjttxJ+7E3bgbP8PP8HP8HAfhftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcXsALeBFfSP623u5C6waBusIoozKpTCpBJahElaiyqqwqm8qmYiqmklSSyqFyqJwqp8qtcqtklazyqXyKFClWkcqv8icAgCqoCqoUlaIKq8LKKaeKqWKquCquSqgSqqS6Q5VSd6rSqoxq4cqpcqq8aukqqIqqkqqkKqsqqqqqpqqp6qq6qqFqqJqqpqqlaqna6iFVR/XEvviIutKZ+mowNlBDsKFqpBqrJupNfEI1U8OwuWqhWqqn1Agcjq1VM9dWPaPaqTHYXj2nxuLzqqMaj53Ui6qz6qK6qpdUN9XcdVc91GTsqXqpadhb9VF9VT81C6uoKx2rql5Xg9RgNUS9oRbim2qYeksNVyPUSPW2GqVGqzFqrBqnxqsJ6h01Ub2rJqn31GQ1RU1V09R0NUPNVO+rWWq2mqM+UHPVh2qemq8WqIUqTX2kFqnFKl19rJaoT9RStUwtVyvUSrVKrVZr1Fq1Tq1XG9RGtUltVlvUVvWp2qa2qx1qp9qldqs96jO1V32u9qkv1H71pTqgvlIH1dfqkPpGHVbfqiPqO3VUfa+OqR/UcfWjOqFOqlPqJ3Va/azOqLPqnDqvLqhf1EV1SV1WXoFGrbTWRgc6k86sE3QWnaiv01n19Tqbzq5j+gadpG/UOfRNOqfOpXPrPDpZ59X5dKhJW8060vl1AR3XN+uC+hadogvpwrqIdrqoLqZv1cX1bbqEvl2X1HfoUvpOXVqX0WV1OX2XLq/v1hV0RV1J36Mr6yq6qq6m79XV9X26hr5f19QP6Fr6QV1bP6Tr6Id1Xf2Irqcf1fX1Y7qBflw31I10Y91EN9VP6Gb6Sd1ct9At9VO6lX5at9ZtdFv9jG6nn9Xt9XO6g35ed9Qv6E76Rd1Zd9Fd9SV9WXvdXffQqbqn7qVf0b11H91X99P99at6gH5ND9Sv60F6sB6i39BD9Zt6mH5LD9cj9Ej9th6lR+sxeqwep8frCfodPVG/qyfp9/RkPUVP1dP0dD1D9/2t0pzf5ff87az7z/nv/ov8gb+++ha9VX+qt+nteofeqXfp3XqP3qP36r16n96n9+v9+oA+oA/qg/qQPqQP68P6iD6ij+qj+pg+po/r4/qEPqnP65/0af2zPqPP6rP6vL6gL+iLv30PwKBRRhtjApPJZDYJJotJNNeZrOZ6k81kNzFzg0kyN5oc5iaT0+QyuU0ek2zymnwmNGSsYROZ/KaAiZubTUFzi0kxhUxhU8Q4U9QUM7f+5fw/W19T09Q0M81Mc9PctDQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0NV1NN9PNdDfdTapJNb3MK6a36WP6mn6mv3nVDDADzEAz0Awyg8wQM8QMNUPNMDPMDDfDzUgz0owyo8wYM8aMM+PMBDPBTDQTzSQzyUw2k81UM9VMN9PNTDPTzDKzzBwzx8w1c808M88sMAtMmkkzi8wik27SzRKzxCw1y8wys8KsMKvMKrPGrDHrzDqzwWwwm8wms9RsNVvNNrPN7DA7zC6zy+wxe8xes9fsM/vMfrPfHDAHzEFz0Bwyh8xhc9gcMUfMUXPUHDPHeh43x80Jc8KcMqfMaXPanDFnzDlzzlwwF8xFc9FcNpevXPYFKlCBCUyQKcgUJAQJQWKQGGQNsgbZgmxBLIgFSUFSkCO4KcgZ5ApyB3mC5CBvkC8IAwpswEEU5A8KBPHg5qBgcEuQEhQKCgdFAhcUDYoFtwbFg9uCEsHtQcngjqBUcGdQOigTlA3KBXcF5YO7gwpBxaBScE9QOagSVA2qBfcG1YP7ghrB/UHN4IGgVvBgUDt4KKgTPBzUDR4J6gWPBvWDx4IGweNBw6BR0DhoEjT9W+t7fybXk6572CNMDXuGvcJXwt5hn7Bv2C/sH74aDghfCweGr4eDwsHhkPCNcGj4ZjgsfCscHo4IR4Zvh6PC0eGYcGw4LhwfTgjfCSeG74aTwvfCyeGUcGo4LZwezghnhu+Hs8LZ4Zzwg3Bu+GE4L5wfLggXhmnhR+GicHGYHn4cLgk/CZeGy8Ll4YpwZbjq/A0A4dpwXbg+3BBuDDeFm8Mt4dbw03BbuD3cEe4Md4W7wz3hZ+He8PNwX/hFuD/8MjwQfhUeDL8OD4XfhIfDb8Mj4Xfh0fD78Fj4Q3g8/DE8EZ4MT4U/hafDn8Mz4dnwXHg+vBD+El4ML4WXQ3/l4v7K6Z0MGcpEmSiBEiiREikrZaVslI1iFKMkSqIclINyUk7KTbkpmZIpH+WjK5iY8lN+ilOcClJBSqEUKkyFyZGjYlSMilNxKkElqCSVpFJUikpTaSpLZekuuovuprupIlWke+geqkJVqBpVo+pUnWpQDapJNakW1aLaVJvqUB2qS3WpHtWj+lSfGlADakgNqTE1pqbUlJpRM2pOzakltaRW1IpaU2tqS22pHbWj9tSeOlAH6kgdqRN1os7UmbpSV+pG3ag7dadUSqVe1It6U2/qS32pP/WnATSABtJAGkSDaAgNoaE0lIbRMBpOI2gkvU2jaDSNobE0jsbTBJpAE2kiTaJJNJkm01SaStNpOs2kmTSLZtEcmkNzaS7No3m0gBZQGqXRIlpE6ZROS2gJLaWltJyW00paSatpNa2ltbSe1tNG2kibaTNtpa20jbbRDtpBu2gX7aE9tJf20j7aR/tpPx2gA3SQDtIhOkSH6TAdoSN0lI7SMTpGx+k4naATdIpO0Wk6TWfoDJ2jc3SBfqGLdIkuk6cEqyDRXmez2uttNpvdJtgs9p/j3DaPTbZ5bT4b2pw217+LyVqbYgvZwraIdbaoLWZv/UNc2paxZW05e5ctb++2Ff4QV7f32Rr2flvTPmCr2Xt/izP/GteyD9ra9jFbxz5u69pGtp5tYuvbx2wD+7htaBvZxraJbWWftq1tG9vWPmPb2Wf/EC+yi+1au86utxvsXvu5PWfP26P2e3vB/mK72x62v33VDrCv2YH2dTvIDv5DPNK+bUfZ0XaMHWvH2fF/iKfaaXa6nWFn2vftLDv7D3Ga/cjOtel2np1vF9iFv8ZX1pRuP7ZL7Cd2qV1ml9sVdqVdZVfbNf97rSvsJrvZbrF77Gd2m91ud9iddpfd/Wt8ZR/77Bd2v/3SHrHf2YP2a3vIHrOH7be/xlf2d8z+YI/bH+0Je9Kesj/Z0/Zne8ae/XX/V/b+k71kL1tvgZEVazYccCbOzAmchRP5Os7K13M2zs4xvoGT+EbOwTdxTs7FuTkPJ3NezschE1tmjjg/F+A438wF+RZO4UJcmIuw46JcjG/l4nwbl+DbuSTfwaX4Ti7NZbgsl+O7uDzfzRW4Ilfie7gyV+GqXI3v5ep8H9fg+7kmP8C1+EGuzQ9xHX6Y6/IjXI8f5fr8GDfgx7khN+LG3ISb8hPcjJ/k5tyCW/JT3Iqf5tbchtvyM9yOn+X2/Bx34Oe5I7/AnfhF7sxduCu/xN34Ze7OPTiVe3IvfoV7cx/uy/24P7/KA/g1Hsiv8yAezEP4DR7Kb/IwfouH8wgeyW/zKB7NY3gsj+PxPIHf4bNpbXJfudabzFN4Kk/j6TyDZ/L7PItn8xz+gOfyhzyP5/MCXshp/BEv4sWczh/zEv6El/IyXs4reCWv4tW8htfyOl7PG3gjb+LNvIW38qe8jbfzDt7Ju3g37+HPeC9/zvv4C97PX/IB/ooP8td8iL/hw/wtH+Hv+Ch/z8f4Bz7OP/IJPsmn+Cc+zT/zGT7L5/g8X+Bf+CJf4svsGSKMVKQjEwVRpihzlBBliRKj66Ks0fVRtih7FItuiJKiG6Mc0U1RzihXlDvKEyVHeaN8URhRZCOOoih/VCCKRzdHBaNbopSoUFQ4KhK5qGhULLo1Kh7dFpWIbo9KRndEpaI7o9JRmeixB8pFd0Xlo7ujClHFqFJ0T1Q5qhJVjapF90bVo/uiGtH9Uc3ogahE9GBUO3ooqhM9HNWNHonqRY9G9aPHogbR41HDqFHUOGoSNY2eiJpFT0bNoxZRy+ipqFX0dNQ6ahO1jZ6J2kXP/unx1Khn1Ct6JXol8v5+vSC+MJ4W/yi+KL44nh7/OL4k/kl8aXxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHN8S9z7apnBoVNOO+MCl8lldgkui0t017ms7nqXzWV3MXeDS3I3uhzuJpfT5XK5XR6X7PK6fC505KxjF7n8roCLu5tdQXeLS3GFXGFXxDlX1BVzTVxT19Q1CwDAtXAt3VPuKfe0e9q1cW3cM66de9a1d8+5Du5519G94F5wL7rOrovr6l5y3dzLrrvr4VJdquvlernerrfr6/q6/q6/G+AGuIFuoBvkBrkhbogb6oa6YW6YG+6Gu5FupBvlRrkxbowb58a5CW6Cm+gmuklukpvsJrupbqqb7qa7mW6mm+VmuTlujpubMtfNc/PcArfApbk0t8gtcuku3S1xS9xSt9Qtd8vdSrfSrXar3Vq31q13691Gt9FtdpvdVrfVbXPb3A63w+1yu9wet8ftdXvdPrfP7Xf73QF3wB10B90h94077L51R9x37qj73h1zP7jj7kd3wp10p9xP7rT72Z1xZ905d95dcL+4i+6Su+y8mxB7JzYx9m5sUuy92OTYlNjU2LTY9NiM2MzY+7FZsdmxObEPYnNjH8bmxebHFsQWxtJiH8UWxRbH0mMfx5bEPoktjS2LLY+tiK2MrYp5n3db5PP7Aj7ub/YF/S0+xRfyhX0R73xRX8zf6ov723wJf7sv6e/wpfydvrQv48v6x31D38g39k18U/+Eb+af9M19C9/SP+Vb+ad9a9/Gt/XP+Hb+Wd/eP+c7+Od9R/+C7+Rf9J19F9/Vv+S7+Zd9d9/Dp/qevpd/xff2fXxf38/396/6Af41P9C/7gf5wX6If8MP9W/6Yf4tP9yP8CP9236UH+3H+LF+nB/vJ/h3/ET/rp/k3/OT/RQ/1U/z0/0MP9O/72f52X6O/8DP9R/6eX6+X+AX+jT/kV/kF/t0/7Ff4j/xS/0yv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9p36b3+53+J1+l9/t9/jP/F7/ud/nv/D7/Zf+gP/KH/Rf+0P+G3/Yf+uP+O/8Uf+9P+Z/8Mf9j/6EP+lP+Z/8af+zP+PP+nP+vL/gf/EX/SV/Wf5mTQghhBDi/4j+k+M9/8Vj6rdxRS8AuH57nsO/r7kx5z/mfVRyqxgAPNOj0yP/NipXTk1N/e25SzUEBeYDQOxqfia4Gi+DlvA0tIUWUPxfrq+P6nKB/6R+/A6AxKuVf5UIv69/239Q/4mnRi4qFZ1L+k/qzwdIKXA1Jwtcja/WL/Ef1M/V7E/Wn+XrCQDN/yknK1yNr9YvBk/Cs9D23z1TCCGEEEIIIYT4hz6qbIc/u3++cn+ebK7mZIar8Z/dnwshhBBCCCGEEOLae75L1zZPtG3booNM/sKkwn+PZfxtk3vOAPy1Otnh2u9CJn9lcq1/MwkhhBBCCCH+blcv+q/1SoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiIzr/8e/E7vWexRCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGutf8VAAD//+hhNEE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000680)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) clock_gettime(0x0, 0x0) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x38}}) kernel console output (not intermixed with test programs): .120315][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.071579][ T7364] hsr_slave_1: entered promiscuous mode [ 283.078007][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.095862][ T7364] Cannot create hsr debugfs directory [ 283.578319][ T7135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.519851][ T5150] Bluetooth: hci2: command tx timeout [ 286.029503][ T7583] loop3: detected capacity change from 0 to 2048 [ 286.052003][ T7583] EXT4-fs: inline encryption not supported [ 286.069683][ T7583] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.077214][ T7583] ext4: Unknown parameter 'audit' [ 286.620543][ T5150] Bluetooth: hci2: command tx timeout [ 286.925002][ T7135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.099987][ T7556] chnl_net:caif_netlink_parms(): no params data found [ 287.156774][ T7588] Invalid ELF header magic: != ELF [ 288.759904][ T5150] Bluetooth: hci2: command tx timeout [ 290.739188][ T7612] netlink: 'syz.2.379': attribute type 12 has an invalid length. [ 290.829749][ T5150] Bluetooth: hci2: command tx timeout [ 291.103091][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.119427][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.321597][ T7556] bridge_slave_0: entered allmulticast mode [ 291.323031][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.331162][ T7556] bridge_slave_0: entered promiscuous mode [ 291.342765][ T3458] bridge_slave_1: left allmulticast mode [ 291.349350][ T3458] bridge_slave_1: left promiscuous mode [ 291.355273][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.356501][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.372849][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.394515][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.395684][ T3458] bridge_slave_0: left allmulticast mode [ 291.431427][ T3458] bridge_slave_0: left promiscuous mode [ 291.441033][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.041034][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.887998][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.901732][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.914897][ T3458] bond0 (unregistering): Released all slaves [ 292.972938][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.980842][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.988239][ T7556] bridge_slave_1: entered allmulticast mode [ 293.008000][ T7556] bridge_slave_1: entered promiscuous mode [ 293.278192][ T3458] hsr_slave_0: left promiscuous mode [ 293.305352][ T3458] hsr_slave_1: left promiscuous mode [ 293.325348][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.338656][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.573240][ T3458] veth1_macvtap: left promiscuous mode [ 293.578877][ T3458] veth0_macvtap: left promiscuous mode [ 293.585374][ T3458] veth1_vlan: left promiscuous mode [ 293.591314][ T3458] veth0_vlan: left promiscuous mode [ 294.122929][ T5150] Bluetooth: hci3: command tx timeout [ 296.259580][ T5150] Bluetooth: hci3: command tx timeout [ 296.419775][ T30] audit: type=1326 audit(1750807029.628:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd058e929 code=0x7fc00000 [ 296.444116][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 296.517587][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 297.704146][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.727344][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.227337][ T7556] team0: Port device team_slave_0 added [ 298.269840][ T5150] Bluetooth: hci3: command tx timeout [ 298.837132][ T7556] team0: Port device team_slave_1 added [ 298.941475][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.948480][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.997901][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.231991][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.240966][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.280551][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.450947][ T7364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.915350][ T7364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.066783][ T7364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.108901][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 300.349895][ T5150] Bluetooth: hci3: command tx timeout [ 300.356823][ T7364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.450529][ T7682] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 301.059970][ T7556] hsr_slave_0: entered promiscuous mode [ 301.102474][ T7556] hsr_slave_1: entered promiscuous mode [ 301.357033][ T7695] input: syz1 as /devices/virtual/input/input7 [ 303.350747][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.373468][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.384144][ T7621] bridge_slave_0: entered allmulticast mode [ 303.401463][ T7621] bridge_slave_0: entered promiscuous mode [ 303.451989][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.459189][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.493303][ T7621] bridge_slave_1: entered allmulticast mode [ 303.502261][ T7621] bridge_slave_1: entered promiscuous mode [ 305.092437][ T7710] loop3: detected capacity change from 0 to 40427 [ 305.504508][ T7710] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.788136][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.448385][ T7724] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 308.282206][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.581127][ T7621] team0: Port device team_slave_0 added [ 308.794357][ T7621] team0: Port device team_slave_1 added [ 309.525924][ T30] audit: type=1326 audit(1750807042.758:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.530761][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.575587][ T7732] evm: overlay not supported [ 309.580962][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.582035][ T30] audit: type=1326 audit(1750807042.788:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.630937][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.633195][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.633214][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.633260][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.691868][ T30] audit: type=1326 audit(1750807042.788:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.714280][ T30] audit: type=1326 audit(1750807042.788:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.779748][ T30] audit: type=1326 audit(1750807042.788:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.829767][ T30] audit: type=1326 audit(1750807042.788:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.897492][ T30] audit: type=1326 audit(1750807042.788:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.942243][ T30] audit: type=1326 audit(1750807042.788:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 309.975306][ T30] audit: type=1326 audit(1750807042.788:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f254838d197 code=0x7ffc0000 [ 310.227619][ T30] audit: type=1326 audit(1750807042.798:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254838e929 code=0x7ffc0000 [ 311.245683][ T7621] hsr_slave_0: entered promiscuous mode [ 311.281695][ T7621] hsr_slave_1: entered promiscuous mode [ 311.288151][ T7621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.593063][ T7621] Cannot create hsr debugfs directory [ 311.904706][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.201057][ T7747] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 314.040084][ T7754] loop3: detected capacity change from 0 to 40427 [ 314.453228][ T7754] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.483744][ T7364] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.465457][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.472739][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.225944][ T3458] bridge_slave_1: left allmulticast mode [ 316.254221][ T3458] bridge_slave_1: left promiscuous mode [ 316.274231][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.295689][ T3458] bridge_slave_0: left allmulticast mode [ 316.321454][ T3458] bridge_slave_0: left promiscuous mode [ 316.327282][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.735091][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.766540][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.791327][ T3458] bond0 (unregistering): Released all slaves [ 317.840927][ T7766] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 317.848722][ T7766] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 317.857131][ T7766] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 317.865054][ T7766] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 318.113244][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.122885][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.132030][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.148074][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.159421][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.207875][ T3458] hsr_slave_0: left promiscuous mode [ 318.215852][ T3458] hsr_slave_1: left promiscuous mode [ 318.225670][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.237278][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.866620][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 319.715300][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 320.241279][ T5829] Bluetooth: hci4: command tx timeout [ 322.953986][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.965811][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.975036][ T5829] Bluetooth: hci4: command tx timeout [ 323.799338][ T7788] loop3: detected capacity change from 0 to 40427 [ 324.258801][ T7788] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.868748][ T7786] team0 (unregistering): Port device team_slave_0 removed [ 324.909461][ T7786] team0 (unregistering): Port device team_slave_1 removed [ 324.992528][ T5829] Bluetooth: hci4: command tx timeout [ 325.221712][ T7556] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.349767][ T7556] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.410983][ T7556] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.670019][ T7556] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.361766][ T5829] Bluetooth: hci4: command tx timeout [ 328.092441][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.278805][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 328.603184][ T7824] team0 (unregistering): Port device team_slave_0 removed [ 328.631058][ T7824] team0 (unregistering): Port device team_slave_1 removed [ 328.881093][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.747737][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.754923][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.862962][ T7556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.873674][ T7556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.994279][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.001538][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.979799][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.987445][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.027054][ T7767] bridge_slave_0: entered allmulticast mode [ 331.089777][ T7767] bridge_slave_0: entered promiscuous mode [ 331.474202][ T7857] input: syz1 as /devices/virtual/input/input8 [ 331.629967][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.637160][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.645455][ T7767] bridge_slave_1: entered allmulticast mode [ 331.654900][ T7767] bridge_slave_1: entered promiscuous mode [ 331.766998][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.862076][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.938071][ T7621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.970939][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.084906][ T7767] team0: Port device team_slave_0 added [ 332.276256][ T7621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.421680][ T7872] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 332.429698][ T7872] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 332.438650][ T7872] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 332.446639][ T7872] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 333.102940][ T7767] team0: Port device team_slave_1 added [ 333.109159][ T7621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 333.161246][ T7621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.197263][ T3458] bridge_slave_1: left allmulticast mode [ 333.208230][ T3458] bridge_slave_1: left promiscuous mode [ 333.215584][ T3458] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.231704][ T3458] bridge_slave_0: left allmulticast mode [ 333.237893][ T3458] bridge_slave_0: left promiscuous mode [ 333.257433][ T3458] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.746726][ T3458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.770150][ T3458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.791459][ T3458] bond0 (unregistering): Released all slaves [ 334.923005][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.940502][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.982076][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.116533][ T3458] hsr_slave_0: left promiscuous mode [ 335.125978][ T3458] hsr_slave_1: left promiscuous mode [ 335.151111][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.169428][ T3458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.401927][ T3458] team0 (unregistering): Port device team_slave_1 removed [ 336.458475][ T3458] team0 (unregistering): Port device team_slave_0 removed [ 336.856995][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.865923][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.892773][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.995180][ T7767] hsr_slave_0: entered promiscuous mode [ 337.005575][ T7767] hsr_slave_1: entered promiscuous mode [ 337.013211][ T7767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.035050][ T7767] Cannot create hsr debugfs directory [ 337.707310][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.820901][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.830559][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.840886][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.858305][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.865614][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.895163][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.087333][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.094598][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.166391][ T7923] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 338.174355][ T7923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 338.186899][ T7923] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 338.194830][ T7923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 338.236450][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.243811][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.335767][ T7621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.441373][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.746554][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 339.951750][ T5829] Bluetooth: hci5: command tx timeout [ 340.252099][ T7941] loop3: detected capacity change from 0 to 2048 [ 340.409226][ T7941] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.666475][ T7767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 341.741609][ T7767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 341.811230][ T7960] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 341.824601][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.848512][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.862840][ T7920] bridge_slave_0: entered allmulticast mode [ 341.886076][ T7920] bridge_slave_0: entered promiscuous mode [ 341.907375][ T7767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 341.927531][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.943721][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.952461][ T7920] bridge_slave_1: entered allmulticast mode [ 341.970172][ T7920] bridge_slave_1: entered promiscuous mode [ 342.016384][ T7767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.029873][ T5829] Bluetooth: hci5: command tx timeout [ 342.343903][ T7944] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 342.373213][ T12] bridge_slave_1: left allmulticast mode [ 342.378916][ T12] bridge_slave_1: left promiscuous mode [ 342.534240][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.696777][ T12] bridge_slave_0: left allmulticast mode [ 342.767567][ T12] bridge_slave_0: left promiscuous mode [ 342.835960][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.078144][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 344.110249][ T5829] Bluetooth: hci5: command tx timeout [ 344.378991][ T7993] loop3: detected capacity change from 0 to 512 [ 344.535532][ T7993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.558874][ T7993] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.578537][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.760258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.782173][ T12] bond0 (unregistering): Released all slaves [ 345.822627][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.930430][ T7621] veth0_vlan: entered promiscuous mode [ 345.958853][ T7621] veth1_vlan: entered promiscuous mode [ 345.962548][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.214407][ T5829] Bluetooth: hci5: command tx timeout [ 346.286502][ T8003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.298991][ T8003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.312098][ T8003] bond0 (unregistering): Released all slaves [ 346.334910][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.204012][ T12] hsr_slave_0: left promiscuous mode [ 347.222634][ T12] hsr_slave_1: left promiscuous mode [ 347.420707][ T8021] loop3: detected capacity change from 0 to 256 [ 347.441402][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.462868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.884862][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.893704][ T8025] FAT-fs (loop3): Filesystem has been set read-only [ 347.900442][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.909167][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.918001][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.927686][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.936473][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.945364][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.954274][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.963080][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 347.971869][ T8025] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 348.017229][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 348.017252][ T30] audit: type=1800 audit(1750807081.218:215): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.479" name="file1" dev="loop3" ino=1048613 res=0 errno=0 [ 348.471244][ T8032] loop3: detected capacity change from 0 to 2048 [ 348.489347][ T8032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 349.751469][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.860730][ T8044] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 350.612367][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.621937][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.634559][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.643964][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.653267][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.983905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 351.029679][ T12] team0 (unregistering): Port device team_slave_0 removed [ 351.604213][ T7920] team0: Port device team_slave_0 added [ 351.633392][ T7920] team0: Port device team_slave_1 added [ 352.749848][ T5150] Bluetooth: hci2: command tx timeout [ 352.818366][ T8073] loop3: detected capacity change from 0 to 256 [ 352.902142][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.929757][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.967205][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.985402][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.049072][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.093097][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.149782][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.158574][ T8075] FAT-fs (loop3): Filesystem has been set read-only [ 353.165347][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.174133][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.182982][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.191959][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.201014][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.209882][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.218707][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.227549][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.238697][ T8075] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 353.251604][ T30] audit: type=1800 audit(1750807086.478:216): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.487" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 353.448415][ T7920] hsr_slave_0: entered promiscuous mode [ 353.470952][ T7920] hsr_slave_1: entered promiscuous mode [ 354.939686][ T5150] Bluetooth: hci2: command tx timeout [ 354.983386][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.636686][ T8086] loop3: detected capacity change from 0 to 40427 [ 355.963844][ T8086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 356.989947][ T5150] Bluetooth: hci2: command tx timeout [ 357.001066][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.146016][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.153239][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.219555][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.226809][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.339874][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 357.756632][ T8100] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 358.523000][ T7767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.556457][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.568652][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.582019][ T8049] bridge_slave_0: entered allmulticast mode [ 358.594907][ T8049] bridge_slave_0: entered promiscuous mode [ 358.653430][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.663497][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.673235][ T8049] bridge_slave_1: entered allmulticast mode [ 358.686632][ T8049] bridge_slave_1: entered promiscuous mode [ 358.731702][ T12] bridge_slave_1: left allmulticast mode [ 358.737505][ T12] bridge_slave_1: left promiscuous mode [ 358.745097][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.767091][ T12] bridge_slave_0: left allmulticast mode [ 358.772937][ T12] bridge_slave_0: left promiscuous mode [ 358.779653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.111528][ T5150] Bluetooth: hci2: command tx timeout [ 359.450082][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.462572][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.474968][ T12] bond0 (unregistering): Released all slaves [ 359.586322][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.666186][ T8117] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 360.483705][ T12] hsr_slave_0: left promiscuous mode [ 360.501406][ T12] hsr_slave_1: left promiscuous mode [ 360.530588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.550175][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.576498][ T12] veth1_vlan: left promiscuous mode [ 360.586132][ T12] veth0_vlan: left promiscuous mode [ 360.845443][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 363.374479][ T8130] loop3: detected capacity change from 0 to 40427 [ 363.963953][ T8130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 364.801537][ T12] team0 (unregistering): Port device team_slave_1 removed [ 364.934536][ T12] team0 (unregistering): Port device team_slave_0 removed [ 365.899042][ T8140] loop3: detected capacity change from 0 to 16 [ 365.936771][ T8140] erofs (device loop3): mounted with root inode @ nid 36. [ 366.304433][ T8142] syz.3.498: attempt to access beyond end of device [ 366.304433][ T8142] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 366.319790][ T8142] erofs (device loop3): read error -5 @ 43 of nid 36 [ 366.961140][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.260809][ T8049] team0: Port device team_slave_0 added [ 367.270872][ T7920] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.523606][ T8049] team0: Port device team_slave_1 added [ 367.650452][ T8160] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 368.379868][ T7920] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.448085][ T7920] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.557402][ T7920] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 368.595805][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.629251][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.703884][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.723148][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.730535][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.757217][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.905552][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.734189][ T8049] hsr_slave_0: entered promiscuous mode [ 369.757343][ T8049] hsr_slave_1: entered promiscuous mode [ 369.774292][ T8049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.809763][ T8049] Cannot create hsr debugfs directory [ 370.434556][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.708151][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.735464][ T7767] veth0_vlan: entered promiscuous mode [ 370.804631][ T7767] veth1_vlan: entered promiscuous mode [ 370.915619][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.922846][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.936633][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.943949][ T6115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.091024][ T7767] veth0_macvtap: entered promiscuous mode [ 371.106617][ T7767] veth1_macvtap: entered promiscuous mode [ 371.367592][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.398120][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.127219][ T6143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.171540][ T8213] loop3: detected capacity change from 0 to 16 [ 372.193403][ T6143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.220509][ T6143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.235335][ T8213] erofs (device loop3): mounted with root inode @ nid 36. [ 372.341201][ T6143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.911953][ T8223] syz.3.507: attempt to access beyond end of device [ 372.911953][ T8223] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 372.926668][ T8223] erofs (device loop3): read error -5 @ 43 of nid 36 [ 373.069961][ T8225] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 373.957136][ T8232] loop3: detected capacity change from 0 to 2048 [ 374.003010][ T8232] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 374.175749][ T8232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.188576][ T8232] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.271116][ T8232] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.510: invalid fast symlink length 39 [ 374.617243][ T5830] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.571528][ T8247] fuse: Bad value for 'fd' [ 375.647110][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.693805][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.749978][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.905619][ T6143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.933876][ T6143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.091485][ T8049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.166687][ T8049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.211406][ T8049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.242247][ T8049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.724302][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.939463][ T8291] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 378.533156][ T7920] veth0_vlan: entered promiscuous mode [ 378.546159][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.618782][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.626088][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.731733][ T7920] veth1_vlan: entered promiscuous mode [ 378.821545][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.828806][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.948575][ T7920] veth0_macvtap: entered promiscuous mode [ 378.994053][ T7920] veth1_macvtap: entered promiscuous mode [ 379.033855][ T8297] fuse: Bad value for 'fd' [ 379.164988][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.289246][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.520'. [ 380.585586][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.310051][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.392771][ T6202] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.404524][ T6202] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.416016][ T6202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.955011][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.319823][ T8337] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 384.706856][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.868524][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.983589][ T6112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.043230][ T6112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.333916][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.463737][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 385.971339][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.479689][ T8365] loop7: detected capacity change from 0 to 512 [ 386.502516][ T8365] EXT4-fs: Ignoring removed nobh option [ 386.771568][ T8365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.501977][ T8049] veth0_vlan: entered promiscuous mode [ 387.515999][ T8049] veth1_vlan: entered promiscuous mode [ 387.607488][ T8049] veth0_macvtap: entered promiscuous mode [ 387.678888][ T8049] veth1_macvtap: entered promiscuous mode [ 387.698042][ T8383] loop6: detected capacity change from 0 to 256 [ 387.787990][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.119406][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.131106][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.139954][ T8387] FAT-fs (loop6): Filesystem has been set read-only [ 388.146658][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.155537][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.164778][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.174880][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.189722][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.259717][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.319691][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.349776][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.401920][ T8387] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 388.640618][ T30] audit: type=1800 audit(1750807121.798:217): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.537" name="file1" dev="loop6" ino=1048623 res=0 errno=0 [ 388.998618][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.142976][ T6113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.155509][ T6113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.182145][ T6113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.237145][ T6113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.099905][ T8403] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 392.084448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.125505][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.193650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.236824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.323972][ T8415] overlayfs: failed to clone upperpath [ 393.707308][ T8433] loop5: detected capacity change from 0 to 512 [ 393.738949][ T8433] EXT4-fs: Ignoring removed nobh option [ 394.461810][ T8433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.182468][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.227857][ T8461] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 396.236028][ T8461] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 396.244583][ T8461] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 396.252468][ T8461] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 397.529006][ T8472] overlayfs: failed to clone upperpath [ 400.845076][ T30] audit: type=1326 audit(1750807134.078:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 400.949721][ T30] audit: type=1326 audit(1750807134.078:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 401.055733][ T30] audit: type=1326 audit(1750807134.078:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 401.214317][ T30] audit: type=1326 audit(1750807134.078:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 401.356988][ T8531] Bluetooth: MGMT ver 1.23 [ 402.658789][ T30] audit: type=1326 audit(1750807134.078:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 402.683278][ T30] audit: type=1326 audit(1750807134.078:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 402.875545][ T30] audit: type=1326 audit(1750807134.078:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 403.030135][ T30] audit: type=1326 audit(1750807134.078:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7b3618d197 code=0x7ffc0000 [ 403.180133][ T30] audit: type=1326 audit(1750807134.078:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 403.293229][ T30] audit: type=1326 audit(1750807134.098:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 404.012130][ T8517] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 404.210381][ T8517] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 404.391477][ T8517] F2FS-fs (loop4): Unable to read 2th superblock [ 406.619987][ T30] audit: type=1326 audit(1750807134.118:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 406.824482][ T30] audit: type=1326 audit(1750807134.138:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 406.949771][ T30] audit: type=1326 audit(1750807134.138:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 407.201522][ T30] audit: type=1326 audit(1750807134.138:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 407.232525][ T30] audit: type=1326 audit(1750807134.138:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 407.356339][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 407.642016][ T30] audit: type=1326 audit(1750807134.138:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 407.990255][ T30] audit: type=1326 audit(1750807134.148:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 408.073807][ T8570] overlayfs: failed to clone upperpath [ 408.132194][ T30] audit: type=1326 audit(1750807134.148:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 408.453919][ T30] audit: type=1326 audit(1750807134.148:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.7.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3618e929 code=0x7ffc0000 [ 408.517311][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.531467][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.545837][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.556663][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.568868][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.563417][ T8604] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.574048][ T8604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 409.584744][ T8604] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.593038][ T8604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 410.463561][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 410.681990][ T5150] Bluetooth: hci3: command tx timeout [ 412.750751][ T5150] Bluetooth: hci3: command tx timeout [ 414.570170][ T8636] loop6: detected capacity change from 0 to 128 [ 414.840000][ T5150] Bluetooth: hci3: command tx timeout [ 414.865090][ T8379] syz_tun (unregistering): left allmulticast mode [ 414.983114][ T8379] syz_tun (unregistering): left promiscuous mode [ 415.133410][ T8379] bridge0: port 3(syz_tun) entered disabled state [ 416.175571][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.227066][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.236164][ T8580] bridge_slave_0: entered allmulticast mode [ 416.247153][ T8580] bridge_slave_0: entered promiscuous mode [ 416.270373][ T8637] bridge1: entered allmulticast mode [ 416.910109][ T5150] Bluetooth: hci3: command tx timeout [ 418.118455][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.303632][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.330979][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.365327][ T8580] bridge_slave_1: entered allmulticast mode [ 418.407795][ T8671] cgroup: name respecified [ 418.418000][ T8580] bridge_slave_1: entered promiscuous mode [ 418.747972][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.841217][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.119476][ T8689] overlayfs: failed to clone upperpath [ 419.138300][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.269389][ T8692] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.277749][ T8692] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 419.286501][ T8692] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.294405][ T8692] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 419.440957][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.786548][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.948683][ T8705] loop6: detected capacity change from 0 to 128 [ 420.285301][ T8705] bridge2: entered allmulticast mode [ 420.786952][ T8580] team0: Port device team_slave_0 added [ 421.032984][ T8580] team0: Port device team_slave_1 added [ 423.259434][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.266837][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.299822][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.313306][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.343360][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.380039][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.545899][ T8722] loop6: detected capacity change from 0 to 16 [ 423.579229][ T8722] erofs (device loop6): mounted with root inode @ nid 36. [ 423.741516][ T8725] overlayfs: failed to clone upperpath [ 423.751265][ T8580] hsr_slave_0: entered promiscuous mode [ 423.792015][ T8580] hsr_slave_1: entered promiscuous mode [ 423.815931][ T8580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.834170][ T8580] Cannot create hsr debugfs directory [ 423.993222][ T8728] syz.6.615: attempt to access beyond end of device [ 423.993222][ T8728] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 424.007725][ T8728] erofs (device loop6): read error -5 @ 43 of nid 36 [ 424.808357][ T37] bridge_slave_1: left allmulticast mode [ 424.839809][ T37] bridge_slave_1: left promiscuous mode [ 424.866074][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.901045][ T37] bridge_slave_0: left allmulticast mode [ 424.918406][ T37] bridge_slave_0: left promiscuous mode [ 425.143205][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.674115][ T8739] loop6: detected capacity change from 0 to 40427 [ 425.944237][ T8739] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 426.938404][ T8759] loop7: detected capacity change from 0 to 16 [ 426.966804][ T8759] erofs (device loop7): mounted with root inode @ nid 36. [ 427.647144][ T8765] syz.7.628: attempt to access beyond end of device [ 427.647144][ T8765] loop7: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 427.661183][ T8765] erofs (device loop7): read error -5 @ 43 of nid 36 [ 429.675912][ T8780] loop6: detected capacity change from 0 to 2048 [ 429.960367][ T8781] loop7: detected capacity change from 0 to 40427 [ 430.139073][ T8781] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 430.156040][ T8780] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.448162][ T8804] loop5: detected capacity change from 0 to 16 [ 430.524162][ T8805] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 430.629172][ T8804] erofs (device loop5): mounted with root inode @ nid 36. [ 431.598529][ T8811] syz.5.641: attempt to access beyond end of device [ 431.598529][ T8811] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 431.613173][ T8811] erofs (device loop5): read error -5 @ 43 of nid 36 [ 433.486059][ T8800] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 434.086731][ T8828] loop5: detected capacity change from 0 to 2048 [ 434.606402][ T8828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.726107][ T37] hsr_slave_0: left promiscuous mode [ 435.052044][ T37] hsr_slave_1: left promiscuous mode [ 435.088703][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.131001][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.440596][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.455347][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.495937][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.519169][ T8841] loop7: detected capacity change from 0 to 40427 [ 435.601077][ T37] veth1_macvtap: left promiscuous mode [ 435.624629][ T37] veth0_macvtap: left promiscuous mode [ 435.669990][ T37] veth1_vlan: left promiscuous mode [ 435.689772][ T8841] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 435.720367][ T37] veth0_vlan: left promiscuous mode [ 436.208112][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 436.290294][ T8852] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 440.881015][ T8884] loop5: detected capacity change from 0 to 512 [ 440.888331][ T8884] EXT4-fs: Ignoring removed nobh option [ 440.983158][ T8884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.245486][ T8889] loop7: detected capacity change from 0 to 2048 [ 441.297393][ T8887] loop6: detected capacity change from 0 to 40427 [ 441.360399][ T8889] EXT4-fs (loop7): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.477766][ T8887] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 442.084741][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.352041][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 442.372126][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 445.410721][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.417270][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.121905][ T8925] loop6: detected capacity change from 0 to 40427 [ 446.235977][ T8925] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 446.285781][ T8580] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 446.317157][ T8580] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 446.353031][ T8580] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 446.404020][ T8580] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 446.633096][ T8940] loop5: detected capacity change from 0 to 2048 [ 446.747952][ T8940] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.820954][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.845922][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.900120][ T8947] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 448.405720][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 448.422180][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.429452][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.456079][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.463380][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.831915][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 449.108504][ T8965] loop6: detected capacity change from 0 to 128 [ 449.286999][ T8965] bridge3: entered allmulticast mode [ 450.382391][ T8972] loop5: detected capacity change from 0 to 2048 [ 450.465987][ T8972] EXT4-fs: inline encryption not supported [ 450.541754][ T8972] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.606017][ T8972] ext4: Unknown parameter 'audit' [ 450.649150][ T8975] loop7: detected capacity change from 0 to 16 [ 450.822088][ T8975] erofs (device loop7): mounted with root inode @ nid 36. [ 452.202673][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.284525][ T8580] veth0_vlan: entered promiscuous mode [ 455.576377][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.694'. [ 455.754105][ T8580] veth1_vlan: entered promiscuous mode [ 455.954506][ T8580] veth0_macvtap: entered promiscuous mode [ 456.043011][ T8580] veth1_macvtap: entered promiscuous mode [ 456.804551][ T9035] loop6: detected capacity change from 0 to 128 [ 457.031521][ T9035] bridge4: entered allmulticast mode [ 457.374516][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.547471][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.733329][ T65] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.043747][ T65] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.939749][ T65] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.046401][ T65] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.232029][ T9056] loop5: detected capacity change from 0 to 16 [ 459.314440][ T9056] erofs (device loop5): mounted with root inode @ nid 36. [ 459.955519][ T9063] syz.5.703: attempt to access beyond end of device [ 459.955519][ T9063] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 459.969826][ T9063] erofs (device loop5): read error -5 @ 43 of nid 36 [ 461.187184][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.699606][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.853623][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 463.448612][ T6115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.295788][ T6115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.462624][ T9090] loop7: detected capacity change from 0 to 512 [ 464.670612][ T9090] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.710: bg 0: block 16: invalid block bitmap [ 465.540659][ T9090] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 465.589857][ T9090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.710: invalid indirect mapped block 5 (level 0) [ 465.661755][ T9090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.710: invalid indirect mapped block 4294967295 (level 1) [ 465.729085][ T9090] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.710: invalid indirect mapped block 4294967295 (level 2) [ 465.844075][ T9090] EXT4-fs (loop7): 1 truncate cleaned up [ 465.883768][ T9090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.085498][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.609082][ T9128] usb usb8: usbfs: process 9128 (syz.6.719) did not claim interface 0 before use [ 468.967381][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.979336][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.998168][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.013049][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.022457][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.330382][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 470.643980][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.070595][ T5829] Bluetooth: hci1: command tx timeout [ 471.117556][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.739500][ T9180] loop5: detected capacity change from 0 to 128 [ 473.075014][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 473.149772][ T5829] Bluetooth: hci1: command tx timeout [ 474.287000][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.658406][ T9200] loop6: detected capacity change from 0 to 2048 [ 475.018930][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.229741][ T5150] Bluetooth: hci1: command tx timeout [ 475.308909][ T9207] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.723291][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 476.117981][ T9200] NILFS (loop6): error -2 truncating bmap (ino=16) [ 476.447032][ T9207] NILFS (loop6): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 476.474588][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 476.490762][ T9207] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16) [ 476.509470][ T9207] Remounting filesystem read-only [ 476.559927][ T7767] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 477.310644][ T5150] Bluetooth: hci1: command tx timeout [ 477.742869][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.765190][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.781652][ T9131] bridge_slave_0: entered allmulticast mode [ 477.795510][ T9131] bridge_slave_0: entered promiscuous mode [ 477.978015][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.986414][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.441926][ T9256] loop6: detected capacity change from 0 to 128 [ 479.886292][ T9131] bridge_slave_1: entered allmulticast mode [ 480.524732][ T9131] bridge_slave_1: entered promiscuous mode [ 480.715575][ T36] bridge_slave_1: left allmulticast mode [ 480.732813][ T36] bridge_slave_1: left promiscuous mode [ 480.758027][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.797680][ T36] bridge_slave_0: left allmulticast mode [ 480.860806][ T36] bridge_slave_0: left promiscuous mode [ 480.898053][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.140754][ T9272] overlayfs: missing 'lowerdir' [ 483.513988][ T9284] loop5: detected capacity change from 0 to 128 [ 483.535485][ T9282] loop6: detected capacity change from 0 to 4096 [ 483.558673][ T9282] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 484.678198][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.720036][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.766849][ T36] bond0 (unregistering): Released all slaves [ 484.926580][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.973423][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.048409][ T9131] team0: Port device team_slave_0 added [ 485.066478][ T9131] team0: Port device team_slave_1 added [ 485.941414][ T9284] bridge1: entered allmulticast mode [ 487.883342][ T9308] overlayfs: missing 'lowerdir' [ 487.992233][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.018598][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.050184][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 488.115805][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.132878][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.155376][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.269733][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.900847][ T9328] loop6: detected capacity change from 0 to 1024 [ 490.227244][ T9336] loop7: detected capacity change from 0 to 128 [ 492.235633][ T9131] hsr_slave_0: entered promiscuous mode [ 492.243747][ T9131] hsr_slave_1: entered promiscuous mode [ 492.252104][ T9131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.260035][ T9131] Cannot create hsr debugfs directory [ 492.279758][ T9336] bridge1: entered allmulticast mode [ 493.763731][ T36] hsr_slave_0: left promiscuous mode [ 493.963044][ T36] hsr_slave_1: left promiscuous mode [ 493.969246][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.540225][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.556398][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.965268][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.335162][ T9380] loop5: detected capacity change from 0 to 512 [ 495.456541][ T9379] loop7: detected capacity change from 0 to 128 [ 495.619065][ T9378] loop6: detected capacity change from 0 to 256 [ 495.652486][ T9380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.781: bg 0: block 16: invalid block bitmap [ 495.690599][ T36] veth1_macvtap: left promiscuous mode [ 495.696422][ T36] veth0_macvtap: left promiscuous mode [ 495.702882][ T9379] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 495.710057][ T36] veth1_vlan: left promiscuous mode [ 495.722195][ T36] veth0_vlan: left promiscuous mode [ 495.784985][ T9380] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 495.853620][ T9380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.781: invalid indirect mapped block 5 (level 0) [ 495.867828][ T9379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.917869][ T9380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.781: invalid indirect mapped block 4294967295 (level 1) [ 495.981281][ T9380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.781: invalid indirect mapped block 4294967295 (level 2) [ 496.151584][ T9380] EXT4-fs (loop5): 1 truncate cleaned up [ 496.200773][ T9380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.888298][ T9418] loop7: detected capacity change from 0 to 128 [ 498.045646][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.869169][ T36] team0 (unregistering): Port device team_slave_1 removed [ 499.924571][ T36] team0 (unregistering): Port device team_slave_0 removed [ 500.415144][ T9418] bridge2: entered allmulticast mode [ 504.179469][ T9493] loop7: detected capacity change from 0 to 128 [ 504.360494][ T9493] bridge3: entered allmulticast mode [ 505.106934][ T9498] input: syz1 as /devices/virtual/input/input10 [ 506.942982][ T5829] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 506.953982][ T5829] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 506.988102][ T9506] loop6: detected capacity change from 0 to 256 [ 507.011520][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.017986][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.069275][ T9506] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.164081][ T9506] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 507.399991][ T9506] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 508.311416][ T9131] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 508.468668][ T9131] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 508.612937][ T9131] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 509.581511][ T9131] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 510.157421][ T9534] netlink: 'syz.6.822': attribute type 1 has an invalid length. [ 510.163169][ T9528] loop7: detected capacity change from 0 to 2048 [ 510.266738][ T9528] EXT4-fs: inline encryption not supported [ 510.312859][ T9528] EXT4-fs: Ignoring removed mblk_io_submit option [ 510.379794][ T9528] ext4: Unknown parameter 'audit' [ 510.514698][ T9528] loop7: detected capacity change from 0 to 256 [ 510.603309][ T9553] loop6: detected capacity change from 0 to 128 [ 510.779191][ T9553] bridge5: entered allmulticast mode [ 510.934296][ T9528] exfat: Deprecated parameter 'namecase' [ 510.992018][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 511.001632][ T5829] Bluetooth: hci4: Injecting HCI hardware error event [ 511.012630][ T5829] Bluetooth: hci4: hardware error 0x00 [ 511.403576][ T9528] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 511.464380][ T9131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.824330][ T9131] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.298973][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.306264][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.606590][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.613846][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.824312][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 515.244227][ T9586] fuse: Bad value for 'group_id' [ 515.250032][ T9586] fuse: Bad value for 'group_id' [ 516.031636][ T9599] input: syz1 as /devices/virtual/input/input11 [ 516.587246][ T9615] loop5: detected capacity change from 0 to 2048 [ 516.634574][ T9615] EXT4-fs: inline encryption not supported [ 516.643783][ T9615] EXT4-fs: Ignoring removed mblk_io_submit option [ 516.699675][ T9615] ext4: Unknown parameter 'audit' [ 516.938816][ T9621] loop7: detected capacity change from 0 to 1024 [ 517.563877][ T9131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.556746][ T9637] fuse: Bad value for 'group_id' [ 518.588279][ T9637] fuse: Bad value for 'group_id' [ 519.086625][ T9131] veth0_vlan: entered promiscuous mode [ 519.108769][ T9131] veth1_vlan: entered promiscuous mode [ 519.175693][ T9131] veth0_macvtap: entered promiscuous mode [ 519.193514][ T9131] veth1_macvtap: entered promiscuous mode [ 519.225487][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.261426][ T9131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.295981][ T176] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.300154][ T5863] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 519.315702][ T176] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.357081][ T176] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.374722][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.483008][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.538851][ T5863] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.577831][ T5863] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.627545][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.641439][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.670656][ T5863] usb 7-1: config 0 descriptor?? [ 519.721659][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 519.743308][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.790181][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.127618][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 520.156127][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 520.181688][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 520.214854][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 520.230388][ T5863] pwc: recv_control_msg error -32 req 04 val 1300 [ 520.238108][ T5863] pwc: recv_control_msg error -32 req 04 val 1400 [ 520.491592][ T9687] loop7: detected capacity change from 0 to 2048 [ 520.523868][ T9687] EXT4-fs: inline encryption not supported [ 520.537948][ T9687] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.567323][ T9687] ext4: Unknown parameter 'audit' [ 520.640222][ T9687] loop7: detected capacity change from 0 to 256 [ 520.678922][ T9687] exfat: Deprecated parameter 'namecase' [ 520.692063][ T5863] pwc: recv_control_msg error -71 req 04 val 1500 [ 520.699068][ T5863] pwc: recv_control_msg error -71 req 02 val 2500 [ 520.728296][ T5863] pwc: recv_control_msg error -71 req 02 val 2400 [ 520.753020][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 520.784324][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 520.808504][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 520.840458][ T9687] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 520.866213][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 520.875161][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 522.306219][ T5863] pwc: Registered as video103. [ 522.451993][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 522.590926][ T9708] fuse: Bad value for 'group_id' [ 522.596041][ T9708] fuse: Bad value for 'group_id' [ 522.689671][ T5863] usb 7-1: USB disconnect, device number 2 [ 523.037438][ T9719] loop8: detected capacity change from 0 to 128 [ 527.818856][ T9752] loop8: detected capacity change from 0 to 2048 [ 527.875337][ T9752] EXT4-fs: inline encryption not supported [ 527.914492][ T9752] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.933610][ T9757] loop6: detected capacity change from 0 to 256 [ 527.974607][ T9752] ext4: Unknown parameter 'audit' [ 528.061989][ T9752] loop8: detected capacity change from 0 to 256 [ 528.104721][ T9752] exfat: Deprecated parameter 'namecase' [ 528.162319][ T9757] FAT-fs (loop6): Directory bread(block 64) failed [ 528.198120][ T9757] FAT-fs (loop6): Directory bread(block 65) failed [ 528.225680][ T9752] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 528.227376][ T9757] FAT-fs (loop6): Directory bread(block 66) failed [ 528.291590][ T9757] FAT-fs (loop6): Directory bread(block 67) failed [ 528.336330][ T9757] FAT-fs (loop6): Directory bread(block 68) failed [ 528.351482][ T9757] FAT-fs (loop6): Directory bread(block 69) failed [ 528.374980][ T9757] FAT-fs (loop6): Directory bread(block 70) failed [ 528.419021][ T9757] FAT-fs (loop6): Directory bread(block 71) failed [ 528.449791][ T9757] FAT-fs (loop6): Directory bread(block 72) failed [ 528.491895][ T9757] FAT-fs (loop6): Directory bread(block 73) failed [ 529.121090][ T9773] veth0_vlan: entered allmulticast mode [ 529.586354][ T9784] loop8: detected capacity change from 0 to 128 [ 535.595041][ T9831] loop8: detected capacity change from 0 to 128 [ 537.766400][ T9825] loop5: detected capacity change from 0 to 2048 [ 538.289620][ T9825] EXT4-fs: inline encryption not supported [ 538.295680][ T9825] EXT4-fs: Ignoring removed mblk_io_submit option [ 538.556778][ T9825] ext4: Unknown parameter 'audit' [ 538.716952][ C1] IPv6: veth1_to_bridge: IPv6 duplicate address ::ffff:0.0.0.0 used by aa:aa:aa:aa:aa:0c detected! [ 542.579629][ T5904] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 542.869643][ T5904] usb 7-1: Using ep0 maxpacket: 16 [ 542.933751][ T5904] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 542.983293][ T5904] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 543.014146][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.036567][ T5904] usb 7-1: Product: syz [ 543.046932][ T5904] usb 7-1: Manufacturer: syz [ 543.062656][ T5904] usb 7-1: SerialNumber: syz [ 543.129428][ T5904] r8152-cfgselector 7-1: Unknown version 0x0000 [ 543.154223][ T5904] r8152-cfgselector 7-1: config 0 descriptor?? [ 543.395317][ T5896] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 546.049342][ T9966] loop8: detected capacity change from 0 to 128 [ 548.272224][ T9989] loop8: detected capacity change from 0 to 64 [ 551.896647][T10010] loop7: detected capacity change from 0 to 512 [ 552.128489][T10010] EXT4-fs (loop7): 1 orphan inode deleted [ 552.134851][ T9184] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 552.161644][T10010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.174507][ T9184] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 552.205290][T10010] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.470853][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.647972][T10082] loop6: detected capacity change from 0 to 2048 [ 557.698824][T10082] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 557.789963][T10082] NILFS (loop6): mounting unchecked fs [ 557.933630][T10082] NILFS (loop6): recovery complete [ 558.574359][T10098] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.492647][ T30] audit: type=1800 audit(1750807292.728:237): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.954" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 561.421892][T10148] warning: `syz.6.966' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 563.549634][ T5829] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 563.559609][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 563.648800][T10177] trusted_key: syz.8.977 sent an empty control message without MSG_MORE. [ 565.523456][ T5896] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 565.753554][ T5896] usb 9-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 565.793628][ T5896] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 565.830195][ T5896] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 566.068313][ T5896] usb 9-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 566.079462][ T5896] usb 9-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.097985][ T5896] usb 9-1: config 48 interface 0 has no altsetting 0 [ 566.133853][ T5896] usb 9-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 566.145658][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.208475][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.986'. [ 566.286191][ T5896] usb 9-1: Product: syz [ 566.356348][ T5896] usb 9-1: Manufacturer: syz [ 566.475705][ T5896] usb 9-1: SerialNumber: syz [ 567.010481][ T5896] usb 9-1: USB disconnect, device number 2 [ 568.729761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.736120][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.835062][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 575.705812][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 581.582398][T10396] overlayfs: failed to clone upperpath [ 584.138579][T10423] loop6: detected capacity change from 0 to 128 [ 587.609198][T10465] loop7: detected capacity change from 0 to 128 [ 594.178778][ T5896] IPVS: starting estimator thread 0... [ 594.331964][T10549] IPVS: using max 23 ests per chain, 55200 per kthread [ 595.953254][ T5829] Bluetooth: hci1: command 0x0405 tx timeout [ 596.416083][T10569] loop8: detected capacity change from 0 to 128 [ 597.748667][ T5896] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 598.032363][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 598.260876][ T5896] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 598.390450][ T5896] usb 7-1: config 0 has no interface number 0 [ 598.570698][ T5896] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 598.665101][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.725584][ T5896] usb 7-1: Product: syz [ 598.745385][ T5896] usb 7-1: Manufacturer: syz [ 598.779637][ T5896] usb 7-1: SerialNumber: syz [ 599.172665][ T5896] usb 7-1: config 0 descriptor?? [ 599.389922][T10593] cgroup: name respecified [ 599.542543][T10603] netlink: set zone limit has 4 unknown bytes [ 599.639720][ T5896] kaweth 7-1:0.235: Firmware present in device. [ 599.797607][ T5896] kaweth 7-1:0.235: Statistics collection: 0 [ 599.809781][ T5896] kaweth 7-1:0.235: Multicast filter limit: 0 [ 599.815923][ T5896] kaweth 7-1:0.235: MTU: 0 [ 599.838225][ T5896] kaweth 7-1:0.235: Read MAC address 00:00:00:00:00:00 [ 600.519284][ T5896] kaweth 7-1:0.235: Error setting receive filter [ 600.599603][ T5896] kaweth 7-1:0.235: probe with driver kaweth failed with error -5 [ 601.020871][ T5896] usb 7-1: USB disconnect, device number 4 [ 603.135115][T10661] loop5: detected capacity change from 0 to 128 [ 604.944597][T10661] bridge2: entered allmulticast mode [ 607.305452][T10688] cgroup: name respecified [ 607.643916][T10699] loop7: detected capacity change from 0 to 512 [ 608.005528][T10699] EXT4-fs (loop7): 1 orphan inode deleted [ 608.023115][ T65] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 608.218231][T10699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.682602][T10699] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.762431][ T65] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 609.461772][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.759249][ T5829] Bluetooth: hci3: command 0x1003 tx timeout [ 611.767155][T10154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 612.097145][T10751] loop8: detected capacity change from 0 to 2048 [ 613.059420][T10751] EXT4-fs (loop8): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.978060][ T9131] EXT4-fs (loop8): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 616.796835][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1156'. [ 617.538908][T10812] loop6: detected capacity change from 0 to 2048 [ 617.648775][T10812] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.811790][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 621.429853][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1170'. [ 623.120240][T10874] No control pipe specified [ 623.225871][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1179'. [ 623.262460][T10878] loop5: detected capacity change from 0 to 2048 [ 623.426542][T10878] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.812813][T10904] loop7: detected capacity change from 0 to 2048 [ 625.167918][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 625.197297][T10904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 626.048223][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.440029][ T5863] IPVS: starting estimator thread 0... [ 626.572955][T10928] IPVS: using max 26 ests per chain, 62400 per kthread [ 626.631209][T10932] No control pipe specified [ 627.108967][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1193'. [ 627.695654][T10949] loop5: detected capacity change from 0 to 2048 [ 627.887237][T10949] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.127080][T10957] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 628.965061][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 629.345583][T10964] loop7: detected capacity change from 0 to 2048 [ 629.438419][T10964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 629.507034][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1207'. [ 629.811978][ T9] IPVS: starting estimator thread 0... [ 629.981540][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.999759][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.029969][T10980] IPVS: using max 23 ests per chain, 55200 per kthread [ 631.220492][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.542009][T10995] input: syz1 as /devices/virtual/input/input14 [ 631.832525][T10997] No control pipe specified [ 632.558321][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 633.499062][T11015] loop6: detected capacity change from 0 to 2048 [ 633.766823][T11015] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.526347][T11038] loop8: detected capacity change from 0 to 128 [ 634.578771][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 636.348948][T11058] binder: 11046:11058 ioctl c0306201 200000000240 returned -11 [ 637.175296][T11060] loop5: detected capacity change from 0 to 2048 [ 638.571374][T11060] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.895870][T11087] loop6: detected capacity change from 0 to 2048 [ 638.935910][T11081] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 638.962626][T11091] loop7: detected capacity change from 0 to 512 [ 639.640867][T11091] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1236: bg 0: block 16: invalid block bitmap [ 639.655137][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 639.656313][T11087] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.688092][T11091] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 639.932943][T11091] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1236: invalid indirect mapped block 5 (level 0) [ 640.003970][T11091] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1236: invalid indirect mapped block 4294967295 (level 1) [ 640.289615][ T5888] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 640.312715][T11091] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1236: invalid indirect mapped block 4294967295 (level 2) [ 640.393446][T11091] EXT4-fs (loop7): 1 truncate cleaned up [ 640.420462][T11091] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.491878][ T5888] usb 9-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 640.581577][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 640.734154][ T5888] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 640.789933][ T5888] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 640.853778][ T5888] usb 9-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 641.143210][ T5888] usb 9-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.165661][ T5888] usb 9-1: config 48 interface 0 has no altsetting 0 [ 641.204173][ T5888] usb 9-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 641.937659][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.949777][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.976901][ T5888] usb 9-1: Product: syz [ 641.985128][ T5888] usb 9-1: Manufacturer: syz [ 641.996090][ T5888] usb 9-1: SerialNumber: syz [ 642.826473][T11133] loop7: detected capacity change from 0 to 128 [ 643.847391][T11133] bridge4: entered allmulticast mode [ 644.739008][ T5888] usb 9-1: USB disconnect, device number 3 [ 644.957478][T11140] loop6: detected capacity change from 0 to 2048 [ 645.209402][T11140] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.503834][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1251'. [ 645.968762][T11158] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 646.530863][T11165] loop7: detected capacity change from 0 to 512 [ 646.671987][T11165] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1253: bg 0: block 16: invalid block bitmap [ 646.763902][ T7767] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 646.780572][T11165] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 647.017164][T11165] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1253: invalid indirect mapped block 5 (level 0) [ 647.432019][T11165] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1253: invalid indirect mapped block 4294967295 (level 1) [ 647.605889][T11165] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1253: invalid indirect mapped block 4294967295 (level 2) [ 647.643459][T11165] EXT4-fs (loop7): 1 truncate cleaned up [ 647.721574][T11165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.161954][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1257'. [ 648.743730][T11180] loop8: detected capacity change from 0 to 128 [ 649.784863][T11180] bridge1: entered allmulticast mode [ 650.820209][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.979221][T11191] loop5: detected capacity change from 0 to 512 [ 651.100830][T11191] EXT4-fs: Ignoring removed orlov option [ 651.150601][T11191] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 651.315029][T11202] loop7: detected capacity change from 0 to 256 [ 651.363618][T11202] exfat: Bad value for 'fmask' [ 651.680789][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 651.715027][ T5888] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 653.160182][T11207] Invalid ELF header type: 3 != 1 [ 653.488880][ T5888] usb 9-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 653.656636][ T5888] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 653.756503][ T5888] usb 9-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 653.947897][T11217] input: syz1 as /devices/virtual/input/input15 [ 654.656550][ T5888] usb 9-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 654.668480][ T5888] usb 9-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.686579][ T5888] usb 9-1: config 48 interface 0 has no altsetting 0 [ 654.813490][ T5888] usb 9-1: string descriptor 0 read error: -71 [ 654.859641][ T5888] usb 9-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 654.868748][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.930286][T11226] loop8: detected capacity change from 0 to 512 [ 655.009668][ T5888] usb 9-1: can't set config #48, error -71 [ 655.211114][ T5888] usb 9-1: USB disconnect, device number 4 [ 655.250187][T11226] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1271: bg 0: block 16: invalid block bitmap [ 655.287179][T11226] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 655.351284][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'. [ 655.550058][T11226] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1271: invalid indirect mapped block 5 (level 0) [ 655.955846][T11226] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1271: invalid indirect mapped block 4294967295 (level 1) [ 656.072730][T11226] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1271: invalid indirect mapped block 4294967295 (level 2) [ 656.237109][T11226] EXT4-fs (loop8): 1 truncate cleaned up [ 656.413024][T11226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.322136][T11250] loop5: detected capacity change from 0 to 2048 [ 657.424598][ T9131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.434197][T11250] EXT4-fs: inline encryption not supported [ 657.444900][T11250] EXT4-fs: Ignoring removed mblk_io_submit option [ 657.469723][T11250] ext4: Unknown parameter 'audit' [ 657.664533][T11250] loop5: detected capacity change from 0 to 256 [ 657.773438][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 657.939696][ T5863] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 658.004358][T11250] exfat: Deprecated parameter 'namecase' [ 658.487609][T11250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 659.158341][ T5863] usb 8-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 659.211907][ T5863] usb 8-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 659.245864][T11272] loop8: detected capacity change from 0 to 512 [ 659.259533][ T5863] usb 8-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 659.281431][T11272] EXT4-fs: Ignoring removed orlov option [ 659.307585][ T5863] usb 8-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 659.325502][T11272] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 659.346610][ T5863] usb 8-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.499769][T11278] Invalid ELF header type: 3 != 1 [ 659.849562][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1284'. [ 660.550532][T11284] input: syz1 as /devices/virtual/input/input16 [ 660.559526][ T5863] usb 8-1: config 48 interface 0 has no altsetting 0 [ 660.586771][ T5863] usb 8-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 660.616593][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.639754][ T5863] usb 8-1: Product: syz [ 660.643982][ T5863] usb 8-1: Manufacturer: syz [ 660.648603][ T5863] usb 8-1: SerialNumber: syz [ 660.930507][ T5863] usb 8-1: can't set config #48, error -71 [ 660.949035][ T5863] usb 8-1: USB disconnect, device number 2 [ 660.950069][T11291] loop8: detected capacity change from 0 to 128 [ 663.952994][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1292'. [ 665.364923][T11335] Invalid ELF header type: 3 != 1 [ 665.458767][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1296'. [ 666.504926][T11341] capability: warning: `syz.5.1299' uses 32-bit capabilities (legacy support in use) [ 667.168634][T11354] loop7: detected capacity change from 0 to 128 [ 667.454388][T11357] loop5: detected capacity change from 0 to 2048 [ 667.573241][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1305'. [ 668.349112][T11357] EXT4-fs (loop5): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.838327][T11382] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 669.529945][T11370] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 669.811938][T11379] loop7: detected capacity change from 0 to 2048 [ 669.819232][T11379] EXT4-fs: inline encryption not supported [ 670.104801][T11379] EXT4-fs: Ignoring removed mblk_io_submit option [ 670.137604][T11379] ext4: Unknown parameter 'audit' [ 670.202190][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 670.414674][ T5863] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 671.790949][T11374] loop7: detected capacity change from 0 to 128 [ 671.798355][T11374] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 671.811679][T11374] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 671.824388][T11374] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00400002) [ 671.834396][T11374] FAT-fs (loop7): Filesystem has been set read-only [ 672.106443][ T5863] usb 7-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 672.239526][ T5863] usb 7-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 672.327820][ T5863] usb 7-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 672.396420][ T5863] usb 7-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 672.474426][ T5863] usb 7-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.609967][ T5863] usb 7-1: config 48 interface 0 has no altsetting 0 [ 672.882412][ T5863] usb 7-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 672.995791][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.079560][ T5863] usb 7-1: Product: syz [ 673.096507][ T5863] usb 7-1: Manufacturer: syz [ 673.111290][ T5863] usb 7-1: SerialNumber: syz [ 673.160648][ T5863] usb 7-1: can't set config #48, error -71 [ 673.229758][ T5863] usb 7-1: USB disconnect, device number 5 [ 673.502654][T11423] loop6: detected capacity change from 0 to 128 [ 673.612680][T11423] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 673.759487][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 674.028846][T11423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 674.711989][T11436] loop8: detected capacity change from 0 to 2048 [ 674.843549][T11436] EXT4-fs (loop8): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.499606][T11453] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 677.032779][T11445] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 677.185982][ T9131] EXT4-fs (loop8): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 678.943891][T11472] loop7: detected capacity change from 0 to 256 [ 679.120073][ T5888] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 679.527696][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1330'. [ 679.571111][ T5888] usb 7-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 680.171699][ T5888] usb 7-1: config 48 interface 0 altsetting 98 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 680.296868][ T5888] usb 7-1: config 48 interface 0 altsetting 98 endpoint 0x4 has invalid wMaxPacketSize 0 [ 680.465756][ T5888] usb 7-1: config 48 interface 0 altsetting 98 has an invalid descriptor for endpoint zero, skipping [ 680.528204][ T5888] usb 7-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.670196][ T5888] usb 7-1: config 48 interface 0 has no altsetting 0 [ 681.681866][ T5888] usb 7-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 683.307555][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.316776][T11497] loop5: detected capacity change from 0 to 2048 [ 683.448456][T11497] EXT4-fs: inline encryption not supported [ 683.519409][T11497] EXT4-fs: Ignoring removed mblk_io_submit option [ 683.583606][ T5888] usb 7-1: Product: syz [ 683.588483][T11497] ext4: Unknown parameter 'audit' [ 683.589347][ T5888] usb 7-1: Manufacturer: syz [ 683.598882][ T5888] usb 7-1: SerialNumber: syz [ 683.611182][ T5888] usb 7-1: can't set config #48, error -71 [ 683.618894][ T5888] usb 7-1: USB disconnect, device number 6 [ 683.897441][T11509] netlink: set zone limit has 4 unknown bytes [ 684.133621][T11518] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 686.539584][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 686.854067][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'. [ 687.571438][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.604207][ T9] usb 7-1: config 0 has no interfaces? [ 687.630134][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 688.619549][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.936449][ T9] usb 7-1: config 0 descriptor?? [ 688.988836][T11554] loop5: detected capacity change from 0 to 2048 [ 689.063078][T11558] netlink: set zone limit has 4 unknown bytes [ 689.127552][T11554] EXT4-fs: inline encryption not supported [ 689.199217][T11554] EXT4-fs: Ignoring removed mblk_io_submit option [ 689.206855][T11554] ext4: Unknown parameter 'audit' [ 689.508312][T11568] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 690.902911][ T5863] usb 7-1: USB disconnect, device number 7 [ 691.157139][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.163590][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.541766][T11590] loop8: detected capacity change from 0 to 1024 [ 692.758340][T11590] EXT4-fs: Ignoring removed oldalloc option [ 692.877833][T11590] EXT4-fs: Ignoring removed bh option [ 693.515143][T11602] loop6: detected capacity change from 0 to 128 [ 693.592192][T11590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.629103][T11602] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 693.703987][T11602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 693.840892][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1365'. [ 694.241736][T11607] loop5: detected capacity change from 0 to 512 [ 694.724949][T11607] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1367: bg 0: block 16: invalid block bitmap [ 694.799131][T11607] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 694.873626][T11607] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1367: invalid indirect mapped block 5 (level 0) [ 694.954555][T11607] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1367: invalid indirect mapped block 4294967295 (level 1) [ 694.973523][T11616] ./file0: Can't lookup blockdev [ 695.076036][T11607] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1367: invalid indirect mapped block 4294967295 (level 2) [ 695.238250][T11615] loop7: detected capacity change from 0 to 4096 [ 695.293872][T11607] EXT4-fs (loop5): 1 truncate cleaned up [ 695.322340][T11607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.359534][T11615] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 695.402198][T11615] ntfs3(loop7): ino=0, mi_enum_attr [ 695.415417][T11615] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 695.470706][T11623] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 696.181199][T11615] ntfs3(loop7): volume is dirty and "force" flag is not set! [ 696.672470][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.223397][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1378'. [ 700.170338][ T9131] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.183261][T11667] input: syz1 as /devices/virtual/input/input17 [ 700.534491][T11673] loop8: detected capacity change from 0 to 1024 [ 700.620329][T11677] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 700.747112][T11673] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 703.182926][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1389'. [ 704.656518][T11712] loop8: detected capacity change from 0 to 256 [ 704.838065][T11712] exfat: Bad value for 'fmask' [ 706.167500][T11738] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 707.154952][T11742] input: syz1 as /devices/virtual/input/input18 [ 707.339307][T11748] loop7: detected capacity change from 0 to 2048 [ 707.405610][T11748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 708.461579][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.955837][T11761] overlayfs: failed to clone upperpath [ 710.139619][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1403'. [ 710.635361][T11772] loop6: detected capacity change from 0 to 256 [ 710.642978][T11772] exfat: Bad value for 'fmask' [ 716.057049][T11837] loop8: detected capacity change from 0 to 256 [ 716.107654][T11837] exfat: Bad value for 'fmask' [ 720.763946][ T44] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 721.375648][T11875] loop7: detected capacity change from 0 to 2048 [ 721.383875][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 721.412395][ T44] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 721.427290][T11875] EXT4-fs: inline encryption not supported [ 721.458461][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.499556][T11875] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.506100][T11875] ext4: Unknown parameter 'audit' [ 721.730256][T11892] loop7: detected capacity change from 0 to 128 [ 721.771060][ T44] usb 9-1: config 0 has no interface number 0 [ 721.777434][ T44] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 721.814354][ T44] usb 9-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 721.817574][T11892] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 721.860367][T11892] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 721.880582][ T44] usb 9-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.639800][T11892] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00400002) [ 722.650299][T11892] FAT-fs (loop7): Filesystem has been set read-only [ 722.800500][ T44] usb 9-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a [ 722.833892][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.869525][ T44] usb 9-1: Product: syz [ 722.873754][ T44] usb 9-1: Manufacturer: syz [ 722.878379][ T44] usb 9-1: SerialNumber: syz [ 722.970799][ T44] usb 9-1: config 0 descriptor?? [ 723.404023][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1438'. [ 723.528364][T11912] loop5: detected capacity change from 0 to 2048 [ 724.079705][ T44] usb 9-1: USB disconnect, device number 5 [ 724.097167][T11912] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 724.131662][T11912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.144553][T11912] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.220446][T11912] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.1438: invalid fast symlink length 39 [ 724.336335][ T9244] udevd[9244]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.566374][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.953037][T11926] loop8: detected capacity change from 0 to 64 [ 724.969129][T11926] hfs: Unknown parameter 'pa2t' [ 725.515800][T11931] loop7: detected capacity change from 0 to 256 [ 725.581017][T11931] exfat: Bad value for 'fmask' [ 725.977141][T11934] loop5: detected capacity change from 0 to 40427 [ 726.481390][T11934] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 726.489196][T11934] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 726.594561][T11934] F2FS-fs (loop5): invalid crc value [ 726.717802][T11934] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 726.725103][T11934] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 728.286894][T11959] loop8: detected capacity change from 0 to 512 [ 728.325640][T11959] EXT4-fs: Ignoring removed orlov option [ 728.411407][T11959] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 728.596321][T11966] Invalid ELF header type: 3 != 1 [ 729.425571][T11973] loop6: detected capacity change from 0 to 2048 [ 729.461014][T11973] EXT4-fs: inline encryption not supported [ 729.499146][T11973] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.567989][T11973] ext4: Unknown parameter 'audit' [ 729.653935][T11979] loop8: detected capacity change from 0 to 256 [ 729.714814][T11979] exfat: Bad value for 'fmask' [ 730.475837][T11973] loop6: detected capacity change from 0 to 128 [ 730.483423][T11973] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 730.500984][T11973] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 730.510555][T11973] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00400002) [ 730.520692][T11973] FAT-fs (loop6): Filesystem has been set read-only [ 732.389925][ T5836] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 732.593709][ T5836] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 732.633839][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.690594][ T5836] usb 7-1: config 0 descriptor?? [ 732.727062][ T5836] cp210x 7-1:0.0: cp210x converter detected [ 732.919663][ T5836] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 732.957538][ T5836] cp210x 7-1:0.0: querying part number failed [ 733.010472][ T5836] usb 7-1: cp210x converter now attached to ttyUSB0 [ 733.150921][T12023] loop8: detected capacity change from 0 to 512 [ 733.283322][ T5836] usb 7-1: USB disconnect, device number 8 [ 733.400593][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1467'. [ 734.145650][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 734.180945][T12023] EXT4-fs: Ignoring removed orlov option [ 734.453703][ T5836] cp210x 7-1:0.0: device disconnected [ 734.481384][T12023] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 734.754220][T12023] Invalid ELF header type: 3 != 1 [ 735.358364][T12045] loop6: detected capacity change from 0 to 256 [ 735.440888][T12045] exfat: Bad value for 'fmask' [ 735.486301][T12040] loop5: detected capacity change from 0 to 4096 [ 736.376838][T12053] loop8: detected capacity change from 0 to 2048 [ 736.421241][T12053] EXT4-fs: inline encryption not supported [ 736.427131][T12053] EXT4-fs: Ignoring removed mblk_io_submit option [ 736.667800][T12053] ext4: Unknown parameter 'audit' [ 739.010961][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1480'. [ 741.416740][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1484'. [ 741.681262][T12096] loop7: detected capacity change from 0 to 512 [ 742.531860][T12096] EXT4-fs: Ignoring removed orlov option [ 742.685085][T12096] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 746.302598][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'. [ 748.463199][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 749.349728][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1499'. [ 751.965463][T12184] loop7: detected capacity change from 0 to 512 [ 752.029737][T12184] EXT4-fs: Ignoring removed orlov option [ 752.082977][T12184] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 752.595717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.612218][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.640546][T12197] Invalid ELF header type: 3 != 1 [ 753.178522][T12203] loop7: detected capacity change from 0 to 256 [ 753.278644][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1507'. [ 753.312596][T12203] exfat: Bad value for 'fmask' [ 755.821042][ T10] IPVS: starting estimator thread 0... [ 756.046637][T12232] loop5: detected capacity change from 0 to 256 [ 756.069611][T12231] IPVS: using max 25 ests per chain, 60000 per kthread [ 757.315256][T12248] loop6: detected capacity change from 0 to 512 [ 757.381706][T12248] EXT4-fs: Ignoring removed orlov option [ 757.428502][T12250] loop7: detected capacity change from 0 to 2048 [ 757.441355][T12248] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 757.487452][T12250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.691641][T12258] loop5: detected capacity change from 0 to 16 [ 758.520536][T12264] Invalid ELF header type: 3 != 1 [ 759.098422][T12269] EXT4-fs: Ignoring removed orlov option [ 759.604742][T12258] erofs (device loop5): mounted with root inode @ nid 36. [ 759.619641][T12269] EXT4-fs (loop7): can't enable nombcache during remount [ 760.131297][T12275] syz.5.1520: attempt to access beyond end of device [ 760.131297][T12275] loop5: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 760.146194][T12275] erofs (device loop5): read error -5 @ 43 of nid 36 [ 760.611631][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.314319][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1526'. [ 764.293108][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1533'. [ 765.137073][T12334] loop8: detected capacity change from 0 to 256 [ 765.158254][T12336] loop7: detected capacity change from 0 to 512 [ 765.187124][T12334] exfat: Bad value for 'fmask' [ 765.462042][T12336] EXT4-fs: Ignoring removed orlov option [ 765.468947][T12336] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 766.333519][T12348] Invalid ELF header type: 3 != 1 [ 768.046872][T12361] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 770.144954][T12392] loop5: detected capacity change from 0 to 512 [ 770.330913][T12392] EXT4-fs: Ignoring removed orlov option [ 771.686179][T12392] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 772.121689][T12408] Invalid ELF header type: 3 != 1 [ 774.415732][T12418] loop8: detected capacity change from 0 to 256 [ 774.460675][T12418] exfat: Bad value for 'fmask' [ 780.466248][T12465] loop7: detected capacity change from 0 to 512 [ 780.528445][T12467] loop6: detected capacity change from 0 to 512 [ 780.579789][T12465] EXT4-fs (loop7): Test dummy encryption mode enabled [ 780.598447][T12465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 780.609455][T12467] EXT4-fs: Ignoring removed orlov option [ 780.686628][T12465] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.1571: bad orphan inode 131083 [ 780.739792][T12467] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 780.759211][T12477] binder: 12476:12477 ioctl 4018620d 0 returned -22 [ 780.774636][T12465] EXT4-fs (loop7): Remounting filesystem read-only [ 780.846402][T12465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.915675][T12480] Invalid ELF header type: 3 != 1 [ 784.211107][T12484] loop8: detected capacity change from 0 to 64 [ 784.218942][T12484] hfs: Unknown parameter 'pa2t' [ 784.655968][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.714362][T12487] loop5: detected capacity change from 0 to 2048 [ 784.782204][T12487] EXT4-fs: inline encryption not supported [ 784.788155][T12487] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.887643][T12487] ext4: Unknown parameter 'audit' [ 785.332201][T12503] loop7: detected capacity change from 0 to 2048 [ 786.447374][T12503] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 786.487636][T12503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.500896][T12503] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.514020][T12487] loop5: detected capacity change from 0 to 256 [ 786.529830][T12501] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz.7.1582: invalid fast symlink length 39 [ 786.562843][T12487] exfat: Deprecated parameter 'namecase' [ 786.583345][T12487] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 786.815538][ T7920] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.889164][T12534] loop5: detected capacity change from 0 to 512 [ 788.905198][T12534] EXT4-fs: Ignoring removed orlov option [ 788.928701][T12534] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 789.072512][T12535] Invalid ELF header type: 3 != 1 [ 790.145133][T12540] loop8: detected capacity change from 0 to 1024 [ 790.177259][T12540] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data [ 793.655381][T12567] loop8: detected capacity change from 0 to 4096 [ 794.225464][T12558] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 795.077626][T12580] loop8: detected capacity change from 0 to 512 [ 795.147954][T12580] EXT4-fs: Ignoring removed orlov option [ 795.225808][T12580] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 795.375474][T12584] Invalid ELF header type: 3 != 1 [ 798.230198][T12618] loop5: detected capacity change from 0 to 512 [ 798.270692][T12618] EXT4-fs: Ignoring removed orlov option [ 798.504441][T12618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.537261][T12618] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.819290][ T36] Bluetooth: hci3: Frame reassembly failed (-84) [ 798.945079][T12628] No source specified [ 799.863337][T12637] netlink: 'syz.2.1620': attribute type 12 has an invalid length. [ 800.753200][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 800.753403][T10154] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 800.775289][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 800.877522][T12635] ceph: No mds server is up or the cluster is laggy [ 801.408819][T12648] netlink: 'syz.8.1623': attribute type 39 has an invalid length. [ 801.411432][T12646] Invalid ELF header type: 3 != 1 [ 802.736009][ T8049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.678215][T12674] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 804.596457][ T5924] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 805.325281][ T5924] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.342640][ T5924] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 805.529279][ T5924] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.598342][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.687482][ T5924] usb 7-1: Product: syz [ 805.718022][ T5924] usb 7-1: Manufacturer: syz [ 805.787289][ T5924] usb 7-1: SerialNumber: syz [ 806.216777][T12692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 806.308839][T12715] loop7: detected capacity change from 0 to 4096 [ 807.131500][T12720] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 807.458374][T12692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 807.685481][ T5924] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 807.709034][ T5924] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 807.736753][ T5924] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 808.008835][ T5924] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 808.025357][ T5924] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 808.042600][ T5924] wwan wwan0: port wwan0mbim0 attached [ 808.071217][ T5924] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 42:42:42:42:42:42 [ 808.888474][ T5924] usb 7-1: USB disconnect, device number 9 [ 808.896271][ T5924] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 809.233099][ T5924] wwan wwan0: port wwan0mbim0 disconnected [ 811.262013][T12765] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!Ýë [ 812.027437][T12774] loop6: detected capacity change from 0 to 64 [ 812.040609][T12774] hfs: Unknown parameter 'pa2t' [ 812.500697][T12768] ceph: No mds server is up or the cluster is laggy [ 812.508048][ T24] libceph: connect (1)[c::]:6789 error -101 [ 812.520831][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 814.034659][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.046689][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.143422][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1676'. [ 822.680949][T12887] loop6: detected capacity change from 0 to 4096 [ 822.789680][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1700'. [ 822.969542][ T5863] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 823.610770][ T5863] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 823.626227][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.641743][ T5863] usb 8-1: config 0 descriptor?? [ 823.654848][ T5863] cp210x 8-1:0.0: cp210x converter detected [ 823.930523][ T5863] usb 8-1: cp210x converter now attached to ttyUSB0 [ 824.177811][ T5836] usb 8-1: USB disconnect, device number 3 [ 824.195228][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 824.203706][ T5836] cp210x 8-1:0.0: device disconnected [ 839.011669][T13009] loop6: detected capacity change from 0 to 256 [ 839.030373][T13009] exfat: Bad value for 'fmask' [ 839.416992][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 847.994327][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 848.015685][T13088] ceph: No mds server is up or the cluster is laggy [ 848.473709][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 849.569007][T13096] loop5: detected capacity change from 0 to 32768 [ 849.597155][T13096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1762 (13096) [ 849.647558][T13096] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 849.680564][T13096] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 849.718804][T13096] BTRFS info (device loop5): using free-space-tree [ 850.275227][T13096] [ 850.277619][T13096] ====================================================== [ 850.284834][T13096] WARNING: possible circular locking dependency detected [ 850.291964][T13096] 6.16.0-rc3-next-20250624-syzkaller #0 Not tainted [ 850.298589][T13096] ------------------------------------------------------ [ 850.305620][T13096] syz.5.1762/13096 is trying to acquire lock: [ 850.311702][T13096] ffffffff8e6e8cc8 (uuid_mutex){+.+.}-{4:4}, at: btrfs_read_chunk_tree+0xef/0x2170 [ 850.321146][T13096] [ 850.321146][T13096] but task is already holding lock: [ 850.328531][T13096] ffff8880268dc0e0 (&type->s_umount_key#104/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 850.338942][T13096] [ 850.338942][T13096] which lock already depends on the new lock. [ 850.338942][T13096] [ 850.349360][T13096] [ 850.349360][T13096] the existing dependency chain (in reverse order) is: [ 850.358386][T13096] [ 850.358386][T13096] -> #1 (&type->s_umount_key#104/1){+.+.}-{4:4}: [ 850.367132][T13096] lock_acquire+0x120/0x360 [ 850.372318][T13096] down_write_nested+0x9d/0x200 [ 850.377721][T13096] alloc_super+0x204/0x970 [ 850.382707][T13096] sget_fc+0x329/0xa40 [ 850.387336][T13096] btrfs_get_tree+0x4c6/0x12d0 [ 850.392650][T13096] vfs_get_tree+0x92/0x2b0 [ 850.397621][T13096] do_new_mount+0x24a/0xa40 [ 850.402685][T13096] __se_sys_mount+0x317/0x410 [ 850.407919][T13096] do_syscall_64+0xfa/0x3b0 [ 850.412982][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.419433][T13096] [ 850.419433][T13096] -> #0 (uuid_mutex){+.+.}-{4:4}: [ 850.426693][T13096] validate_chain+0xb9b/0x2140 [ 850.432192][T13096] __lock_acquire+0xab9/0xd20 [ 850.437402][T13096] lock_acquire+0x120/0x360 [ 850.442437][T13096] __mutex_lock+0x182/0xe80 [ 850.447476][T13096] btrfs_read_chunk_tree+0xef/0x2170 [ 850.453282][T13096] open_ctree+0x17f2/0x3a10 [ 850.458330][T13096] btrfs_get_tree+0xc6f/0x12d0 [ 850.463614][T13096] vfs_get_tree+0x92/0x2b0 [ 850.468558][T13096] do_new_mount+0x24a/0xa40 [ 850.473633][T13096] __se_sys_mount+0x317/0x410 [ 850.478863][T13096] do_syscall_64+0xfa/0x3b0 [ 850.483914][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.490345][T13096] [ 850.490345][T13096] other info that might help us debug this: [ 850.490345][T13096] [ 850.500590][T13096] Possible unsafe locking scenario: [ 850.500590][T13096] [ 850.508054][T13096] CPU0 CPU1 [ 850.513458][T13096] ---- ---- [ 850.518839][T13096] lock(&type->s_umount_key#104/1); [ 850.524159][T13096] lock(uuid_mutex); [ 850.530674][T13096] lock(&type->s_umount_key#104/1); [ 850.538508][T13096] lock(uuid_mutex); [ 850.542500][T13096] [ 850.542500][T13096] *** DEADLOCK *** [ 850.542500][T13096] [ 850.550649][T13096] 1 lock held by syz.5.1762/13096: [ 850.555772][T13096] #0: ffff8880268dc0e0 (&type->s_umount_key#104/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 850.565994][T13096] [ 850.565994][T13096] stack backtrace: [ 850.571916][T13096] CPU: 0 UID: 0 PID: 13096 Comm: syz.5.1762 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 850.571944][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 850.571964][T13096] Call Trace: [ 850.571971][T13096] [ 850.571980][T13096] dump_stack_lvl+0x189/0x250 [ 850.572015][T13096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.572042][T13096] ? __pfx__printk+0x10/0x10 [ 850.572063][T13096] ? print_lock_name+0xde/0x100 [ 850.572083][T13096] print_circular_bug+0x2ee/0x310 [ 850.572113][T13096] check_noncircular+0x134/0x160 [ 850.572144][T13096] validate_chain+0xb9b/0x2140 [ 850.572181][T13096] __lock_acquire+0xab9/0xd20 [ 850.572206][T13096] ? btrfs_read_chunk_tree+0xef/0x2170 [ 850.572225][T13096] lock_acquire+0x120/0x360 [ 850.572245][T13096] ? btrfs_read_chunk_tree+0xef/0x2170 [ 850.572270][T13096] __mutex_lock+0x182/0xe80 [ 850.572293][T13096] ? btrfs_read_chunk_tree+0xef/0x2170 [ 850.572316][T13096] ? btrfs_read_chunk_tree+0xef/0x2170 [ 850.572335][T13096] ? __pfx___mutex_lock+0x10/0x10 [ 850.572361][T13096] ? rcu_is_watching+0x15/0xb0 [ 850.572387][T13096] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 850.572418][T13096] ? btrfs_read_chunk_tree+0xcd/0x2170 [ 850.572438][T13096] btrfs_read_chunk_tree+0xef/0x2170 [ 850.572463][T13096] ? rcu_is_watching+0x15/0xb0 [ 850.572488][T13096] ? trace_irq_disable+0x37/0x110 [ 850.572507][T13096] ? preempt_schedule_irq+0xde/0x150 [ 850.572527][T13096] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 850.572547][T13096] ? preempt_schedule_irq+0xde/0x150 [ 850.572567][T13096] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 850.572587][T13096] ? __pfx_btrfs_read_chunk_tree+0x10/0x10 [ 850.572606][T13096] ? irqentry_exit+0x74/0x90 [ 850.572628][T13096] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.572658][T13096] open_ctree+0x17f2/0x3a10 [ 850.572678][T13096] ? bdi_register_va+0x58d/0x740 [ 850.572696][T13096] ? open_ctree+0xa1a/0x3a10 [ 850.572723][T13096] ? __pfx_open_ctree+0x10/0x10 [ 850.572747][T13096] btrfs_get_tree+0xc6f/0x12d0 [ 850.572774][T13096] vfs_get_tree+0x92/0x2b0 [ 850.572801][T13096] do_new_mount+0x24a/0xa40 [ 850.572832][T13096] __se_sys_mount+0x317/0x410 [ 850.572850][T13096] ? __pfx___se_sys_mount+0x10/0x10 [ 850.572869][T13096] ? do_syscall_64+0xbe/0x3b0 [ 850.572892][T13096] ? __x64_sys_mount+0x20/0xc0 [ 850.572908][T13096] do_syscall_64+0xfa/0x3b0 [ 850.572931][T13096] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.572951][T13096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.572968][T13096] ? clear_bhb_loop+0x60/0xb0 [ 850.572988][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.573010][T13096] RIP: 0033:0x7f18e7b900ca [ 850.573027][T13096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.573044][T13096] RSP: 002b:00007f18e8aafe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 850.573063][T13096] RAX: ffffffffffffffda RBX: 00007f18e8aafef0 RCX: 00007f18e7b900ca [ 850.573077][T13096] RDX: 0000200000005100 RSI: 0000200000000000 RDI: 00007f18e8aafeb0 [ 850.573090][T13096] RBP: 0000200000005100 R08: 00007f18e8aafef0 R09: 0000000000000818 [ 850.573102][T13096] R10: 0000000000000818 R11: 0000000000000246 R12: 0000200000000000 [ 850.573114][T13096] R13: 00007f18e8aafeb0 R14: 00000000000050f3 R15: 0000200000000340 [ 850.573134][T13096] [ 850.908635][T13117] loop7: detected capacity change from 0 to 2048 [ 850.948669][T13117] EXT4-fs: inline encryption not supported [ 850.954706][T13117] EXT4-fs: Ignoring removed mblk_io_submit option [ 850.964098][T13117] ext4: Unknown parameter 'audit' [ 850.979951][T13117] loop7: detected capacity change from 0 to 256 [ 850.989465][T13117] exfat: Deprecated parameter 'namecase' [ 851.007058][T13117] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 851.055307][ T8049] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf