last executing test programs: 14m25.225114292s ago: executing program 32 (id=13): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000340)="07000000010000", 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x110) 14m14.658885057s ago: executing program 33 (id=26): syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) 12m56.108025253s ago: executing program 34 (id=99): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12m43.156893879s ago: executing program 35 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x1, @stop_pts=0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) memfd_create(&(0x7f00000005c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N?\xf3\x95\xd3\xd5\n$\xd11\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\xbe>\x97\x93w\xf4,@R93\xd7D\x17\x1b\xa0\xb5 \x1bkN\x81\x84\xb5\xc4/8&\x98\xed\xe3\x91\xaf\xa1~\x9d\x91\xe1\xab\xf0\xcd\xd5N\x96Ek;\xf1hXq\x1a\xb5\xbf\xf3\xb7\x97\x82j\b\x04\x92`Z\xfc\xa6\xc3\xa7\x1fp\x90\xf6\x8f&rS\x16*Q\xebs\xc1\xbd\xe7\xa2\xd9\x9a\xc61\x10sQ\xf7\xb3;\x05*\xcc+\xeb\xf1\\\xbc\xfe\n\nR\x1d\xe0\xd3\xf4Ax\x94\xdcm\x84\\\xbf\xe6\xce\xca\xe63\xc5s\x97FL \x92R\xa6w\xbc\x93U)P89O\xfb\xdb8\xf29\xbb\x9d\xdb;\xaf\xac2\xd7\xf4\x9c\x16\xb5\xbev\xc6fI\x12\xa2H<\xc6\x8f\"?\xcd`\x03\xaa\xb8\x99\xaa\r\x86\xe92\xe8B\xc2\x93H}\x94\x8d\x8f\xdd\x8e*`\xd8\xb14,9{C\xfb\f\xdd&\x8b\xf8\xe7\x8b\x1e\x97{K|\x83\xe0f?jK\x80j\xa8\x9d', 0x4) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683c15828bfe32297cb88a5aabf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e455eb34e5f8fc7a524ffe"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 11m50.752930711s ago: executing program 6 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 11m49.459074289s ago: executing program 6 (id=162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 11m45.795960865s ago: executing program 6 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, 0x0, 0x4040080) 11m43.633275437s ago: executing program 6 (id=172): socket$inet6(0xa, 0x2, 0x3a) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x1c, 0x0, r6}) 11m39.830129603s ago: executing program 6 (id=178): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r0) ptrace(0x11, r0) ptrace(0x10, r2) ptrace(0x11, r2) ptrace(0xffffffffffffffff, 0x0) 11m37.237547631s ago: executing program 6 (id=179): fanotify_init(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@bh}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbcd, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c1bf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x1f, "14a6c63d876ff44271f19ca6e4482707dab7299602aed83463604d70b41d4008e3"}}) 11m22.006228418s ago: executing program 36 (id=179): fanotify_init(0x200, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@bh}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbcd, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c1bf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0x2) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x4, 0x5, &(0x7f0000000080)={0x1f, "14a6c63d876ff44271f19ca6e4482707dab7299602aed83463604d70b41d4008e3"}}) 11m15.942746778s ago: executing program 37 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) 10m40.45769927s ago: executing program 9 (id=242): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) dup(0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x20008000, 0x0, 0x56, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xe, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) 10m35.566998808s ago: executing program 9 (id=255): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x80000000) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 10m27.018848401s ago: executing program 9 (id=257): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20) 10m18.694657068s ago: executing program 9 (id=266): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x1000000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f08", 0x3) syz_open_dev$dri(0x0, 0x1ff, 0x140) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 10m17.015198363s ago: executing program 9 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000000)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) unshare(0xc040480) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000), 0x8) 10m15.837234877s ago: executing program 9 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000104010100000000000000000d0000040500010001"], 0x34}}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10m0.519833473s ago: executing program 38 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000104010100000000000000000d0000040500010001"], 0x34}}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 7m1.611907642s ago: executing program 8 (id=475): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2000000040000006) 6m56.382024072s ago: executing program 8 (id=467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ce2208000000b7030000"], &(0x7f00000004c0)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0xffffffffffffffff, 0x0) 6m51.156489449s ago: executing program 8 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000000540)=0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4, r8, &(0x7f0000000300)="02000000", 0x4, 0x2a25}]) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r8, &(0x7f0000000000)={r6, r1, 0x1e}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x4000810) 6m41.940273432s ago: executing program 8 (id=481): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x10003a, 0xb, 0x0, 0xffffffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 6m40.714346705s ago: executing program 8 (id=482): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc98d, 0x1c486, 0xffffffdf, 0x173}, &(0x7f0000000000), &(0x7f0000000280)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0x0, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000ff0700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) timerfd_create(0x0, 0x80000) 6m38.752216728s ago: executing program 8 (id=483): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) 6m23.268041534s ago: executing program 39 (id=483): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000400)=""/102400, 0x19000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) 5m46.189740435s ago: executing program 2 (id=547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x5, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}}) 5m42.963774301s ago: executing program 2 (id=551): alarm(0x8000000000000001) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x38, 0x0, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x38}}, 0x800) sendmsg$sock(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) recvmsg(r0, 0x0, 0x2040) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000140)) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001900)=""/4096) 5m41.113045771s ago: executing program 2 (id=553): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40012}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x30004800}, 0x4000000) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4040801) gettid() writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5ad003, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x4040894) close_range(r3, 0xffffffffffffffff, 0x0) 5m33.850917134s ago: executing program 2 (id=561): mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r4, 0x2007ffb) close(r4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) lremovexattr(0x0, 0x0) 5m30.682680865s ago: executing program 2 (id=565): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 5m27.887377101s ago: executing program 2 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m12.220686388s ago: executing program 40 (id=567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m40.900671403s ago: executing program 5 (id=618): mmap(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x189) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e8, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) munlockall() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000080)=0xf9b, 0x3, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 4m40.237224176s ago: executing program 5 (id=619): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x4, 0x1528, &(0x7f00000037c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163242, 0x110) syz_open_dev$video(&(0x7f0000000000), 0x81, 0x200000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090041}, 0x404c810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m36.879189735s ago: executing program 5 (id=621): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000300)={{0x77ded23f, 0x5, 0x0, 0xfffffffd, '\x00', 0x7}, 0x3, 0x0, 0x20, 0x0, 0x0, 0x80080000, 'syz0\x00', 0x0}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x2) 4m34.699397262s ago: executing program 5 (id=622): openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r2, r2, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r3, 0x80101, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) 4m28.93100709s ago: executing program 5 (id=628): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000740)=0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0x62302) socket$netlink(0x10, 0x3, 0x10) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x3, 0x5003) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) 4m25.56016083s ago: executing program 5 (id=630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 4m7.513497866s ago: executing program 41 (id=630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 3m36.634571182s ago: executing program 7 (id=678): capset(&(0x7f0000000680)={0x20080522}, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x81, 0xffffffff, 0x74f9}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r6, 0x3b86, &(0x7f0000000900)={0x18, r7, 0x1000, 0x1004000}) 3m34.059513217s ago: executing program 7 (id=680): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x5, 0x2002) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, r6}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3m32.262201197s ago: executing program 7 (id=681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x270, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @remote, [0xff000000], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)={0x24, 0x0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x24}}, 0x4000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002800)={0x2020}, 0x2020) 3m27.340149217s ago: executing program 3 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x15, r6, 0xffffffffffffffff, 0x5b) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6}, &(0x7f0000000400)=""/120, 0x78, &(0x7f00000004c0)={0x0}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ptrace$peekuser(0x3, r0, 0x9) 3m26.219398656s ago: executing program 3 (id=687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xed08f22113700cb4, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast}, 0xc) shutdown(0xffffffffffffffff, 0x1) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) getpid() socket$isdn(0x22, 0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xe) 3m25.403778393s ago: executing program 7 (id=688): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69000000001406fffe800080000000000000000000000039fe8000000000000000000000000000aa4e204e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x3, 0xc896, 0x4afe, r0}) io_setup(0x9, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000001340)={0x7, "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"}) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000001580)={{r3}, r6, 0x2, @inherit={0x50, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x4f5, {0x0, 0x9, 0x7, 0x18000000000, 0x8000}, [0x3]}}, @devid}) 3m15.08145072s ago: executing program 3 (id=698): iopl(0x3) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4004550d, &(0x7f0000000500)) 3m15.065303885s ago: executing program 7 (id=700): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x3278, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 3m10.57591229s ago: executing program 7 (id=690): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x500, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3m10.399907404s ago: executing program 3 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setreuid(0x0, 0xee00) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3m7.625619155s ago: executing program 3 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) timer_create(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x30428, 0x0) r1 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2005}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1404, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 3m4.962840346s ago: executing program 3 (id=696): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) 2m54.621293232s ago: executing program 42 (id=690): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x500, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2m49.724901233s ago: executing program 43 (id=696): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) 21.348921711s ago: executing program 1 (id=845): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file1/file0\x00', r0, &(0x7f0000000380)='./file1\x00') syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) linkat(r0, &(0x7f00000003c0)='./file1/file0\x00', r0, 0x0, 0x0) 20.539442909s ago: executing program 1 (id=847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000005,iocharset=iso8859-3,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharsjt=iso8859-3,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$P9_RGETATTR(r6, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0x2190, {0x48, 0x2, 0x2}, 0x81, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0xfb, 0x1, 0x2, 0xfffffffffffffff2, 0x400000000dee8, 0x9, 0x3, 0x9, 0x3, 0x5, 0x1, 0x15}}, 0xa0) write$UHID_INPUT(r6, &(0x7f0000000800)={0x8, {"a4072574eb2b3863266098c89aca66e7946a5c60231bdc6338b70246f5fc49cff953e9a60c9fb10fb1ca16ba92f794c2c156a115c214b846ccaf963750533730e4fa1045af0c3ee668948ac1ad61a1879ff4ee5f8d720c236dedef7a2df043e549cf215f5231e7e565411ff481f686265db2e87dca47491fab9d04ed83d3b67e5a323a5ea60aa0546fa9d2c9dde15455ea79954f0f6a9168bca959e05d004314858351ec8bfac56a67166957b849570494d96254b94e5b2bc785936da1f624b94345f9ec14597a6e96a45a3627709954d1d2301b31e8cd75b18e386d1fb07ba6044a3b893454a59a4a0e6ac5d098a96cb8185d4f9267397a2d9724066eee8598b42c6e863cce768dc21cbc45b0816bac49e3c574306183d0bd626fe4104131df6af63cbf742cf251c942c28108d9c2f97930216c3155e3f8f6faab5465fd8745265625f0cde185eb7d2b67e61dd3b11b0b1899f065d91c92454bc1d097dffd9b351dbf5f313101bbf79373dc24dcd4322cb0805bac5befeadf7796947745781b0e5e62ff7d2c3b89f3a0bf44c1a5199f51a16798f577c252fbe563d5b02c7fe7a77a178ec3fb76e124c111d38b9870994a79cd69226978328dfc36b2e82e21c4bda7d33f58b79177d0dff4a3dd034423b2bdd6e51eebb3d71b85ce8ec36938ae3b9c90b9805ffd9ba10f0ee8b3620ccf29432a44d1a9ad765d1b531cdfee5d3a20e8a6af58cb770713ef3e2e09b0be3f6b0bd220a0f78633f635a285bb63ef6947381124f9751e9b5a8a096d9a085aff7f732476bd3a36e696972c7fd52a73c9af8bb84a69d8844eb10dde02ba625b64b8bea2cb541d82e68593534cd2b4585523308d851c9d3c42f2de145c9bfdc79105927ee27b0d943972f9da68d86daccd8616568dfa5d6ba0b4f632288c0b083a71af732514367208388ad80f97f8d5fd9961e616a5335e2ae785a6113652b31fdb96d9a501cf1ee3cf133c3ec4cf7db9686cd81f9a0a4edd73adf1b7a96e557e77a5259d87a2d63c15d4cc787793819e56ec1c7cefbf402380ee4eac7018be2328d0eca02312c7ba44fbef6ce8f67692537a30b63f9613158cc6730b6536f2f213823d5ffeb3f63f8da65ce0252e6a018565f7e7791b661cd8506bc9f654b7c13c7853420dc6eacf2a92f8281d16af5f49bafc58ca63d481f5005cfc187f962ce10dda4ab1a353b1e5d6144df040fa10902645de99cbab440341d804cd3d61a239e8a5bee79f6dfaa462c2249eccdd31884251f20e6e5f5e7c357ae2429b6725fda78288e2dd56619a5f4b972514512e91979f40079a22f033a070f5e34914e11533524cefc1c5a375a9563ef033ede93c9af60bd6028a157743ef601b9801aa69e9c7857b89f42d55094268fc228963dcd9a5a2cac22bcaddd4198e1e9033d33fbd8511f4b2113c08e4c3ffd8f0ff669d405faf9b9af4ec7b56cf7b045890c10b20e3531fb7c9a111c2795b3a87fbb09ae7c296178f2bc71e824a39e369521cbf5b4a16d32df381a2a7df2f322e03f35ecd31d4a20a628cdf387bac8b29e5d8a374ffce0178d9329d481d3bea76b9b71587bc331629ab66a124041dfdaf80651b6246e6d620ffa27aa5c69367bda6a8da4b0c9e33053bc885adcf5c2cf8cb5ca5acb80f2c4554f5f5a8b5500db56416b0b6f2ec60672c076f796206f9807809ed3363f45e8980a78387ec42aa3b9e3712a3b96fea2b04b8828905f23cb7c5f37bbb7d71196b3cfd0f51acc8cec76687c0c076c1e2e62aa9238731cf73045cfb1250febad83ccb6455b5e3b187f38ecd3526d32b4553dcf9c2aff5fa528c10dafd76e6607fb97dc3ffb894934a8212f92de4407e5d6d953d4e037922ca8f057256bf854938edcc409cebfac1cd6508a909dbd83ad513507470f0535047f1512cc34a6d55e66ac5a788cea463a202bb3953d32a3e64158d66f910548372dd69cd3a53e7bae60d68380dfd042a4c68b105ca1349c0023c3cd7f2e56fbde81f7ee3212e8d19651ed5655b7dd6ec73db581517a205837201c649f652a4cdcfa4e245248b01a390b31811dd83c65246f391082f3211fcc00ace83e85b8bba800bded81fb761a00e5826a91b44ada4be19e94d35cdad8bdf78cab8328a34ee6335ec632f4348599f3848c4096e1f57e4c433ee93b2910554fa2dff04c6abc6fa9bd5a3008873c3ed0bf751a219ede62e3f754d75f382bd6309cff407ef18af2b4c2c7ce3f469bb07529beb46916b764553f2e24bfc624f0b63b8aa14b57a1852003948668fedccece750595834f02c414758ee6d22fa08efda5640fd5749a9bc33c3c75937264af62db69f28726c8e0a6e8d03b4fce9fe4a11d487ba5737e8949e84706114291deef5bedf7fd215a1eceb12dcb053023024c8aab49ed629621659b4fb89177007fc4c346491148e8e44885bf7cde0be17cd3b1aba36e2a1c402c759ad6b7519e71cc0ac4829aeeff27727b3b8232b5694a64a21ab57eaa0da9d8a768ffaeedcdad1346ec060e7db42a4c74c9d1a2130a9c0cb40b73e6b7418d85ccd2021f6a7f08ed4a1b086f009550299d2e747b9f75deff2c479dba80b2a9df333f008f2659b299f07df46b3b7e67791d3ed3c59b64ba231fbbf737860de7aa14f05324ab63b8cd6c70d60f866010ce0ce6e6e3aba3220c8e113084e2e42b851225565548379c26d9e56f992ea942bce2cf0ab99b584b88c6b05a2a295361d0fe0e3c3394521ec16527073b519054e9c478e4c394fff303f692ecfd2235c933e18d6271ea8e99ae96f3283423acc64d29207ceb456d51c89b22d75e597016bad56954ab59ba524367427b83b0ded2db4cc23c0b5361b2459989f2e986cd712f60ad5e7b145bcb37baf7c292dd714b5f59f8e31ff714fdc977e651204b5aae6860d70281bc5c05cd9dd1d3b05bdbb0c6965fc5333f367fa5d588a0c11aa8960e071f29fa85a06b5159bdfbd884cca43874168bdb67e4513f35839697aa21a1b63f5033084b35584ebf6042d92d044a3ad8fe2b8c3500a36b9d6cbd30bbf619ce184cef6e1fda83e171a832cf6345c822d9e9748e711e6839262a545114116e0584a0fe51455bdd65378b2960e19da8a10f12cdf25895085a5c06626edcd6c0687e5ae1d3a063be78198c262bfff64a4eb2d86f9222798c3f02a6c89ccecf6002799eb3ef5ff4d03d328db9fe174a16ff8b00a9133b3e5b7f8bd2e7ff024a18cb1252e38ead22511e2381772433a58c324d3bb28eae169845d304e535390ed6d6af029a5a2076d9c11fc1079a093f933427dda51e73293fc77941300dccac0826516d1726d1a0f27a7a58139fc0422b01499951df53d0050d7c0f2c95e62e954ba163b579a914f7a82b3b92144bc46e268011025612d7421c4a3356fa2aba8a171ceb1d95fb4dfdfd86a5cbcdd61c1fa6fc8cb88ee3fed9a0290f52b3820d250b51ea68aae833b868a71a859fdf8b9a8b44686699b60f8eed212eb2bf6ec937cda162476966116274db2205e8ceeda4cd4f553e9d76d2604c894a1119102b7b5c64092da7c9bea06624723fe746117c42c184485f479b7d96ed8cb7e351891b14fdc7344d655a0fc096931e398f5723ed440716788e903647a1008ea95a0cd96dbfbfad9d1d37c53f390b3918d1ff4bfff71bfdefb7824f74e3e71f610a1fea68ad7c890ed8c57c9709e4c4f0dcaf7744f89d686a9883e69c047d31aa5d31618bbe9814663b1f07c0053ea20a17218dff448483bc8ea6ee7f8e7c6bdd6efa3ccefd8292bea228a4efee2de3a2d5eb711076d22e4ccc7ae3c3762776d6766c2a26c616774e3f4f50235e14e7e7702635a911edc5d08f3962edec4db22fb17141d9db7770b1df0e4e3e5d6407dfb3b90410bbccee8c7a097cffe19862c1dee8bbbd1a3ec35e67fab3d1f4bc19745ed84e5545e897aec631f7c68078c35408a41700f3cfd59dbb1500b51206ed9970fa3a1a37bbc99ce27da45bc6f8f1eb105fcfa23835dab6dc3d184fd3d73c8e9fa44b8c362f41c006a976c7d601a807d831f1c59ebb0b4dd497bf7202ade536ab211f7569469fc43d2434f879f1d3c73af56a9997dc2c159ce9921a2d7b91654fe963beb76126b28cd364eac4ea73db08edf83cf1deeeb4236867fe308606651cf23e54aca2a105e7d1e01e212e2ba04ede11d28d9e08fffdcef56e2b99b73728917d73c027f5db2e344ccc327abade161561e71cc7576ee586d18e297e520df41fa7c1eaddcd8399111a9871a46e228a3dd010fbd952e9ca680703a5ad5638edfe9fb849d2cda74d419adce1577f9b7183e3904fbe838fd27e9aaee1060892dfa32f5b696a599bad3a0221d3d4b65c62b8b7db7c7f252fae44f28f8ddce1c0c8b52d0f0776c341893c899199e4e04caa0b00af9563c71b8ea70f9b3a15e8fe194484c359d70a52e9422eacfeba9136cfc6460d4cad94051e4cf4db9b883b632e6ed2be90be54aaa5c321431abc14fb721947236e650e33fa42029df60df355da44edff48ffbea63672ed4bd55ff71085076adbd125a179db5478fa02e61f084fc6230a7ff608a173e45af9db5d3404688a1d2c1bd49e20fa25f4420ad474c1ffa404a67b9083d615c3f6600a855bc10830eea5447d9c7fac4df108b65557340e0b5e56f32a162f64ae3b8d2b2c83dca5082565cec120fce6ad64f8f1d93eefb1b72cf57e058f12b9456c86ec9335ba14117d0ad2da2c28a9fb785f85eba47a1576c973a86b0b9f392b44d417f09ec0a98472374dcac52b4c4d1e7e5db3594f24f86046983d129d4d867d90140d69f192305588833f74c567e9f740b3ec540220f9d08dc9164a7682c298cbc48d635bb2ee011ae46b7520e7ce13051a473aa49fbda58d42b03504dd7119e89fae15cb97dc1a7caa544d833df5e4eff9ba869241a48cd42260f9eeae005ce2fbe6bd4a0dba5fcae69c0b958b15fe88756cc283eddc48d49d32971af45f10c93c7ebf8dbff7d106855a54a74e7db236f610fa68b336858b47e58374419c6c1226e1f5a6121feddbe50c1a03ee6a1c5716e253ac6e127be58dc49c4f213369a763bca75505239e49bcc57464999ad395f54e9139d9bbd357e8a05db549c483ea03e40e3ea7f587c54d0b54c607302eea817e297ccf393cbc1a0b72127ce72a0fc5cd4edad30888aff51bbcf50be8255ea62ca03994c18bbee2eccb120f7a0bdb157a38c6bad8d55cfcee45e8cb85422698b64e3c10dffd0881a7bd0e6d615fbcea0a93e4bf906d3af119dbb3bbed1c53fe889c3f101c9f6453a4a726d56ca2e3aa8af1565897a1c971c676083b92dbe86b2759dba8e078e0794b46b158bc5909348a68349d350fa7399b76816d06fd06d72fc489c2ade729f644009b2a2bb99786ed318f702e1266b0f95f5ed8ca866f0835fa456c452a5dc1fdad9de83953e7b45af6cc368b4e97ca1bf596752585748be88ea70909da09da40ab8a388ffaee2b510f997ab85127d575100a033acd3a4f6b281c39f64c8aef532ab97442bd5a07054ade84e49f0b7d3af868cfd1d02bd904bd00820ffe06b5743e664a786f01e1ebe6b45b01cc6e990f15650d77d981b6c9e45e3d844c7dc7f88d7f1400696a173786e7b083174ad356d3094b8befbd604349c8dd2fe6f56803a7294a297d2051688a2e6f75a52293d86a1f00dcbd56c00e8d124039156aefbc3cf8dad45ea075de731cc9b9fb5d5bee7c2e7f7bb173506f3ef7f232c252676ea0540276ff8cb4ecfb6c55dd2a818e43c73e910f1bb3521d8f7323fcf234c7aae", 0x1000}}, 0x1006) 17.836630416s ago: executing program 0 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r6, 0x2) dup3(r6, r5, 0x0) 17.58698233s ago: executing program 1 (id=851): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x400) dup(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x18, 0x4009, 0x0, 0x1, 0x0}) 14.987034468s ago: executing program 0 (id=853): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x800) read$msr(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2004, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) mkdir(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) ioctl$TCFLSH(r5, 0x540b, 0x1) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180), 0x0, 0x0, 0x7deed55f8b013294) 12.820768913s ago: executing program 1 (id=854): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 12.819840225s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x8000) r4 = socket(0x2d, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, r6, 0x1c, r4}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, 0x0, 0x400c1) 11.079670083s ago: executing program 0 (id=857): ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0xffffffffffffff9f) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) 9.919778176s ago: executing program 1 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffffc284edc4, 0x0, 0x5, 0x0, 0x2000004, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) getdents64(r6, 0x0, 0x0) 9.74767758s ago: executing program 0 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4207, r0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)={0x20000000}) 7.989589146s ago: executing program 1 (id=861): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e23, @loopback}, 0x13) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d", @ANYRESDEC, @ANYBLOB="17738ae71cd1907587cfeaf6b9081f78eb937aa1148b7b4679ab466e44d18bd0d5b4d657682c51205b465e894c8398c90ffe8c0c50f5895be9c8e7184984bb359c46c59cc21c4ef8f59354a3d27ddd79f2fc07affbcaac2caa5bf01d31d347394d032a0ed3a555f02ff39082631e724773d7e21d9b5e3483e870f0c4d050e8ab9f446853be0e4af1e64e0bd6a58d595cc99f9ad2a983228f7ce9c19dac5920bb6b5f72772222f8d3a965cd1be96d0eadcb12416ff232c532eb3c74d05b055d76626e95b047ac6b90b4f4dba544591ae26a048b0da72248dd54bbaff57f2c371c0ef83d2270b781da24b687929a0179aab586ab"], 0xfe, 0x177, &(0x7f0000000680)="$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") 6.32337334s ago: executing program 4 (id=862): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x101}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000005e0095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x12}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 5.142496574s ago: executing program 4 (id=863): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000001b40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x40810, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3]) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500), &(0x7f00000000c0)=""/48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) lseek(r5, 0x5, 0x0) 3.866450963s ago: executing program 4 (id=864): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000000010002", 0x7) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x94, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.071480554s ago: executing program 4 (id=865): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x55, 0x6, @multicast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, 0x0) 1.970052077s ago: executing program 4 (id=866): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x103000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28) syz_pidfd_open(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r5, r5, 0x0, 0xf2) 173.471603ms ago: executing program 4 (id=867): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 0s ago: executing program 0 (id=868): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdir(0x0, 0x0) removexattr(0x0, &(0x7f0000000280)=@known='system.posix_acl_default\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Z'}]}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd4}}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) listen(r0, 0xac) r5 = dup2(r0, r0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) kernel console output (not intermixed with test programs): a7e350 R08: 0000000000000000 R09: 0000000000000000 [ 637.078371][ T8277] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff06a7f3e0 [ 637.078388][ T8277] R13: 00007fd302e13d7d R14: 000000000009b64a R15: 00007fff06a7f420 [ 637.078432][ T8277] [ 637.078442][ T8277] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 638.583083][ T8805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.661621][ T8805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.727713][ T9049] loop7: detected capacity change from 0 to 256 [ 638.735259][ T9049] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 638.755106][ T9049] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 638.779688][ T8805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.420444][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.546'. [ 640.512412][ T8805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 640.559040][ T9064] loop5: detected capacity change from 0 to 64 [ 641.976223][ T9076] loop7: detected capacity change from 0 to 32768 [ 641.984973][ T9076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.550 (9076) [ 642.012368][ T9076] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.022812][ T9076] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 642.051444][ T9077] syz.3.549 uses obsolete (PF_INET,SOCK_PACKET) [ 645.952047][ T9076] BTRFS info (device loop7): enabling ssd optimizations [ 645.959049][ T9076] BTRFS info (device loop7): turning on async discard [ 645.965962][ T9076] BTRFS info (device loop7): enabling free space tree [ 645.975979][ T9107] loop5: detected capacity change from 0 to 512 [ 646.013495][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.061021][ T9076] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 646.127201][ T9107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.139750][ T9107] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.191596][ T31] audit: type=1804 audit(1766964975.180:35): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.552" name="/newroot/16/file1/file2" dev="loop5" ino=16 res=1 errno=0 [ 646.369452][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.428556][ T8509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.350591][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.357814][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.771907][ T9126] binder: BINDER_SET_CONTEXT_MGR already set [ 648.778069][ T9126] binder: 9125:9126 ioctl 4018620d 2000000002c0 returned -16 [ 648.912123][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.919298][ T4595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.651945][ T8805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 651.294603][ T9137] bond1: entered promiscuous mode [ 651.326276][ T9137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.374882][ T9140] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 651.515617][ T9146] loop5: detected capacity change from 0 to 256 [ 651.713961][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.817224][ T9140] lo: entered promiscuous mode [ 651.825088][ T3246] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 651.843492][ T9140] bond1: (slave lo): Enslaving as an active interface with an up link [ 651.892105][ T9154] loop1: detected capacity change from 0 to 512 [ 651.953216][ T9140] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 651.983900][ T9154] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 652.011592][ T31] audit: type=1800 audit(1766964981.010:36): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.561" name="bus" dev="ramfs" ino=23884 res=0 errno=0 [ 652.050583][ T9143] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 652.079416][ T7783] bond1: (slave lo): link status up again after 0 ms [ 652.172004][ T7783] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 652.291395][ T7783] bond1: (slave lo): link status up again after 0 ms [ 653.899918][ T7783] bond1: (slave lo): failed to get link speed/duplex [ 654.162537][ T13] bond1: (slave lo): failed to get link speed/duplex [ 654.279911][ T9162] loop5: detected capacity change from 0 to 4096 [ 654.367842][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.144689][ T2964] bond1: (slave lo): failed to get link speed/duplex [ 656.353049][ T1322] bond1: (slave lo): failed to get link speed/duplex [ 656.573429][ T6038] bond1: (slave lo): failed to get link speed/duplex [ 656.633934][ T8805] veth0_vlan: entered promiscuous mode [ 656.696673][ T8805] veth1_vlan: entered promiscuous mode [ 656.888546][ T8805] veth0_macvtap: entered promiscuous mode [ 656.968435][ T8805] veth1_macvtap: entered promiscuous mode [ 657.027619][ T13] bond1: (slave lo): failed to get link speed/duplex [ 657.156281][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.934608][ T12] bond1: (slave lo): failed to get link speed/duplex [ 657.995688][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.036040][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.070790][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.114933][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.162907][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.575603][ T4595] bond1: (slave lo): failed to get link speed/duplex [ 659.215701][ T3535] bond1: (slave lo): failed to get link speed/duplex [ 659.373452][ T6115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.403133][ T6115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.662249][ T8673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.653384][ T8673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.678320][ T9202] uprobe: +}[@:9202 failed to unregister, leaking uprobe [ 662.112474][ T6186] bond1: (slave lo): failed to get link speed/duplex [ 662.220931][ T6157] bond1: (slave lo): failed to get link speed/duplex [ 662.562763][ T6157] bond1: (slave lo): failed to get link speed/duplex [ 662.870175][ T6157] bond1: (slave lo): failed to get link speed/duplex [ 663.867999][ T9217] loop1: detected capacity change from 0 to 2048 [ 663.905304][ T9217] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 663.939237][ T9217] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 663.946992][ T9217] UDF-fs: Scanning with blocksize 512 failed [ 663.998873][ T9217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 664.990550][ T6057] bond1: (slave lo): failed to get link speed/duplex [ 665.155505][ T12] bond1: (slave lo): failed to get link speed/duplex [ 665.503928][ T9225] loop7: detected capacity change from 0 to 40427 [ 665.512812][ T6057] bond1: (slave lo): failed to get link speed/duplex [ 665.523864][ T9225] F2FS-fs (loop7): Image doesn't support compression [ 665.530597][ T9225] F2FS-fs (loop7): build fault injection rate: 690 [ 665.540885][ T9225] F2FS-fs (loop7): invalid crc value [ 665.612770][ T9225] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 665.625305][ T9225] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 665.816370][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 665.825481][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 665.837064][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 665.845319][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 665.862453][ T6057] bond1: (slave lo): failed to get link speed/duplex [ 665.884601][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 668.426471][ T5834] Bluetooth: hci6: command tx timeout [ 669.185676][ T7148] bond1: (slave lo): failed to get link speed/duplex [ 670.940113][ T5834] Bluetooth: hci6: command tx timeout [ 672.754025][ T6038] bond1: (slave lo): failed to get link speed/duplex [ 673.020519][ T5834] Bluetooth: hci6: command tx timeout [ 673.650735][ T9270] fuse: Bad value for 'fd' [ 674.994467][ T9274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.003269][ T9274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.010944][ T9274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.019270][ T9274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.027833][ T9274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.100587][ T5144] Bluetooth: hci6: command tx timeout [ 675.567986][ T9281] loop1: detected capacity change from 0 to 16 [ 675.589430][ T9281] erofs: Unknown parameter 'dax' [ 675.821443][ T3797] bond1: (slave lo): failed to get link speed/duplex [ 675.954747][ T8694] udevd[8694]: incorrect erofs checksum on /dev/loop1 [ 676.897137][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 676.908638][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 677.126013][ T9274] Bluetooth: hci0: command tx timeout [ 677.615190][ T9298] netlink: 'syz.5.583': attribute type 1 has an invalid length. [ 677.623510][ T9298] netlink: 'syz.5.583': attribute type 3 has an invalid length. [ 677.632499][ T9298] netlink: 224 bytes leftover after parsing attributes in process `syz.5.583'. [ 677.993513][ T9299] loop5: detected capacity change from 0 to 32768 [ 678.001047][ T9299] ocfs2: Unknown parameter '' [ 678.543825][ T9301] loop3: detected capacity change from 0 to 32768 [ 678.620706][ T6038] bond1: (slave lo): failed to get link speed/duplex [ 678.652766][ T9301] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.590 (9301) [ 678.730601][ T9301] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 678.740796][ T9301] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 679.180527][ T5834] Bluetooth: hci0: command tx timeout [ 679.222464][ T9301] BTRFS info (device loop3): enabling ssd optimizations [ 679.229489][ T9301] BTRFS info (device loop3): turning on async discard [ 679.236498][ T9301] BTRFS info (device loop3): enabling free space tree [ 681.770581][ T5834] Bluetooth: hci0: command tx timeout [ 682.124444][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.257959][ T8277] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 683.839143][ T5828] Bluetooth: hci0: command tx timeout [ 683.930240][ T9229] chnl_net:caif_netlink_parms(): no params data found [ 686.124591][ T9343] loop7: detected capacity change from 0 to 32768 [ 686.132618][ T9343] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.586 (9343) [ 686.151362][ T9343] BTRFS info (device loop7): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 686.162840][ T9343] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 686.459634][ T9343] BTRFS info (device loop7): enabling ssd optimizations [ 686.466717][ T9343] BTRFS info (device loop7): turning on async discard [ 686.473535][ T9343] BTRFS info (device loop7): enabling free space tree [ 688.124296][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.537004][ T6771] BTRFS info (device loop7): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 689.579514][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.653220][ T9384] loop3: detected capacity change from 0 to 16 [ 689.660345][ T9384] erofs: Unknown parameter 'dax' [ 689.710339][ T8694] udevd[8694]: incorrect erofs checksum on /dev/loop3 [ 690.323548][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.950914][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.675087][ T9407] capability: warning: `syz.5.596' uses deprecated v2 capabilities in a way that may be insecure [ 692.716061][ T9407] loop5: detected capacity change from 0 to 512 [ 692.766370][ T9407] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 692.802682][ T9407] EXT4-fs (loop5): invalid journal inode [ 692.809376][ T9407] EXT4-fs (loop5): can't get journal size [ 693.024009][ T3246] bond1: (slave lo): failed to get link speed/duplex [ 693.235192][ T9407] EXT4-fs (loop5): 1 truncate cleaned up [ 693.242979][ T9407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.319274][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.437797][ T9410] ipt_REJECT: ECHOREPLY no longer supported. [ 694.079093][ T9416] ipt_REJECT: ECHOREPLY no longer supported. [ 694.318035][ T8509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.219600][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.418828][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.429321][ T9229] bridge_slave_0: entered allmulticast mode [ 695.456622][ T9229] bridge_slave_0: entered promiscuous mode [ 696.635148][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.659626][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.700791][ T9229] bridge_slave_1: entered allmulticast mode [ 698.364362][ T9229] bridge_slave_1: entered promiscuous mode [ 698.676377][ T9446] loop5: detected capacity change from 0 to 40427 [ 700.367565][ T9446] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 700.376243][ T9446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 700.421404][ T9446] F2FS-fs (loop5): invalid crc value [ 700.522525][ T9446] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 700.555680][ T9446] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 700.562853][ T9446] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 701.820751][ T31] audit: type=1800 audit(1766965030.810:37): pid=9463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.612" name="file1" dev="loop5" ino=11 res=0 errno=0 [ 704.058528][ T9229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.187343][ T9273] chnl_net:caif_netlink_parms(): no params data found [ 704.229166][ T9229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.319802][ T9476] ipt_REJECT: ECHOREPLY no longer supported. [ 704.644487][ T9480] loop5: detected capacity change from 0 to 256 [ 704.701405][ T9480] exfat: Deprecated parameter 'namecase' [ 704.707403][ T9480] exfat: Deprecated parameter 'namecase' [ 704.805335][ T9480] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 704.952861][ T9229] team0: Port device team_slave_0 added [ 705.492139][ T9229] team0: Port device team_slave_1 added [ 705.498002][ T50] bridge_slave_1: left allmulticast mode [ 705.540723][ T50] bridge_slave_1: left promiscuous mode [ 705.546488][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.651584][ T50] bridge_slave_0: left allmulticast mode [ 705.677526][ T50] bridge_slave_0: left promiscuous mode [ 705.699020][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.231184][ T9499] loop3: detected capacity change from 0 to 40427 [ 708.238780][ T9499] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 708.246558][ T9499] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 708.258845][ T9499] F2FS-fs (loop3): invalid crc value [ 709.970968][ T9503] ipt_REJECT: ECHOREPLY no longer supported. [ 710.120632][ T9499] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 710.161282][ T9499] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 710.168360][ T9499] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 710.493266][ T9512] loop7: detected capacity change from 0 to 40427 [ 710.627905][ T31] audit: type=1800 audit(1766965039.540:38): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.614" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 710.786120][ T9512] F2FS-fs (loop7): Image doesn't support compression [ 710.794138][ T9512] F2FS-fs (loop7): build fault injection rate: 690 [ 710.802368][ T9512] F2FS-fs (loop7): invalid crc value [ 711.124613][ T9512] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 711.179003][ T9512] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 713.011089][ T6771] syz-executor: attempt to access beyond end of device [ 713.011089][ T6771] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 713.087688][ T6771] CPU: 1 UID: 0 PID: 6771 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 713.087729][ T6771] Tainted: [L]=SOFTLOCKUP [ 713.087738][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.087754][ T6771] Call Trace: [ 713.087764][ T6771] [ 713.087775][ T6771] dump_stack_lvl+0xe8/0x150 [ 713.087816][ T6771] f2fs_handle_critical_error+0x37c/0x540 [ 713.087855][ T6771] f2fs_write_end_io+0x886/0xb60 [ 713.087921][ T6771] __submit_merged_bio+0x256/0x660 [ 713.087958][ T6771] __submit_merged_write_cond+0x269/0x530 [ 713.087996][ T6771] f2fs_write_data_pages+0x2756/0x3290 [ 713.088025][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088102][ T6771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 713.088153][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088181][ T6771] ? __lock_acquire+0x6b6/0x2cf0 [ 713.088253][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088282][ T6771] ? __lock_acquire+0x6b6/0x2cf0 [ 713.088329][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088357][ T6771] ? __lock_acquire+0x6b6/0x2cf0 [ 713.088396][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088425][ T6771] ? do_raw_spin_lock+0x121/0x290 [ 713.088468][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088503][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088532][ T6771] ? do_raw_spin_unlock+0x122/0x240 [ 713.088570][ T6771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 713.088603][ T6771] do_writepages+0x32e/0x550 [ 713.088641][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088674][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088708][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088737][ T6771] ? do_raw_spin_unlock+0x122/0x240 [ 713.088780][ T6771] filemap_fdatawrite+0x199/0x240 [ 713.088816][ T6771] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 713.088908][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088941][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.088977][ T6771] ? do_raw_spin_unlock+0x122/0x240 [ 713.089019][ T6771] f2fs_sync_dirty_inodes+0x30f/0x810 [ 713.089076][ T6771] f2fs_write_checkpoint+0x935/0x2430 [ 713.089152][ T6771] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 713.089185][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.089292][ T6771] kill_f2fs_super+0x2d2/0x6c0 [ 713.089335][ T6771] ? __pfx_kill_f2fs_super+0x10/0x10 [ 713.089403][ T6771] deactivate_locked_super+0xbc/0x130 [ 713.089446][ T6771] cleanup_mnt+0x425/0x4c0 [ 713.089483][ T6771] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.089529][ T6771] task_work_run+0x1d4/0x260 [ 713.089572][ T6771] ? __pfx_task_work_run+0x10/0x10 [ 713.089609][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.089651][ T6771] exit_to_user_mode_loop+0xef/0x4e0 [ 713.089677][ T6771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.089705][ T6771] ? rcu_is_watching+0x15/0xb0 [ 713.089742][ T6771] do_syscall_64+0x2b7/0xf80 [ 713.089768][ T6771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.089792][ T6771] ? trace_irq_disable+0x37/0x100 [ 713.089835][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.089859][ T6771] RIP: 0033:0x7f7b55990a77 [ 713.089881][ T6771] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 713.089908][ T6771] RSP: 002b:00007ffe0ea93ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 713.089935][ T6771] RAX: 0000000000000000 RBX: 00007f7b55a13d7d RCX: 00007f7b55990a77 [ 713.089953][ T6771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0ea93f80 [ 713.089970][ T6771] RBP: 00007ffe0ea93f80 R08: 0000000000000000 R09: 0000000000000000 [ 713.089987][ T6771] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0ea95010 [ 713.090005][ T6771] R13: 00007f7b55a13d7d R14: 00000000000ae0a6 R15: 00007ffe0ea95050 [ 713.090050][ T6771] [ 713.090060][ T6771] F2FS-fs (loop7): Remounting filesystem read-only [ 714.530160][ T9527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 715.869298][ T9533] loop1: detected capacity change from 0 to 2048 [ 716.584487][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.641955][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.678282][ T9542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 717.261243][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 719.144310][ T9542] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 719.217210][ T50] bond0 (unregistering): Released all slaves [ 719.559338][ T9542] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 719.797990][ T9555] loop3: detected capacity change from 0 to 256 [ 719.805542][ T9555] exfat: Deprecated parameter 'namecase' [ 720.013511][ T9555] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 720.493557][ T9542] Remounting filesystem read-only [ 720.527584][ T5827] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 720.953759][ T9558] loop3: detected capacity change from 0 to 32768 [ 721.004685][ T9558] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 721.034916][ T9558] XFS (loop3): Ending clean mount [ 721.045359][ T9558] XFS (loop3): Quotacheck needed: Please wait. [ 721.088326][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.119229][ T9558] XFS (loop3): Quotacheck: Done. [ 721.127445][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.152104][ T9273] bridge_slave_0: entered allmulticast mode [ 721.189506][ T9273] bridge_slave_0: entered promiscuous mode [ 722.214621][ T9578] ipt_REJECT: ECHOREPLY no longer supported. [ 722.222779][ T6057] bond1: (slave lo): failed to get link speed/duplex [ 722.244145][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.516049][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.550626][ T9229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.579494][ T9229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.606584][ T9229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.672442][ T9229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.694159][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.744449][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.821765][ T9273] bridge_slave_1: entered allmulticast mode [ 722.849409][ T9580] loop7: detected capacity change from 0 to 1024 [ 722.940788][ T9273] bridge_slave_1: entered promiscuous mode [ 723.660093][ T8277] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 723.837782][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.881246][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.888992][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.902302][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.912295][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 725.139623][ T9607] loop7: detected capacity change from 0 to 256 [ 726.300499][ T5834] Bluetooth: hci4: command tx timeout [ 726.410473][ T13] bond1: (slave lo): failed to get link speed/duplex [ 730.091397][ T5834] Bluetooth: hci4: command tx timeout [ 730.102635][ T9273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.185223][ T9273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.407764][ T50] hsr_slave_0: left promiscuous mode [ 731.446702][ T50] hsr_slave_1: left promiscuous mode [ 731.824236][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.240661][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.257612][ T5834] Bluetooth: hci4: command tx timeout [ 732.302804][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.310230][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.530890][ T50] veth1_macvtap: left promiscuous mode [ 732.536416][ T50] veth0_macvtap: left promiscuous mode [ 732.600652][ T50] veth1_vlan: left promiscuous mode [ 732.626984][ T50] veth0_vlan: left promiscuous mode [ 734.347328][ T9649] fuse: Bad value for 'fd' [ 735.422026][ T5834] Bluetooth: hci4: command tx timeout [ 737.616492][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 737.669596][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 737.677460][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.685889][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.693677][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 739.415553][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 739.438791][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 739.454873][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 739.462810][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 739.470900][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 740.216793][ T50] team0 (unregistering): Port device team_slave_1 removed [ 740.292573][ T50] team0 (unregistering): Port device team_slave_0 removed [ 742.120861][ T5828] Bluetooth: hci7: command tx timeout [ 742.127783][ T5834] Bluetooth: hci6: command tx timeout [ 743.145705][ T9676] Invalid ELF header magic: != ELF [ 744.140758][ T5828] Bluetooth: hci7: command tx timeout [ 744.146229][ T5834] Bluetooth: hci6: command tx timeout [ 744.159249][ T9679] loop3: detected capacity change from 0 to 2048 [ 744.243690][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.900707][ T6224] bond1: (slave lo): failed to get link speed/duplex [ 745.161545][ T9690] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 745.177220][ T9690] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 745.189514][ T9690] EXT4-fs (loop3): This should not happen!! Data will be lost [ 745.189514][ T9690] [ 745.199243][ T9690] EXT4-fs (loop3): Total free blocks count 0 [ 745.212684][ T9690] EXT4-fs (loop3): Free/Dirty block details [ 745.219818][ T9690] EXT4-fs (loop3): free_blocks=2415919104 [ 745.226521][ T9690] EXT4-fs (loop3): dirty_blocks=16 [ 745.231760][ T9690] EXT4-fs (loop3): Block reservation details [ 745.237854][ T9690] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 745.430516][ T31] audit: type=1800 audit(1766965074.150:39): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.662" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 745.501664][ T9688] input: syz1 as /devices/virtual/input/input9 [ 745.661931][ T8277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.220679][ T5828] Bluetooth: hci7: command tx timeout [ 746.226245][ T5834] Bluetooth: hci6: command tx timeout [ 747.091895][ T6006] bond1: (slave lo): failed to get link speed/duplex [ 747.949528][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'. [ 747.959166][ T9707] openvswitch: netlink: Missing key (keys=40, expected=80) [ 747.981426][ T9707] tmpfs: Bad value for 'mpol' [ 748.444819][ T5828] Bluetooth: hci7: command tx timeout [ 748.450283][ T5834] Bluetooth: hci6: command tx timeout [ 750.748714][ T8673] bond1: (slave lo): failed to get link speed/duplex [ 751.163834][ T9729] loop1: detected capacity change from 0 to 764 [ 751.587686][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.790471][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.893439][ T6186] bond1: (slave lo): failed to get link speed/duplex [ 753.340649][ T9621] bond1: (slave lo): failed to get link speed/duplex [ 757.825273][ T9621] bond1: (slave lo): failed to get link speed/duplex [ 758.105629][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.219164][ T9593] chnl_net:caif_netlink_parms(): no params data found [ 758.329752][ T9663] chnl_net:caif_netlink_parms(): no params data found [ 758.536461][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.858935][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.970555][ T7148] bond1: (slave lo): failed to get link speed/duplex [ 760.034219][ T9789] loop1: detected capacity change from 0 to 8 [ 760.160740][ T9790] overlayfs: missing 'workdir' [ 760.888876][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 761.026977][ T9794] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.035188][ T9794] SQUASHFS error: Failed to read block 0x0: -5 [ 761.042413][ T9794] SQUASHFS error: Failed to read block 0xff: -5 [ 761.050994][ T9794] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.059051][ T9794] SQUASHFS error: Failed to read block 0x0: -5 [ 761.068092][ T31] audit: type=1800 audit(1766965090.060:40): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.666" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 761.099050][ T9794] SQUASHFS error: lzo decompression failed, data probably corrupt [ 761.108214][ T9794] SQUASHFS error: Failed to read block 0x0: -5 [ 761.116477][ T31] audit: type=1800 audit(1766965090.110:41): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.666" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 761.177837][ T9794] SQUASHFS error: Failed to read block 0x6a4: -5 [ 761.184357][ T9794] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 761.191723][ T9794] SQUASHFS error: read_indexes: reading block [6a2:0] [ 761.199885][ T9794] SQUASHFS error: Failed to read block 0x0: -5 [ 761.207252][ T9794] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 761.214619][ T9794] SQUASHFS error: read_indexes: reading block [6a2:0] [ 761.221712][ T9794] SQUASHFS error: Failed to read block 0x0: -5 [ 761.346119][ T9795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.666'. [ 763.436272][ T9804] ipt_REJECT: ECHOREPLY no longer supported. [ 765.325564][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.425542][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.468063][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.490794][ T9593] bridge_slave_0: entered allmulticast mode [ 765.536367][ T9593] bridge_slave_0: entered promiscuous mode [ 766.495113][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.530713][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.537973][ T9593] bridge_slave_1: entered allmulticast mode [ 766.591217][ T9593] bridge_slave_1: entered promiscuous mode [ 766.757990][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.800723][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.807947][ T9663] bridge_slave_0: entered allmulticast mode [ 766.881830][ T9663] bridge_slave_0: entered promiscuous mode [ 766.900530][ T6157] bond1: (slave lo): failed to get link speed/duplex [ 766.918539][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.996147][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.680711][ T9663] bridge_slave_1: entered allmulticast mode [ 767.688530][ T9663] bridge_slave_1: entered promiscuous mode [ 768.065299][ T6423] bond1: (slave lo): failed to get link speed/duplex [ 769.538443][ T9843] fuse: Bad value for 'fd' [ 772.472565][ T9663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.526025][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.553343][ T9663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.415004][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.549923][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.571947][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.579141][ T9657] bridge_slave_0: entered allmulticast mode [ 773.617383][ T9657] bridge_slave_0: entered promiscuous mode [ 773.842037][ T9861] 9pnet_virtio: no channels available for device syz [ 774.224216][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.248509][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.266954][ T9657] bridge_slave_1: entered allmulticast mode [ 774.282763][ T9657] bridge_slave_1: entered promiscuous mode [ 774.338363][ T9663] team0: Port device team_slave_0 added [ 774.387438][ T9663] team0: Port device team_slave_1 added [ 774.412846][ T9593] team0: Port device team_slave_0 added [ 774.533331][ T9869] loop3: detected capacity change from 0 to 512 [ 774.589252][ T9869] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.684: inode has both inline data and extents flags [ 774.653572][ T9869] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.684: couldn't read orphan inode 15 (err -117) [ 774.668418][ T9593] team0: Port device team_slave_1 added [ 774.722273][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.743510][ T9869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.483101][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.490069][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.533798][ T9663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.572567][ T9663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.579511][ T9663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.646593][ T9663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.853644][ T31] audit: type=1804 audit(1766965105.820:42): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.684" name="/newroot/49/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 777.003957][ T9883] Invalid ELF header magic: != ELF [ 777.177417][ T31] audit: type=1800 audit(1766965105.820:43): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.684" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 777.282720][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.397822][ T8277] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.617879][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.241687][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.248663][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.363647][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.477341][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.535117][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.624696][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.557702][ T9657] team0: Port device team_slave_0 added [ 779.597613][ T9901] loop2: detected capacity change from 0 to 7 [ 780.078486][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.213945][ T8694] Dev loop2: unable to read RDB block 7 [ 780.219545][ T8694] loop2: unable to read partition table [ 780.277192][ T8694] loop2: partition table beyond EOD, truncated [ 780.313384][ T9901] Dev loop2: unable to read RDB block 7 [ 780.378673][ T9901] loop2: unable to read partition table [ 780.403272][ T9901] loop2: partition table beyond EOD, truncated [ 780.410609][ T9901] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 780.559029][ T9657] team0: Port device team_slave_1 added [ 780.696240][ T9663] hsr_slave_0: entered promiscuous mode [ 780.786932][ T9663] hsr_slave_1: entered promiscuous mode [ 780.804953][ T9663] debugfs: 'hsr0' already exists in 'hsr' [ 780.812004][ T9663] Cannot create hsr debugfs directory [ 780.984014][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.410962][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.417966][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.445287][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.485734][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.493644][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.520530][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.539602][ T9593] hsr_slave_0: entered promiscuous mode [ 781.546624][ T9593] hsr_slave_1: entered promiscuous mode [ 781.553570][ T9593] debugfs: 'hsr0' already exists in 'hsr' [ 781.559291][ T9593] Cannot create hsr debugfs directory [ 781.597211][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.765947][ T9657] hsr_slave_0: entered promiscuous mode [ 781.772496][ T9657] hsr_slave_1: entered promiscuous mode [ 781.784451][ T9657] debugfs: 'hsr0' already exists in 'hsr' [ 781.790163][ T9657] Cannot create hsr debugfs directory [ 781.970725][ T6423] bond1: (slave lo): failed to get link speed/duplex [ 782.195935][ T50] bridge_slave_1: left allmulticast mode [ 782.201731][ T50] bridge_slave_1: left promiscuous mode [ 782.207418][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.216909][ T50] bridge_slave_0: left allmulticast mode [ 782.222807][ T50] bridge_slave_0: left promiscuous mode [ 782.228498][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.239989][ T50] bridge_slave_1: left allmulticast mode [ 782.245718][ T50] bridge_slave_1: left promiscuous mode [ 782.252395][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.264639][ T50] bridge_slave_0: left allmulticast mode [ 782.270267][ T50] bridge_slave_0: left promiscuous mode [ 782.276121][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.289220][ T50] bridge_slave_1: left allmulticast mode [ 782.294948][ T50] bridge_slave_1: left promiscuous mode [ 782.301871][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.312883][ T50] bridge_slave_0: left allmulticast mode [ 782.318516][ T50] bridge_slave_0: left promiscuous mode [ 782.324397][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.334844][ T50] bridge_slave_1: left allmulticast mode [ 782.340522][ T50] bridge_slave_1: left promiscuous mode [ 782.346187][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.355978][ T50] bridge_slave_0: left allmulticast mode [ 782.361898][ T50] bridge_slave_0: left promiscuous mode [ 782.367551][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.569789][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.581173][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.591784][ T50] bond0 (unregistering): Released all slaves [ 782.817363][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.828096][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.838524][ T50] bond0 (unregistering): Released all slaves [ 782.926693][ T50] bond1 (unregistering): (slave lo): Removing an active aggregator [ 782.937410][ T50] bond1 (unregistering): (slave lo): Releasing backup interface [ 782.945751][ T50] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 782.957187][ T50] lo: left promiscuous mode [ 782.964401][ T50] bond1 (unregistering): Released all slaves [ 783.047666][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 783.055840][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.067487][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 783.076155][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 783.076411][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.093941][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 783.115801][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.125999][ T50] bond0 (unregistering): Released all slaves [ 783.360996][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.372541][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.383867][ T50] bond0 (unregistering): Released all slaves [ 784.115062][ T50] hsr_slave_0: left promiscuous mode [ 784.121577][ T50] hsr_slave_1: left promiscuous mode [ 784.127636][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.138210][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.148819][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.156337][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.164243][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.171994][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.187398][ T50] hsr_slave_0: left promiscuous mode [ 784.193398][ T50] hsr_slave_1: left promiscuous mode [ 784.199247][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.206681][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.215065][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.222628][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.252673][ T50] veth1_macvtap: left promiscuous mode [ 784.258168][ T50] veth0_macvtap: left promiscuous mode [ 784.263824][ T50] veth1_vlan: left promiscuous mode [ 784.269118][ T50] veth0_vlan: left promiscuous mode [ 784.275665][ T50] veth1_macvtap: left promiscuous mode [ 784.281225][ T50] veth0_macvtap: left promiscuous mode [ 784.286799][ T50] veth1_vlan: left promiscuous mode [ 784.292711][ T50] veth0_vlan: left promiscuous mode [ 784.866093][ T50] team0 (unregistering): Port device team_slave_1 removed [ 784.899767][ T50] team0 (unregistering): Port device team_slave_0 removed [ 785.180513][ T5834] Bluetooth: hci0: command tx timeout [ 785.226385][ T50] team0 (unregistering): Port device team_slave_1 removed [ 785.251966][ T50] team0 (unregistering): Port device team_slave_0 removed [ 785.643336][ T50] team0 (unregistering): Port device team_slave_1 removed [ 785.680250][ T50] team0 (unregistering): Port device team_slave_0 removed [ 786.040157][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 786.053413][ T9663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.095079][ T9663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.133301][ T9663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.158580][ T9663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.292941][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.300138][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.310003][ T9934] bridge_slave_0: entered allmulticast mode [ 786.318354][ T9934] bridge_slave_0: entered promiscuous mode [ 786.329356][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.337763][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.346047][ T9934] bridge_slave_1: entered allmulticast mode [ 786.356023][ T9934] bridge_slave_1: entered promiscuous mode [ 786.424487][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.471298][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.533452][ T9934] team0: Port device team_slave_0 added [ 786.569173][ T9934] team0: Port device team_slave_1 added [ 786.623016][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.629952][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.670268][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.718469][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.726599][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.752707][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.786864][ T9657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 786.802121][ T9657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 786.844953][ T9657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 786.876766][ T9657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 786.909400][ T9934] hsr_slave_0: entered promiscuous mode [ 786.916691][ T9934] hsr_slave_1: entered promiscuous mode [ 787.174276][ T9663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.236996][ T9663] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.267675][ T5834] Bluetooth: hci0: command tx timeout [ 787.285632][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.292774][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.303905][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.311070][ T6423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.412570][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.453493][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.480170][ T50] bridge_slave_1: left allmulticast mode [ 787.486453][ T50] bridge_slave_1: left promiscuous mode [ 787.492282][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.502976][ T50] bridge_slave_0: left allmulticast mode [ 787.508595][ T50] bridge_slave_0: left promiscuous mode [ 787.517164][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.618133][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.629039][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.639388][ T50] bond0 (unregistering): Released all slaves [ 787.664617][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.672101][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.726274][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.733407][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.764449][ T50] hsr_slave_0: left promiscuous mode [ 787.777230][ T50] hsr_slave_1: left promiscuous mode [ 787.784444][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.793160][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.954699][ T50] team0 (unregistering): Port device team_slave_1 removed [ 787.979343][ T50] team0 (unregistering): Port device team_slave_0 removed [ 788.292149][ T9934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 788.307419][ T9934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 788.343741][ T9934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 788.356852][ T9934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 788.425401][ T9663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.619842][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.664789][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.685660][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.692827][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.735175][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.742322][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.887064][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.043390][ T9663] veth0_vlan: entered promiscuous mode [ 789.074381][ T9663] veth1_vlan: entered promiscuous mode [ 789.144275][ T9663] veth0_macvtap: entered promiscuous mode [ 789.182986][ T9663] veth1_macvtap: entered promiscuous mode [ 789.225566][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.249300][ T9663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.297066][ T4595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.311034][ T4595] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.320376][ T4595] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.340750][ T5834] Bluetooth: hci0: command tx timeout [ 789.356362][ T4595] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.387064][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.463850][ T7248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.487545][ T7248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.537992][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.553059][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.561352][ T9934] veth0_vlan: entered promiscuous mode [ 789.599098][ T9934] veth1_vlan: entered promiscuous mode [ 789.716114][ T9657] veth0_vlan: entered promiscuous mode [ 789.769874][ T9657] veth1_vlan: entered promiscuous mode [ 789.791514][ T9934] veth0_macvtap: entered promiscuous mode [ 789.819352][ T9934] veth1_macvtap: entered promiscuous mode [ 789.920140][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.615293][ T5834] Bluetooth: hci0: command tx timeout [ 793.695858][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.974283][ T9657] veth0_macvtap: entered promiscuous mode [ 793.981068][ T9996] loop1: detected capacity change from 0 to 32768 [ 794.159112][ T9996] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 794.196412][ T6423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.263649][ T9996] XFS (loop1): Ending clean mount [ 794.273498][ T9996] XFS (loop1): Quotacheck needed: Please wait. [ 794.305761][ T6423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.356035][ T9996] XFS (loop1): Quotacheck: Done. [ 794.919428][T10022] fuse: Bad value for 'fd' [ 796.511316][ T6423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.610831][ T6423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.657053][ T5827] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 797.410022][T10036] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 798.061224][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 798.069602][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 798.082706][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 798.090976][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 798.110764][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.274248][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.533163][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.586479][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.660482][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.236126][ T5834] Bluetooth: hci4: command tx timeout [ 802.300688][ T5834] Bluetooth: hci4: command tx timeout [ 803.428075][T10067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 804.380629][ T5834] Bluetooth: hci4: command tx timeout [ 806.563359][ T5834] Bluetooth: hci4: command tx timeout [ 806.624621][T10076] loop1: detected capacity change from 0 to 16 [ 806.692166][T10076] erofs (device loop1): mounted with root inode @ nid 36. [ 810.538897][T10103] hub 1-0:1.0: USB hub found [ 810.545290][T10103] hub 1-0:1.0: 1 port detected [ 810.566791][T10103] loop1: detected capacity change from 0 to 512 [ 810.574008][T10103] EXT4-fs: Ignoring removed oldalloc option [ 810.581496][T10103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 810.608184][T10103] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 812.594699][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 812.625605][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 812.634907][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.643007][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.650861][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 813.042522][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.053784][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.675686][T10032] chnl_net:caif_netlink_parms(): no params data found [ 814.708032][ T5828] Bluetooth: hci5: command tx timeout [ 815.866936][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.881443][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.890739][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 815.902687][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 815.910280][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 816.798311][ T5828] Bluetooth: hci5: command tx timeout [ 816.957210][T10140] loop0: detected capacity change from 0 to 4096 [ 817.071878][T10144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 817.216499][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.241769][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.248992][T10032] bridge_slave_0: entered allmulticast mode [ 817.432582][T10032] bridge_slave_0: entered promiscuous mode [ 817.899794][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.907393][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.940613][T10032] bridge_slave_1: entered allmulticast mode [ 817.978355][T10032] bridge_slave_1: entered promiscuous mode [ 817.984640][ T5828] Bluetooth: hci3: command tx timeout [ 817.996312][T10156] loop1: detected capacity change from 0 to 16 [ 820.250600][ T9274] Bluetooth: hci3: command tx timeout [ 820.257514][ T5834] Bluetooth: hci5: command tx timeout [ 820.273911][T10156] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 820.461808][ T6094] bridge_slave_1: left allmulticast mode [ 820.467504][ T6094] bridge_slave_1: left promiscuous mode [ 820.491292][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.820251][ T6094] bridge_slave_0: left allmulticast mode [ 820.826410][ T6094] bridge_slave_0: left promiscuous mode [ 820.897690][T10172] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 823.164838][ T5834] Bluetooth: hci3: command tx timeout [ 823.170288][ T5828] Bluetooth: hci5: command tx timeout [ 823.183120][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.181955][ T5828] Bluetooth: hci3: command tx timeout [ 827.439775][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.515471][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.607297][ T6094] bond0 (unregistering): Released all slaves [ 829.118998][ T6094] hsr_slave_0: left promiscuous mode [ 829.689634][ T6094] hsr_slave_1: left promiscuous mode [ 829.742258][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.666878][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.784536][ T6094] veth0_macvtap: left promiscuous mode [ 830.820822][ T6094] veth1_vlan: left promiscuous mode [ 830.847368][ T6094] veth0_vlan: left promiscuous mode [ 839.320001][T10269] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 840.590360][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 840.685647][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 841.650886][T10287] loop4: detected capacity change from 0 to 8 [ 841.688123][T10287] SQUASHFS error: xz decompression failed, data probably corrupt [ 841.696197][T10287] SQUASHFS error: Failed to read block 0x108: -5 [ 841.702605][T10287] SQUASHFS error: Unable to read metadata cache entry [106] [ 841.709889][T10287] SQUASHFS error: Unable to read inode 0x11f [ 844.704171][T10310] loop0: detected capacity change from 0 to 512 [ 844.931409][T10310] EXT4-fs: Ignoring removed bh option [ 845.091247][T10310] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 845.118231][T10310] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 845.356500][T10310] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 846.060273][T10310] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 846.078814][T10310] System zones: 0-2, 18-18, 34-35 [ 846.103447][T10310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.296893][ T9934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.038073][T10352] loop1: detected capacity change from 0 to 512 [ 850.862332][T10352] EXT4-fs (loop1): Test dummy encryption mode enabled [ 850.869272][T10352] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 850.878763][T10352] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 850.887909][T10352] EXT4-fs (loop1): The Hurd can't support 64-bit file systems [ 850.916052][T10352] loop1: detected capacity change from 0 to 1024 [ 850.923230][T10352] journal_path: Non-blockdev passed as '' [ 850.929020][T10352] EXT4-fs: error: could not find journal device path [ 855.681168][T10362] loop0: detected capacity change from 0 to 32768 [ 855.748735][T10362] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 855.786228][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.827001][T10362] XFS (loop0): Ending clean mount [ 855.835142][T10362] XFS (loop0): Quotacheck needed: Please wait. [ 855.938147][T10362] XFS (loop0): Quotacheck: Done. [ 856.797855][T10379] loop1: detected capacity change from 0 to 32768 [ 856.832643][T10379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.748 (10379) [ 856.867140][T10379] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 856.877335][T10379] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 856.997847][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.007936][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.016861][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.025612][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.041947][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.063125][T10379] BTRFS info (device loop1): enabling ssd optimizations [ 857.070070][T10379] BTRFS info (device loop1): turning on async discard [ 857.076969][T10379] BTRFS info (device loop1): enabling free space tree [ 858.359468][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 858.413977][ T9934] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 858.626568][T10111] chnl_net:caif_netlink_parms(): no params data found [ 859.103296][ T5828] Bluetooth: hci2: command tx timeout [ 859.151684][T10135] chnl_net:caif_netlink_parms(): no params data found [ 859.988290][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.996243][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.005072][T10111] bridge_slave_0: entered allmulticast mode [ 860.019386][T10111] bridge_slave_0: entered promiscuous mode [ 860.046967][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.054264][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.062056][T10111] bridge_slave_1: entered allmulticast mode [ 860.070195][T10111] bridge_slave_1: entered promiscuous mode [ 860.251815][ T6094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.271158][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.279142][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.289008][T10135] bridge_slave_0: entered allmulticast mode [ 860.301023][T10135] bridge_slave_0: entered promiscuous mode [ 860.314965][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.366898][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.374543][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.382868][T10135] bridge_slave_1: entered allmulticast mode [ 860.393013][T10135] bridge_slave_1: entered promiscuous mode [ 860.404183][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.457954][ T6094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.587247][T10111] team0: Port device team_slave_0 added [ 860.597599][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.631290][ T6094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.649723][T10111] team0: Port device team_slave_1 added [ 860.658431][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.712463][T10386] chnl_net:caif_netlink_parms(): no params data found [ 860.773463][ T6094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.832671][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.843929][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.874998][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.892799][T10135] team0: Port device team_slave_0 added [ 860.916052][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.923494][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.953379][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.967483][T10135] team0: Port device team_slave_1 added [ 861.118863][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.126178][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.155893][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.190577][ T5834] Bluetooth: hci2: command tx timeout [ 861.243336][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.250284][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.283877][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.399055][T10111] hsr_slave_0: entered promiscuous mode [ 861.406473][T10111] hsr_slave_1: entered promiscuous mode [ 861.413427][T10111] debugfs: 'hsr0' already exists in 'hsr' [ 861.419156][T10111] Cannot create hsr debugfs directory [ 861.426554][T10386] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.435156][T10386] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.446950][T10386] bridge_slave_0: entered allmulticast mode [ 861.455574][T10386] bridge_slave_0: entered promiscuous mode [ 861.505517][T10386] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.513172][T10386] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.522103][T10386] bridge_slave_1: entered allmulticast mode [ 861.529963][T10386] bridge_slave_1: entered promiscuous mode [ 861.628752][T10135] hsr_slave_0: entered promiscuous mode [ 861.635818][T10135] hsr_slave_1: entered promiscuous mode [ 861.642406][T10135] debugfs: 'hsr0' already exists in 'hsr' [ 861.651038][T10135] Cannot create hsr debugfs directory [ 861.730171][T10386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.773619][T10386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.811286][ T6094] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.959911][ T6094] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.988247][T10386] team0: Port device team_slave_0 added [ 862.018977][T10386] team0: Port device team_slave_1 added [ 862.097905][ T6094] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.175058][T10386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.183251][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.214577][T10386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.229059][T10386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.236254][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.264727][T10386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.378567][T10483] loop1: detected capacity change from 0 to 512 [ 862.378885][T10485] loop0: detected capacity change from 0 to 64 [ 862.407567][ T6094] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.086728][T10491] ceph: No mds server is up or the cluster is laggy [ 863.104570][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 863.150602][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 863.370691][ T5834] Bluetooth: hci2: command tx timeout [ 865.305752][T10483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.507266][T10483] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.538957][ T9108] IPVS: starting estimator thread 0... [ 865.652819][T10502] IPVS: using max 34 ests per chain, 81600 per kthread [ 865.748849][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.864449][T10508] loop0: detected capacity change from 0 to 1024 [ 866.863551][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 866.870330][ T9274] Bluetooth: hci2: command tx timeout [ 868.316784][T10386] hsr_slave_0: entered promiscuous mode [ 868.345335][T10386] hsr_slave_1: entered promiscuous mode [ 868.365186][T10386] debugfs: 'hsr0' already exists in 'hsr' [ 868.376982][T10386] Cannot create hsr debugfs directory [ 868.828658][ T6497] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 868.976669][T10538] loop0: detected capacity change from 0 to 2048 [ 869.004935][ T6094] bridge_slave_1: left allmulticast mode [ 869.012114][T10538] EXT4-fs: Ignoring removed i_version option [ 869.030449][ T6094] bridge_slave_1: left promiscuous mode [ 869.050975][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.051589][ T6497] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 869.071434][ T6497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.083679][ T6094] bridge_slave_0: left allmulticast mode [ 869.103379][ T6497] usb 2-1: Product: syz [ 869.107531][ T6497] usb 2-1: Manufacturer: syz [ 869.128819][T10538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 869.130483][ T6497] usb 2-1: SerialNumber: syz [ 869.141139][T10538] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 869.152043][ T6094] bridge_slave_0: left promiscuous mode [ 869.211146][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.222487][T10538] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.758: bg 0: block 321: padding at end of block bitmap is not set [ 869.239119][ T6497] usb 2-1: config 0 descriptor?? [ 869.283249][ T6094] bridge_slave_1: left allmulticast mode [ 869.288909][ T6094] bridge_slave_1: left promiscuous mode [ 869.321324][T10538] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 1 [ 869.330888][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.341241][T10538] fs-verity (loop0, inode 13): Error -117 building Merkle tree [ 869.351177][ T6094] bridge_slave_0: left allmulticast mode [ 869.356851][ T6094] bridge_slave_0: left promiscuous mode [ 869.380646][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.442373][ T6094] bridge_slave_1: left allmulticast mode [ 869.451631][ T6094] bridge_slave_1: left promiscuous mode [ 869.455245][ T9934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.457498][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.522232][ T6497] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 869.590245][ T6094] bridge_slave_0: left allmulticast mode [ 869.596074][ T6094] bridge_slave_0: left promiscuous mode [ 869.603637][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.800713][ T9108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 870.416471][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.439431][ T6094] bond0 (unregistering): Released all slaves [ 870.460480][ T9108] usb 5-1: Using ep0 maxpacket: 16 [ 870.483749][ T9108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.517840][ T9108] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 870.537176][ T9108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.564276][ T9108] usb 5-1: config 0 descriptor?? [ 870.642408][ T9274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.653098][ T9274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.662069][ T9274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.673000][ T9274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.681430][ T9274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.897816][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.910024][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.921849][ T6094] bond0 (unregistering): Released all slaves [ 871.006104][ T9108] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 871.259517][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.279977][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.311184][ T6094] bond0 (unregistering): Released all slaves [ 872.927375][ T9274] Bluetooth: hci4: command tx timeout [ 873.443651][ T6497] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 873.453409][ T5902] usb 5-1: USB disconnect, device number 2 [ 873.467671][ T6497] usb 2-1: USB disconnect, device number 3 [ 873.885694][T10574] 9p: Bad value for 'rfdno' [ 874.271139][T10571] loop4: detected capacity change from 0 to 8192 [ 874.374793][T10571] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 874.467557][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.474096][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.291249][ T9274] Bluetooth: hci4: command tx timeout [ 875.305039][ T31] audit: type=1326 audit(1766965204.294:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 875.980680][T10580] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 875.994712][T10580] FAT-fs (loop4): Filesystem has been set read-only [ 876.306962][ T24] IPVS: starting estimator thread 0... [ 876.338320][ T31] audit: type=1326 audit(1766965204.294:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 876.584590][T10582] IPVS: using max 25 ests per chain, 60000 per kthread [ 876.690225][ T31] audit: type=1326 audit(1766965204.294:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 876.716269][ T9663] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046) [ 877.230041][ T31] audit: type=1326 audit(1766965204.294:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 877.277667][ T31] audit: type=1326 audit(1766965204.294:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 877.357547][ T31] audit: type=1326 audit(1766965204.294:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 877.388787][T10591] loop1: detected capacity change from 0 to 256 [ 877.419528][ T31] audit: type=1326 audit(1766965204.294:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 877.536996][ T31] audit: type=1326 audit(1766965204.294:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 878.144781][ T31] audit: type=1326 audit(1766965204.294:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 878.167508][ T31] audit: type=1326 audit(1766965204.294:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 878.311364][ T5828] Bluetooth: hci4: command tx timeout [ 878.378591][T10598] loop0: detected capacity change from 0 to 2048 [ 878.382696][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 878.394782][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 878.403647][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 878.417771][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 878.425383][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 878.451460][T10598] EXT4-fs: Ignoring removed i_version option [ 878.506574][T10598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.599198][T10598] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.657721][T10606] loop4: detected capacity change from 0 to 16 [ 878.765413][T10135] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.688712][ T9274] Bluetooth: hci6: command tx timeout [ 880.696352][ T5828] Bluetooth: hci4: command tx timeout [ 880.704633][T10613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.769: bg 0: block 321: padding at end of block bitmap is not set [ 880.720524][T10613] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 1 [ 880.728722][T10613] fs-verity (loop0, inode 13): Error -117 building Merkle tree [ 880.827556][T10609] loop1: detected capacity change from 0 to 40427 [ 880.838785][T10609] F2FS-fs (loop1): Image doesn't support compression [ 880.845577][T10609] F2FS-fs (loop1): build fault injection rate: 690 [ 880.852956][T10609] F2FS-fs (loop1): invalid crc value [ 880.909826][T10609] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 880.919251][T10609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 881.020375][ T9934] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.525701][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 881.525825][ T31] audit: type=1800 audit(1766965210.474:58): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.771" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 881.638469][T10611] syz.1.771: attempt to access beyond end of device [ 881.638469][T10611] loop1: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 882.142730][ T5827] syz-executor: attempt to access beyond end of device [ 882.142730][ T5827] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 882.220879][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 882.220918][ T5827] Tainted: [L]=SOFTLOCKUP [ 882.220927][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 882.220949][ T5827] Call Trace: [ 882.220958][ T5827] [ 882.220969][ T5827] dump_stack_lvl+0xe8/0x150 [ 882.221007][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 882.221045][ T5827] f2fs_write_end_io+0x886/0xb60 [ 882.221098][ T5827] __submit_merged_bio+0x256/0x660 [ 882.221133][ T5827] __submit_merged_write_cond+0x269/0x530 [ 882.221168][ T5827] f2fs_write_data_pages+0x2756/0x3290 [ 882.221198][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221228][ T5827] ? __lock_acquire+0x6b6/0x2cf0 [ 882.221287][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 882.221316][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221394][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221422][ T5827] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 882.221462][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221491][ T5827] ? lru_gen_update_size+0x7bd/0xd20 [ 882.221540][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221568][ T5827] ? __lock_acquire+0x6b6/0x2cf0 [ 882.221602][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221631][ T5827] ? __lock_acquire+0x6b6/0x2cf0 [ 882.221664][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221701][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 882.221734][ T5827] do_writepages+0x32e/0x550 [ 882.221771][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221802][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221836][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.221864][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 882.221906][ T5827] filemap_fdatawrite+0x199/0x240 [ 882.221947][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 882.222025][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.222056][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.222091][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 882.222132][ T5827] f2fs_sync_dirty_inodes+0x30f/0x810 [ 882.222186][ T5827] f2fs_write_checkpoint+0x935/0x2430 [ 882.222255][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 882.222287][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.222378][ T5827] kill_f2fs_super+0x2d2/0x6c0 [ 882.222419][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 882.222480][ T5827] deactivate_locked_super+0xbc/0x130 [ 882.222520][ T5827] cleanup_mnt+0x425/0x4c0 [ 882.222558][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 882.222602][ T5827] task_work_run+0x1d4/0x260 [ 882.222643][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 882.222679][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.222718][ T5827] exit_to_user_mode_loop+0xef/0x4e0 [ 882.222745][ T5827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 882.222773][ T5827] ? rcu_is_watching+0x15/0xb0 [ 882.222809][ T5827] do_syscall_64+0x2b7/0xf80 [ 882.222835][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.222859][ T5827] ? trace_irq_disable+0x37/0x100 [ 882.222900][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.222924][ T5827] RIP: 0033:0x7f6db1990a77 [ 882.222950][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 882.222972][ T5827] RSP: 002b:00007fffe06fb678 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 882.222999][ T5827] RAX: 0000000000000000 RBX: 00007f6db1a13d7d RCX: 00007f6db1990a77 [ 882.223016][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe06fb730 [ 882.223033][ T5827] RBP: 00007fffe06fb730 R08: 0000000000000000 R09: 0000000000000000 [ 882.223049][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe06fc7c0 [ 882.223071][ T5827] R13: 00007f6db1a13d7d R14: 00000000000d755b R15: 00007fffe06fc800 [ 882.223110][ T5827] [ 882.224094][ T5827] F2FS-fs (loop1): Remounting filesystem read-only [ 882.790693][ T9274] Bluetooth: hci6: command tx timeout [ 883.414744][T10135] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.597377][T10628] loop4: detected capacity change from 0 to 1024 [ 883.615545][T10628] hfsplus: Unknown parameter 'nodecompos7' [ 883.694528][T10628] loop4: detected capacity change from 0 to 256 [ 883.751786][T10628] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 885.355353][ T9274] Bluetooth: hci6: command tx timeout [ 887.445672][ T9274] Bluetooth: hci6: command tx timeout [ 887.749863][T10135] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.062422][T10660] loop1: detected capacity change from 0 to 8 [ 888.191314][T10660] SQUASHFS error: xz decompression failed, data probably corrupt [ 888.199272][T10660] SQUASHFS error: Failed to read block 0x108: -5 [ 888.205741][T10660] SQUASHFS error: Unable to read metadata cache entry [106] [ 888.213114][T10660] SQUASHFS error: Unable to read inode 0x101f [ 888.896326][ T6094] hsr_slave_0: left promiscuous mode [ 889.661432][T10665] loop4: detected capacity change from 0 to 2048 [ 889.668851][T10665] EXT4-fs: Ignoring removed i_version option [ 889.695534][T10665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.709761][T10665] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.940488][ T6094] hsr_slave_1: left promiscuous mode [ 889.946811][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.970500][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.668036][T10672] vivid-000: kernel_thread() failed [ 891.050596][T10678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.781: bg 0: block 321: padding at end of block bitmap is not set [ 891.120608][T10678] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 1 [ 891.128872][T10678] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 891.886036][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.914697][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.929781][ T9663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.570600][ T6094] hsr_slave_0: left promiscuous mode [ 895.864334][T10692] loop4: detected capacity change from 0 to 40427 [ 895.881261][T10692] F2FS-fs (loop4): Image doesn't support compression [ 895.887947][T10692] F2FS-fs (loop4): build fault injection rate: 690 [ 895.895244][T10692] F2FS-fs (loop4): invalid crc value [ 895.984738][T10692] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 895.994791][T10692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 896.033366][ T6094] hsr_slave_1: left promiscuous mode [ 896.093970][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.286179][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.264650][ T31] audit: type=1800 audit(1766965227.264:59): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.783" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 898.332200][T10699] syz.4.783: attempt to access beyond end of device [ 898.332200][T10699] loop4: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 898.752998][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.860477][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.222291][ T6094] veth1_macvtap: left promiscuous mode [ 900.540586][ T6094] veth0_macvtap: left promiscuous mode [ 900.546209][ T6094] veth1_vlan: left promiscuous mode [ 900.601154][ T9663] syz-executor: attempt to access beyond end of device [ 900.601154][ T9663] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 900.619901][ T9663] CPU: 1 UID: 0 PID: 9663 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 900.619937][ T9663] Tainted: [L]=SOFTLOCKUP [ 900.619954][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.619970][ T9663] Call Trace: [ 900.619980][ T9663] [ 900.619990][ T9663] dump_stack_lvl+0xe8/0x150 [ 900.620029][ T9663] f2fs_handle_critical_error+0x37c/0x540 [ 900.620068][ T9663] f2fs_write_end_io+0x886/0xb60 [ 900.620126][ T9663] __submit_merged_bio+0x256/0x660 [ 900.620164][ T9663] __submit_merged_write_cond+0x269/0x530 [ 900.620203][ T9663] f2fs_write_data_pages+0x2756/0x3290 [ 900.620281][ T9663] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 900.620311][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 900.620356][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620391][ T9663] ? do_raw_spin_lock+0x121/0x290 [ 900.620465][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620495][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 900.620535][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620564][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 900.620610][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620639][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 900.620678][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620705][ T9663] ? do_raw_spin_lock+0x121/0x290 [ 900.620749][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620783][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620812][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 900.620849][ T9663] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 900.620883][ T9663] do_writepages+0x32e/0x550 [ 900.620919][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620959][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.620988][ T6094] veth0_vlan: left promiscuous mode [ 900.620993][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621021][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 900.621063][ T9663] filemap_fdatawrite+0x199/0x240 [ 900.621098][ T9663] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 900.621184][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621215][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621250][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 900.621293][ T9663] f2fs_sync_dirty_inodes+0x30f/0x810 [ 900.621348][ T9663] f2fs_write_checkpoint+0x935/0x2430 [ 900.621424][ T9663] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 900.621455][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621561][ T9663] kill_f2fs_super+0x2d2/0x6c0 [ 900.621604][ T9663] ? __pfx_kill_f2fs_super+0x10/0x10 [ 900.621670][ T9663] deactivate_locked_super+0xbc/0x130 [ 900.621711][ T9663] cleanup_mnt+0x425/0x4c0 [ 900.621748][ T9663] ? _raw_spin_unlock_irq+0x23/0x50 [ 900.621793][ T9663] task_work_run+0x1d4/0x260 [ 900.621834][ T9663] ? __pfx_task_work_run+0x10/0x10 [ 900.621871][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621912][ T9663] exit_to_user_mode_loop+0xef/0x4e0 [ 900.621938][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 900.621972][ T9663] ? rcu_is_watching+0x15/0xb0 [ 900.622007][ T9663] do_syscall_64+0x2b7/0xf80 [ 900.622033][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.622057][ T9663] ? trace_irq_disable+0x37/0x100 [ 900.622098][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.622123][ T9663] RIP: 0033:0x7fbca5b90a77 [ 900.622145][ T9663] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 900.622166][ T9663] RSP: 002b:00007ffe5f61c018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 900.622191][ T9663] RAX: 0000000000000000 RBX: 00007fbca5c13d7d RCX: 00007fbca5b90a77 [ 900.622209][ T9663] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5f61c0d0 [ 900.622225][ T9663] RBP: 00007ffe5f61c0d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.622241][ T9663] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5f61d160 [ 900.622258][ T9663] R13: 00007fbca5c13d7d R14: 00000000000db6b4 R15: 00007ffe5f61d1a0 [ 900.622303][ T9663] [ 900.633604][ T9663] F2FS-fs (loop4): Remounting filesystem read-only [ 901.102563][ T6094] veth1_macvtap: left promiscuous mode [ 901.131103][ T6094] veth0_macvtap: left promiscuous mode [ 901.137181][ T6094] veth1_vlan: left promiscuous mode [ 901.201540][ T6094] veth0_vlan: left promiscuous mode [ 901.950850][T10718] loop1: detected capacity change from 0 to 32768 [ 901.960836][T10718] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.788 (10718) [ 901.977094][T10718] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 901.987287][T10718] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 902.052697][T10718] BTRFS info (device loop1): enabling ssd optimizations [ 902.059646][T10718] BTRFS info (device loop1): turning on async discard [ 902.066524][T10718] BTRFS info (device loop1): enabling free space tree [ 903.671766][T10718] btrfs: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙˙˙˙˙0x0000000000000000˙˙˙˙' [ 903.806389][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 907.350188][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 907.542601][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 907.695564][T10771] random: crng reseeded on system resumption [ 908.369360][ T9274] Bluetooth: hci0: command 0x0406 tx timeout [ 908.597769][T10773] loop4: detected capacity change from 0 to 512 [ 908.683252][T10773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 909.252141][ T31] audit: type=1326 audit(1766965238.204:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 909.682454][ T31] audit: type=1326 audit(1766965238.204:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 909.821655][ T9663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.853527][ T31] audit: type=1326 audit(1766965238.214:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 909.875784][ T31] audit: type=1326 audit(1766965238.214:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 909.902909][ T31] audit: type=1326 audit(1766965238.224:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 909.944139][ T31] audit: type=1326 audit(1766965238.224:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 911.662792][ T31] audit: type=1326 audit(1766965238.224:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 911.753542][ T31] audit: type=1326 audit(1766965238.224:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 911.776383][ T31] audit: type=1326 audit(1766965238.234:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 912.077167][T10787] loop4: detected capacity change from 0 to 40427 [ 912.090711][ T31] audit: type=1326 audit(1766965238.244:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca5b8f749 code=0x7ffc0000 [ 912.114816][T10787] F2FS-fs (loop4): Image doesn't support compression [ 912.121522][T10787] F2FS-fs (loop4): build fault injection rate: 690 [ 912.128907][T10787] F2FS-fs (loop4): invalid crc value [ 912.190288][T10787] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 912.199740][T10787] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 915.592232][T10805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.818789][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 916.857756][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 917.247663][ T9274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 917.261268][ T9274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 917.270026][ T9274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 917.282788][ T9274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 917.305023][ T9274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 917.943618][T10135] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.118000][ T9663] syz-executor: attempt to access beyond end of device [ 918.118000][ T9663] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 918.165425][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 918.165463][ T9663] Tainted: [L]=SOFTLOCKUP [ 918.165473][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.165488][ T9663] Call Trace: [ 918.165498][ T9663] [ 918.165509][ T9663] dump_stack_lvl+0xe8/0x150 [ 918.165546][ T9663] f2fs_handle_critical_error+0x37c/0x540 [ 918.165586][ T9663] f2fs_write_end_io+0x886/0xb60 [ 918.165644][ T9663] __submit_merged_bio+0x256/0x660 [ 918.165681][ T9663] __submit_merged_write_cond+0x269/0x530 [ 918.165718][ T9663] f2fs_write_data_pages+0x2756/0x3290 [ 918.165748][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.165778][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 918.165849][ T9663] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 918.165877][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.165972][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166001][ T9663] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 918.166041][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166069][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 918.166115][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166143][ T9663] ? __lock_acquire+0x6b6/0x2cf0 [ 918.166181][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166209][ T9663] ? do_raw_spin_lock+0x121/0x290 [ 918.166253][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166287][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166315][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 918.166352][ T9663] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 918.166385][ T9663] do_writepages+0x32e/0x550 [ 918.166422][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166453][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166488][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166516][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 918.166559][ T9663] filemap_fdatawrite+0x199/0x240 [ 918.166595][ T9663] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 918.166682][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166714][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.166749][ T9663] ? do_raw_spin_unlock+0x122/0x240 [ 918.166791][ T9663] f2fs_sync_dirty_inodes+0x30f/0x810 [ 918.166846][ T9663] f2fs_write_checkpoint+0x935/0x2430 [ 918.166923][ T9663] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 918.166961][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.167067][ T9663] kill_f2fs_super+0x2d2/0x6c0 [ 918.167110][ T9663] ? __pfx_kill_f2fs_super+0x10/0x10 [ 918.167178][ T9663] deactivate_locked_super+0xbc/0x130 [ 918.167219][ T9663] cleanup_mnt+0x425/0x4c0 [ 918.167257][ T9663] ? _raw_spin_unlock_irq+0x23/0x50 [ 918.167303][ T9663] task_work_run+0x1d4/0x260 [ 918.167344][ T9663] ? __pfx_task_work_run+0x10/0x10 [ 918.167382][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.167424][ T9663] exit_to_user_mode_loop+0xef/0x4e0 [ 918.167450][ T9663] ? srso_alias_return_thunk+0x5/0xfbef5 [ 918.167478][ T9663] ? rcu_is_watching+0x15/0xb0 [ 918.167515][ T9663] do_syscall_64+0x2b7/0xf80 [ 918.167540][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.167564][ T9663] ? trace_irq_disable+0x37/0x100 [ 918.167605][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.167630][ T9663] RIP: 0033:0x7fbca5b90a77 [ 918.167652][ T9663] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 918.167674][ T9663] RSP: 002b:00007ffe5f61c018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 918.167700][ T9663] RAX: 0000000000000000 RBX: 00007fbca5c13d7d RCX: 00007fbca5b90a77 [ 918.167718][ T9663] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5f61c0d0 [ 918.167736][ T9663] RBP: 00007ffe5f61c0d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.167752][ T9663] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe5f61d160 [ 918.167769][ T9663] R13: 00007fbca5c13d7d R14: 00000000000dece2 R15: 00007ffe5f61d1a0 [ 918.167813][ T9663] [ 918.167823][ T9663] F2FS-fs (loop4): Remounting filesystem read-only [ 919.490541][ T9274] Bluetooth: hci5: command tx timeout [ 920.950259][T10552] chnl_net:caif_netlink_parms(): no params data found [ 922.760507][ T9274] Bluetooth: hci5: command tx timeout [ 923.141947][T10840] loop0: detected capacity change from 0 to 40427 [ 923.151111][T10840] F2FS-fs (loop0): Image doesn't support compression [ 923.157858][T10840] F2FS-fs (loop0): build fault injection rate: 690 [ 923.165354][T10840] F2FS-fs (loop0): invalid crc value [ 923.238434][T10840] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 923.247981][T10840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 924.339762][ T9934] syz-executor: attempt to access beyond end of device [ 924.339762][ T9934] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 924.400674][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 924.400711][ T9934] Tainted: [L]=SOFTLOCKUP [ 924.400720][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.400735][ T9934] Call Trace: [ 924.400746][ T9934] [ 924.400756][ T9934] dump_stack_lvl+0xe8/0x150 [ 924.400795][ T9934] f2fs_handle_critical_error+0x37c/0x540 [ 924.400835][ T9934] f2fs_write_end_io+0x886/0xb60 [ 924.400894][ T9934] __submit_merged_bio+0x256/0x660 [ 924.400933][ T9934] __submit_merged_write_cond+0x269/0x530 [ 924.400977][ T9934] f2fs_write_data_pages+0x2756/0x3290 [ 924.401006][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401036][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 924.401106][ T9934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 924.401135][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401224][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401253][ T9934] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 924.401292][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401322][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 924.401368][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401397][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 924.401435][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401463][ T9934] ? do_raw_spin_lock+0x121/0x290 [ 924.401507][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401541][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401569][ T9934] ? do_raw_spin_unlock+0x122/0x240 [ 924.401606][ T9934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 924.401640][ T9934] do_writepages+0x32e/0x550 [ 924.401677][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401709][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401745][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401773][ T9934] ? do_raw_spin_unlock+0x122/0x240 [ 924.401816][ T9934] filemap_fdatawrite+0x199/0x240 [ 924.401851][ T9934] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 924.401938][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.401975][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.402011][ T9934] ? do_raw_spin_unlock+0x122/0x240 [ 924.402054][ T9934] f2fs_sync_dirty_inodes+0x30f/0x810 [ 924.402110][ T9934] f2fs_write_checkpoint+0x935/0x2430 [ 924.402192][ T9934] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 924.402224][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.402331][ T9934] kill_f2fs_super+0x2d2/0x6c0 [ 924.402374][ T9934] ? __pfx_kill_f2fs_super+0x10/0x10 [ 924.402442][ T9934] deactivate_locked_super+0xbc/0x130 [ 924.402484][ T9934] cleanup_mnt+0x425/0x4c0 [ 924.402523][ T9934] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.402570][ T9934] task_work_run+0x1d4/0x260 [ 924.402611][ T9934] ? __pfx_task_work_run+0x10/0x10 [ 924.402649][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.402692][ T9934] exit_to_user_mode_loop+0xef/0x4e0 [ 924.402718][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.402747][ T9934] ? rcu_is_watching+0x15/0xb0 [ 924.402784][ T9934] do_syscall_64+0x2b7/0xf80 [ 924.402811][ T9934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.402835][ T9934] ? trace_irq_disable+0x37/0x100 [ 924.402878][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.402903][ T9934] RIP: 0033:0x7f39df790a77 [ 924.402926][ T9934] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 924.402954][ T9934] RSP: 002b:00007fff47f04b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 924.402981][ T9934] RAX: 0000000000000000 RBX: 00007f39df813d7d RCX: 00007f39df790a77 [ 924.402999][ T9934] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff47f04bc0 [ 924.403016][ T9934] RBP: 00007fff47f04bc0 R08: 0000000000000000 R09: 0000000000000000 [ 924.403032][ T9934] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff47f05c50 [ 924.403050][ T9934] R13: 00007f39df813d7d R14: 00000000000e1a1a R15: 00007fff47f05c90 [ 924.403095][ T9934] [ 924.403105][ T9934] F2FS-fs (loop0): Remounting filesystem read-only [ 924.790551][ T9274] Bluetooth: hci5: command tx timeout [ 924.917205][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.940614][T10552] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.947842][T10552] bridge_slave_0: entered allmulticast mode [ 924.983134][T10552] bridge_slave_0: entered promiscuous mode [ 925.031349][T10599] chnl_net:caif_netlink_parms(): no params data found [ 925.071539][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.080859][T10552] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.088016][T10552] bridge_slave_1: entered allmulticast mode [ 925.158303][T10552] bridge_slave_1: entered promiscuous mode [ 925.597005][T10860] loop4: detected capacity change from 0 to 1024 [ 925.623586][T10860] EXT4-fs: Ignoring removed oldalloc option [ 925.629580][T10860] EXT4-fs: Ignoring removed bh option [ 925.787303][T10860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.804914][T10552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.379434][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 926.379476][ T31] audit: type=1804 audit(1766965254.844:72): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.808" name="/newroot/37/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 926.871969][ T9274] Bluetooth: hci5: command tx timeout [ 927.302009][T10875] EXT4-fs (loop4): shut down requested (1) [ 927.328255][T10552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.279248][ T9663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.453341][T10895] loop0: detected capacity change from 0 to 16 [ 929.512351][T10895] erofs (device loop0): mounted with root inode @ nid 36. [ 930.576097][T10552] team0: Port device team_slave_0 added [ 933.663611][T10552] team0: Port device team_slave_1 added [ 933.671144][T10599] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.678284][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.731491][T10599] bridge_slave_0: entered allmulticast mode [ 933.770472][T10599] bridge_slave_0: entered promiscuous mode [ 933.783851][T10599] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.821974][T10599] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.829175][T10599] bridge_slave_1: entered allmulticast mode [ 933.849589][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.868123][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.876513][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.891534][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.899133][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.906539][T10599] bridge_slave_1: entered promiscuous mode [ 935.132551][T10808] chnl_net:caif_netlink_parms(): no params data found [ 935.348036][T10599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.892434][T10599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.934869][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.942020][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.980932][ T5828] Bluetooth: hci2: command tx timeout [ 937.049543][T10599] team0: Port device team_slave_0 added [ 937.097411][T10599] team0: Port device team_slave_1 added [ 937.904432][ T6094] bridge_slave_1: left allmulticast mode [ 937.935822][ T6094] bridge_slave_1: left promiscuous mode [ 937.970710][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.059182][ T6094] bridge_slave_0: left allmulticast mode [ 938.065300][ T5828] Bluetooth: hci2: command tx timeout [ 938.173178][ T6094] bridge_slave_0: left promiscuous mode [ 938.184927][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.678624][ T9274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.688683][ T9274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.701979][ T9274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.711178][ T9274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.720094][ T9274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.775222][ T6094] bridge_slave_1: left allmulticast mode [ 938.804129][ T6094] bridge_slave_1: left promiscuous mode [ 938.809812][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.867803][ T6094] bridge_slave_0: left allmulticast mode [ 938.882809][ T6094] bridge_slave_0: left promiscuous mode [ 938.897777][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.948437][ T6094] bridge_slave_1: left allmulticast mode [ 938.985395][ T6094] bridge_slave_1: left promiscuous mode [ 939.005895][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.314453][T10963] slcan: can't register candev [ 941.298204][ T5828] Bluetooth: hci3: command tx timeout [ 941.299766][ T9274] Bluetooth: hci2: command tx timeout [ 941.472986][ T6094] bridge_slave_0: left allmulticast mode [ 941.524172][ T6094] bridge_slave_0: left promiscuous mode [ 941.595681][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.982324][ T5834] Bluetooth: hci3: command tx timeout [ 943.988000][ T5828] Bluetooth: hci2: command tx timeout [ 944.224537][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.243427][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.262680][ T6094] bond0 (unregistering): Released all slaves [ 944.849479][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.888712][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.955587][ T6094] bond0 (unregistering): Released all slaves [ 945.576959][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.602736][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.350448][ T9274] Bluetooth: hci3: command tx timeout [ 946.373192][ T6094] bond0 (unregistering): Released all slaves [ 948.261227][T10599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.442635][ T9274] Bluetooth: hci3: command tx timeout [ 948.460448][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.521848][T10599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.021617][T10999] loop1: detected capacity change from 0 to 1024 [ 949.110632][T10808] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.117799][T10808] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.538820][T10808] bridge_slave_0: entered allmulticast mode [ 949.592258][T10808] bridge_slave_0: entered promiscuous mode [ 949.765111][T10808] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.826335][ T31] audit: type=1800 audit(1766965278.804:73): pid=11005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.826" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 949.869331][T10808] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.000550][T10808] bridge_slave_1: entered allmulticast mode [ 950.020314][T10808] bridge_slave_1: entered promiscuous mode [ 950.576937][ T6094] hsr_slave_0: left promiscuous mode [ 950.660552][ T6094] hsr_slave_1: left promiscuous mode [ 950.666946][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.751717][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.880537][ T6094] hsr_slave_0: left promiscuous mode [ 950.890678][ T6094] hsr_slave_1: left promiscuous mode [ 950.896716][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.951728][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.999896][ T6094] hsr_slave_0: left promiscuous mode [ 951.010537][ T6094] hsr_slave_1: left promiscuous mode [ 951.021021][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.041246][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.612050][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 951.697519][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 954.084823][T11016] loop0: detected capacity change from 0 to 40427 [ 954.162481][T11016] F2FS-fs (loop0): Image doesn't support compression [ 954.169176][T11016] F2FS-fs (loop0): build fault injection rate: 690 [ 954.176529][T11016] F2FS-fs (loop0): invalid crc value [ 954.295450][T11016] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 954.304858][T11016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 955.236640][ T31] audit: type=1800 audit(1766965284.154:74): pid=11023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.832" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 955.338949][T11023] syz.0.832: attempt to access beyond end of device [ 955.338949][T11023] loop0: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 955.903751][ T9934] syz-executor: attempt to access beyond end of device [ 955.903751][ T9934] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 955.958300][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 955.958336][ T9934] Tainted: [L]=SOFTLOCKUP [ 955.958345][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 955.958359][ T9934] Call Trace: [ 955.958368][ T9934] [ 955.958378][ T9934] dump_stack_lvl+0xe8/0x150 [ 955.958414][ T9934] f2fs_handle_critical_error+0x37c/0x540 [ 955.958452][ T9934] f2fs_write_end_io+0x886/0xb60 [ 955.958507][ T9934] __submit_merged_bio+0x256/0x660 [ 955.958542][ T9934] __submit_merged_write_cond+0x269/0x530 [ 955.958582][ T9934] f2fs_write_data_pages+0x2756/0x3290 [ 955.958610][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.958637][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 955.958710][ T9934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 955.958738][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.958822][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.958848][ T9934] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 955.958886][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.958912][ T9934] ? lru_gen_update_size+0x7bd/0xd20 [ 955.958962][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.958987][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 955.959022][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959048][ T9934] ? __lock_acquire+0x6b6/0x2cf0 [ 955.959081][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959117][ T9934] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 955.959149][ T9934] do_writepages+0x32e/0x550 [ 955.959183][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959212][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959244][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959270][ T9934] ? do_raw_spin_unlock+0x122/0x240 [ 955.959310][ T9934] filemap_fdatawrite+0x199/0x240 [ 955.959344][ T9934] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 955.959426][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959455][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959489][ T9934] ? do_raw_spin_unlock+0x122/0x240 [ 955.959528][ T9934] f2fs_sync_dirty_inodes+0x30f/0x810 [ 955.959580][ T9934] f2fs_write_checkpoint+0x935/0x2430 [ 955.959653][ T9934] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 955.959682][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.959789][ T9934] kill_f2fs_super+0x2d2/0x6c0 [ 955.959831][ T9934] ? __pfx_kill_f2fs_super+0x10/0x10 [ 955.959894][ T9934] deactivate_locked_super+0xbc/0x130 [ 955.959932][ T9934] cleanup_mnt+0x425/0x4c0 [ 955.959967][ T9934] ? _raw_spin_unlock_irq+0x23/0x50 [ 955.960010][ T9934] task_work_run+0x1d4/0x260 [ 955.960057][ T9934] ? __pfx_task_work_run+0x10/0x10 [ 955.960092][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.960131][ T9934] exit_to_user_mode_loop+0xef/0x4e0 [ 955.960156][ T9934] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.960182][ T9934] ? rcu_is_watching+0x15/0xb0 [ 955.960216][ T9934] do_syscall_64+0x2b7/0xf80 [ 955.960240][ T9934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.960263][ T9934] ? trace_irq_disable+0x37/0x100 [ 955.960303][ T9934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.960325][ T9934] RIP: 0033:0x7f39df790a77 [ 955.960346][ T9934] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 955.960366][ T9934] RSP: 002b:00007fff47f04b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 955.960390][ T9934] RAX: 0000000000000000 RBX: 00007f39df813d7d RCX: 00007f39df790a77 [ 955.960408][ T9934] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff47f04bc0 [ 955.960426][ T9934] RBP: 00007fff47f04bc0 R08: 0000000000000000 R09: 0000000000000000 [ 955.960442][ T9934] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff47f05c50 [ 955.960460][ T9934] R13: 00007f39df813d7d R14: 00000000000e9595 R15: 00007fff47f05c90 [ 955.960504][ T9934] [ 956.460630][ T9934] F2FS-fs (loop0): Remounting filesystem read-only [ 959.990911][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 960.118519][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 961.384677][T11049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 962.172097][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 962.256733][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 962.310923][T11053] loop1: detected capacity change from 0 to 256 [ 964.723106][T11072] loop1: detected capacity change from 0 to 256 [ 964.730687][T11072] exfat: Deprecated parameter 'namecase' [ 966.697056][T11072] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 968.115294][T10808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.085236][T10808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.474736][T10808] team0: Port device team_slave_0 added [ 974.605353][T10808] team0: Port device team_slave_1 added [ 974.892435][T11119] loop4: detected capacity change from 0 to 512 [ 974.952984][T11119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.985169][T11119] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.964524][T10808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.971579][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.009056][T10808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.714495][T10808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.781386][T10808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.917522][ T9663] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.926899][T10808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.984891][T10912] chnl_net:caif_netlink_parms(): no params data found [ 979.411823][T10912] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.439381][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.469757][T10912] bridge_slave_0: entered allmulticast mode [ 979.477854][T10912] bridge_slave_0: entered promiscuous mode [ 979.496938][T10912] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.524608][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.570701][T10912] bridge_slave_1: entered allmulticast mode [ 979.583615][T10912] bridge_slave_1: entered promiscuous mode [ 979.668677][T11160] loop4: detected capacity change from 0 to 512 [ 979.706237][T11160] ext3: Unknown parameter 'permit_directio' [ 979.813251][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.826789][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.834825][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.842842][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 979.850656][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 979.960881][T10955] chnl_net:caif_netlink_parms(): no params data found [ 980.962481][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.094224][T11173] Bluetooth: MGMT ver 1.23 [ 981.447186][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.569933][T11176] loop1: detected capacity change from 0 to 16 [ 981.620835][T11176] erofs (device loop1): mounted with root inode @ nid 36. [ 981.692802][T10912] team0: Port device team_slave_0 added [ 981.926434][ T5828] Bluetooth: hci4: command tx timeout [ 981.991041][T10912] team0: Port device team_slave_1 added [ 984.510813][ T9274] Bluetooth: hci4: command tx timeout [ 984.662362][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.678726][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.722915][T10955] bridge_slave_0: entered allmulticast mode [ 984.770288][T10955] bridge_slave_0: entered promiscuous mode [ 984.787588][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.815344][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.824005][T10955] bridge_slave_1: entered allmulticast mode [ 984.841379][T10955] bridge_slave_1: entered promiscuous mode [ 984.925965][T11187] ================================================================== [ 984.934065][T11187] BUG: KASAN: slab-use-after-free in __list_lru_walk_one+0xfb/0x420 [ 984.942033][T11187] Read of size 8 at addr ffff888060e96078 by task syz.0.868/11187 [ 984.949815][T11187] [ 984.952122][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.0.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.952148][T11187] Tainted: [L]=SOFTLOCKUP [ 984.952156][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 984.952168][T11187] Call Trace: [ 984.952175][T11187] [ 984.952183][T11187] dump_stack_lvl+0xe8/0x150 [ 984.952210][T11187] print_report+0xca/0x240 [ 984.952230][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 984.952250][T11187] kasan_report+0x118/0x150 [ 984.952274][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 984.952298][T11187] __list_lru_walk_one+0xfb/0x420 [ 984.952321][T11187] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 984.952350][T11187] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 984.952375][T11187] list_lru_walk_one+0x3c/0x50 [ 984.952397][T11187] gfs2_qd_shrink_scan+0x155/0x330 [ 984.952422][T11187] ? list_lru_count_one+0x27/0x2c0 [ 984.952442][T11187] ? __pfx_gfs2_qd_shrink_scan+0x10/0x10 [ 984.952465][T11187] ? list_lru_count_one+0x27/0x2c0 [ 984.952484][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.952507][T11187] ? shrink_slab+0x129/0x10d0 [ 984.952530][T11187] do_shrink_slab+0x6df/0x10d0 [ 984.952557][T11187] ? shrink_slab+0x129/0x10d0 [ 984.952578][T11187] shrink_slab+0xd74/0x10d0 [ 984.952598][T11187] ? shrink_slab+0x129/0x10d0 [ 984.952620][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.952644][T11187] ? __pfx_shrink_slab+0x10/0x10 [ 984.952664][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.952687][T11187] ? mem_cgroup_iter+0x3b/0x460 [ 984.952714][T11187] ? mem_cgroup_iter+0x3e7/0x460 [ 984.952740][T11187] ? mem_cgroup_iter+0x3b/0x460 [ 984.952767][T11187] drop_slab+0x14b/0x290 [ 984.952790][T11187] drop_caches_sysctl_handler+0xc7/0x170 [ 984.952820][T11187] proc_sys_call_handler+0x4cb/0x700 [ 984.952848][T11187] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 984.952872][T11187] ? __pfx___futex_wait+0x10/0x10 [ 984.952901][T11187] do_iter_readv_writev+0x623/0x8c0 [ 984.952924][T11187] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 984.952946][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.952974][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.952999][T11187] vfs_writev+0x31a/0x960 [ 984.953026][T11187] ? __pfx_vfs_writev+0x10/0x10 [ 984.953056][T11187] ? __fget_files+0x2a/0x420 [ 984.953082][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.953103][T11187] ? __fget_files+0x3a0/0x420 [ 984.953126][T11187] ? __fget_files+0x2a/0x420 [ 984.953150][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 984.953174][T11187] do_writev+0x14d/0x2d0 [ 984.953198][T11187] ? __pfx_do_writev+0x10/0x10 [ 984.953227][T11187] do_syscall_64+0xec/0xf80 [ 984.953246][T11187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.953264][T11187] ? trace_irq_disable+0x37/0x100 [ 984.953292][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.953311][T11187] RIP: 0033:0x7f39df78f749 [ 984.953327][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.953343][T11187] RSP: 002b:00007f39e068b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 984.953363][T11187] RAX: ffffffffffffffda RBX: 00007f39df9e5fa0 RCX: 00007f39df78f749 [ 984.953377][T11187] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 984.953390][T11187] RBP: 00007f39df813f91 R08: 0000000000000000 R09: 0000000000000000 [ 984.953402][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.953414][T11187] R13: 00007f39df9e6038 R14: 00007f39df9e5fa0 R15: 00007fff47f05878 [ 984.953437][T11187] [ 984.953443][T11187] [ 985.298326][T11187] Allocated by task 8111: [ 985.302632][T11187] kasan_save_track+0x3e/0x80 [ 985.307295][T11187] __kasan_slab_alloc+0x6c/0x80 [ 985.312131][T11187] kmem_cache_alloc_noprof+0x37d/0x710 [ 985.317584][T11187] qd_alloc+0x50/0x250 [ 985.321663][T11187] gfs2_quota_init+0x762/0x1200 [ 985.326505][T11187] gfs2_make_fs_rw+0x143/0x220 [ 985.331253][T11187] gfs2_fill_super+0x1b6a/0x21b0 [ 985.336174][T11187] get_tree_bdev_flags+0x40e/0x4d0 [ 985.341287][T11187] gfs2_get_tree+0x51/0x1e0 [ 985.345773][T11187] vfs_get_tree+0x92/0x2a0 [ 985.350183][T11187] do_new_mount+0x302/0xa10 [ 985.354674][T11187] __se_sys_mount+0x313/0x410 [ 985.359335][T11187] do_syscall_64+0xec/0xf80 [ 985.363824][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.369711][T11187] [ 985.372014][T11187] Freed by task 6013: [ 985.375980][T11187] kasan_save_track+0x3e/0x80 [ 985.380638][T11187] kasan_save_free_info+0x46/0x50 [ 985.385651][T11187] __kasan_slab_free+0x5c/0x80 [ 985.390399][T11187] kmem_cache_free+0x197/0x620 [ 985.395162][T11187] gfs2_qd_dealloc+0x70/0xe0 [ 985.399742][T11187] rcu_core+0xc8e/0x1720 [ 985.403972][T11187] handle_softirqs+0x22b/0x7c0 [ 985.408718][T11187] do_softirq+0x76/0xd0 [ 985.412857][T11187] __local_bh_enable_ip+0xf8/0x130 [ 985.417952][T11187] __alloc_skb+0x1bc/0x3a0 [ 985.422374][T11187] nsim_dev_trap_report_work+0x29a/0xb80 [ 985.427995][T11187] process_scheduled_works+0xad1/0x1770 [ 985.433521][T11187] worker_thread+0x8a0/0xda0 [ 985.438095][T11187] kthread+0x711/0x8a0 [ 985.442151][T11187] ret_from_fork+0x510/0xa50 [ 985.446723][T11187] ret_from_fork_asm+0x1a/0x30 [ 985.451501][T11187] [ 985.453808][T11187] Last potentially related work creation: [ 985.459498][T11187] kasan_save_stack+0x3e/0x60 [ 985.464159][T11187] kasan_record_aux_stack+0xbd/0xd0 [ 985.469347][T11187] call_rcu+0xee/0x890 [ 985.473401][T11187] gfs2_quota_sync+0x30c/0x460 [ 985.478153][T11187] gfs2_sync_fs+0x4c/0xb0 [ 985.482467][T11187] sync_filesystem+0xee/0x230 [ 985.487136][T11187] generic_shutdown_super+0x6f/0x2c0 [ 985.492420][T11187] kill_block_super+0x44/0x90 [ 985.497080][T11187] deactivate_locked_super+0xbc/0x130 [ 985.502439][T11187] cleanup_mnt+0x425/0x4c0 [ 985.506942][T11187] task_work_run+0x1d4/0x260 [ 985.511524][T11187] exit_to_user_mode_loop+0xef/0x4e0 [ 985.516797][T11187] do_syscall_64+0x2b7/0xf80 [ 985.521370][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.527244][T11187] [ 985.529546][T11187] The buggy address belongs to the object at ffff888060e96000 [ 985.529546][T11187] which belongs to the cache gfs2_quotad of size 272 [ 985.543576][T11187] The buggy address is located 120 bytes inside of [ 985.543576][T11187] freed 272-byte region [ffff888060e96000, ffff888060e96110) [ 985.557351][T11187] [ 985.559655][T11187] The buggy address belongs to the physical page: [ 985.566043][T11187] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888060e96000 pfn:0x60e96 [ 985.576084][T11187] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 985.583174][T11187] page_type: f5(slab) [ 985.587144][T11187] raw: 00fff00000000000 ffff888140ea6000 dead000000000122 0000000000000000 [ 985.595708][T11187] raw: ffff888060e96000 00000000800c000b 00000000f5000000 0000000000000000 [ 985.604274][T11187] page dumped because: kasan: bad access detected [ 985.610671][T11187] page_owner tracks the page as allocated [ 985.616363][T11187] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x52c50(GFP_NOFS|__GFP_RECLAIMABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8111, tgid 8110 (syz.7.378), ts 476039142588, free_ts 467645984770 [ 985.637100][T11187] post_alloc_hook+0x234/0x290 [ 985.641891][T11187] get_page_from_freelist+0x24e0/0x2580 [ 985.647422][T11187] __alloc_frozen_pages_noprof+0x181/0x370 [ 985.653216][T11187] alloc_pages_mpol+0x232/0x4a0 [ 985.658075][T11187] allocate_slab+0x86/0x3b0 [ 985.662581][T11187] ___slab_alloc+0xe53/0x1820 [ 985.667242][T11187] __slab_alloc+0x65/0x100 [ 985.671639][T11187] kmem_cache_alloc_noprof+0x40f/0x710 [ 985.677090][T11187] qd_alloc+0x50/0x250 [ 985.681143][T11187] gfs2_quota_init+0x762/0x1200 [ 985.685980][T11187] gfs2_make_fs_rw+0x143/0x220 [ 985.690724][T11187] gfs2_fill_super+0x1b6a/0x21b0 [ 985.695658][T11187] get_tree_bdev_flags+0x40e/0x4d0 [ 985.700755][T11187] gfs2_get_tree+0x51/0x1e0 [ 985.705234][T11187] vfs_get_tree+0x92/0x2a0 [ 985.709627][T11187] do_new_mount+0x302/0xa10 [ 985.714113][T11187] page last free pid 6186 tgid 6186 stack trace: [ 985.720420][T11187] __free_frozen_pages+0xbc8/0xd30 [ 985.725524][T11187] __put_partials+0x146/0x170 [ 985.730183][T11187] __slab_free+0x294/0x320 [ 985.734582][T11187] qlist_free_all+0x97/0x100 [ 985.739152][T11187] kasan_quarantine_reduce+0x148/0x160 [ 985.744588][T11187] __kasan_slab_alloc+0x22/0x80 [ 985.749418][T11187] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 985.755301][T11187] __alloc_skb+0x1dc/0x3a0 [ 985.759711][T11187] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 985.765592][T11187] addrconf_ifdown+0x1533/0x1870 [ 985.770509][T11187] addrconf_notify+0x1bc/0x1050 [ 985.775342][T11187] notifier_call_chain+0x19d/0x3a0 [ 985.780439][T11187] unregister_netdevice_many_notify+0x1867/0x2340 [ 985.786844][T11187] default_device_exit_batch+0x964/0x9e0 [ 985.792456][T11187] ops_undo_list+0x525/0x990 [ 985.797027][T11187] cleanup_net+0x4d8/0x7a0 [ 985.801422][T11187] [ 985.803722][T11187] Memory state around the buggy address: [ 985.809323][T11187] ffff888060e95f00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 985.817359][T11187] ffff888060e95f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.825398][T11187] >ffff888060e96000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.833433][T11187] ^ [ 985.841384][T11187] ffff888060e96080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 985.849424][T11187] ffff888060e96100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 985.857547][T11187] ================================================================== [ 985.873265][T11187] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 985.880469][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.0.868 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.891324][T11187] Tainted: [L]=SOFTLOCKUP [ 985.895638][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 985.905772][T11187] Call Trace: [ 985.909039][T11187] [ 985.911957][T11187] vpanic+0x1e0/0x670 [ 985.915948][T11187] panic+0xb9/0xc0 [ 985.919671][T11187] ? __pfx_panic+0x10/0x10 [ 985.924090][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 985.929300][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 985.934492][T11187] check_panic_on_warn+0x89/0xb0 [ 985.939435][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 985.944627][T11187] end_report+0x6f/0x140 [ 985.948867][T11187] kasan_report+0x129/0x150 [ 985.953369][T11187] ? __list_lru_walk_one+0xfb/0x420 [ 985.958566][T11187] __list_lru_walk_one+0xfb/0x420 [ 985.963590][T11187] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 985.968889][T11187] ? __pfx_gfs2_qd_isolate+0x10/0x10 [ 985.974175][T11187] list_lru_walk_one+0x3c/0x50 [ 985.978935][T11187] gfs2_qd_shrink_scan+0x155/0x330 [ 985.984049][T11187] ? list_lru_count_one+0x27/0x2c0 [ 985.989150][T11187] ? __pfx_gfs2_qd_shrink_scan+0x10/0x10 [ 985.994787][T11187] ? list_lru_count_one+0x27/0x2c0 [ 985.999892][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.005521][T11187] ? shrink_slab+0x129/0x10d0 [ 986.010199][T11187] do_shrink_slab+0x6df/0x10d0 [ 986.014978][T11187] ? shrink_slab+0x129/0x10d0 [ 986.019649][T11187] shrink_slab+0xd74/0x10d0 [ 986.024148][T11187] ? shrink_slab+0x129/0x10d0 [ 986.028822][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.034449][T11187] ? __pfx_shrink_slab+0x10/0x10 [ 986.039378][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.045005][T11187] ? mem_cgroup_iter+0x3b/0x460 [ 986.049856][T11187] ? mem_cgroup_iter+0x3e7/0x460 [ 986.054791][T11187] ? mem_cgroup_iter+0x3b/0x460 [ 986.059644][T11187] drop_slab+0x14b/0x290 [ 986.063885][T11187] drop_caches_sysctl_handler+0xc7/0x170 [ 986.069525][T11187] proc_sys_call_handler+0x4cb/0x700 [ 986.074813][T11187] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 986.080620][T11187] ? __pfx___futex_wait+0x10/0x10 [ 986.085645][T11187] do_iter_readv_writev+0x623/0x8c0 [ 986.090837][T11187] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 986.096552][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.102180][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.107812][T11187] vfs_writev+0x31a/0x960 [ 986.112141][T11187] ? __pfx_vfs_writev+0x10/0x10 [ 986.116997][T11187] ? __fget_files+0x2a/0x420 [ 986.121584][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.127209][T11187] ? __fget_files+0x3a0/0x420 [ 986.131881][T11187] ? __fget_files+0x2a/0x420 [ 986.136468][T11187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 986.142095][T11187] do_writev+0x14d/0x2d0 [ 986.146335][T11187] ? __pfx_do_writev+0x10/0x10 [ 986.151099][T11187] do_syscall_64+0xec/0xf80 [ 986.155594][T11187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.161651][T11187] ? trace_irq_disable+0x37/0x100 [ 986.166683][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.172567][T11187] RIP: 0033:0x7f39df78f749 [ 986.176977][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.196570][T11187] RSP: 002b:00007f39e068b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 986.204981][T11187] RAX: ffffffffffffffda RBX: 00007f39df9e5fa0 RCX: 00007f39df78f749 [ 986.212944][T11187] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 986.220915][T11187] RBP: 00007f39df813f91 R08: 0000000000000000 R09: 0000000000000000 [ 986.228875][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.236833][T11187] R13: 00007f39df9e6038 R14: 00007f39df9e5fa0 R15: 00007fff47f05878 [ 986.244805][T11187] [ 986.248094][T11187] Kernel Offset: disabled [ 986.252405][T11187] Rebooting in 86400 seconds..