last executing test programs: 28m28.206085798s ago: executing program 32 (id=27): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2b, 0x801, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003f00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000000100)=0x658a, 0x4) 28m4.058865657s ago: executing program 33 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) 26m42.344596976s ago: executing program 34 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 25m26.75925647s ago: executing program 35 (id=251): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4) 25m10.27342613s ago: executing program 36 (id=274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 23m52.526329036s ago: executing program 37 (id=359): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x4, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 23m50.868785937s ago: executing program 38 (id=369): syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) close(0x3) io_submit(r0, 0x1, &(0x7f0000000380)=[0x0]) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 19m50.341280325s ago: executing program 39 (id=717): socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 17m49.949822911s ago: executing program 40 (id=901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) io_setup(0x9, &(0x7f0000000100)) 17m44.69024763s ago: executing program 41 (id=912): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0xb45, 0x9, 0x200008, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x400, 0x0, 0xffffffffffffff94) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x4804) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) keyctl$setperm(0x5, 0x0, 0x0) 16m40.37725132s ago: executing program 42 (id=986): socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 15m4.823489481s ago: executing program 43 (id=1126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 14m46.19893149s ago: executing program 44 (id=1150): socket$inet(0x10, 0x3, 0x0) creat(0x0, 0x175) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 11m21.502963738s ago: executing program 45 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000000) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x48) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x6}}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) 11m5.671561782s ago: executing program 46 (id=1389): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000100000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019700)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f000001ce80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r2, 0xffffffffffffffff, 0x0) 10m15.37871476s ago: executing program 8 (id=1457): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x3, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) 9m58.917824996s ago: executing program 47 (id=1457): gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x3, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) 8m13.128809482s ago: executing program 48 (id=1594): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) kexec_load(0xf8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280), 0x0, 0x8000, 0x10000}], 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0) socket$packet(0x11, 0xa7efad2b783e7331, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) 7m28.320545599s ago: executing program 49 (id=1630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fstat(0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f0000000580)}) syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x1) listen(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 7m26.250194997s ago: executing program 50 (id=1631): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) kexec_load(0xf8, 0x1, &(0x7f0000000040)=[{&(0x7f0000000280), 0x0, 0x8000, 0x10000}], 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0) socket$packet(0x11, 0xa7efad2b783e7331, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) 5m8.896714303s ago: executing program 51 (id=1799): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) write$FUSE_STATFS(r4, &(0x7f0000000200)={0x60, 0xfffffffffffffff5, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mount$afs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 5m0.16750521s ago: executing program 52 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0104181b00550c616f649abdb7d002ec0000"], 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m18.401818538s ago: executing program 8 (id=1823): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) setgid(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'netdevsim0\x00', 0x2}) r1 = socket$key(0xf, 0x3, 0x2) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r1) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20040841) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000180000001801000020ff642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x8042, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) 4m16.156248111s ago: executing program 8 (id=1866): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6060600) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x3f, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)}], 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2a, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x48844) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) 4m13.629512355s ago: executing program 8 (id=1870): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket(0x1d, 0x2, 0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=""/22, 0x16) 4m7.7894717s ago: executing program 8 (id=1875): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$AUDIT_SIGNAL_INFO(r1, 0x0, 0x4000840) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d0040d1) 4m4.873882933s ago: executing program 8 (id=1879): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7cb, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @loopback, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"040200090000000800"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) close_range(r0, r0, 0x0) 3m48.466536187s ago: executing program 53 (id=1879): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7cb, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @loopback, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {"040200090000000800"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) close_range(r0, r0, 0x0) 3m48.166377253s ago: executing program 5 (id=1899): socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040832}, 0xc094) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0x6000, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455726527203030"], 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 3m45.736845959s ago: executing program 5 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_secret(0x0) ftruncate(r4, 0x51a9497) r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3m42.723276515s ago: executing program 5 (id=1906): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20005004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x6, 0x7, 0x7f, 0x5, 0x1, 0x6, 0x5f, 0x9, 0x15, 0xffff2d33, 0xff7fff01, 0x7, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129c32f6, 0xc8, 0x5, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xfffffffe, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x204, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93790, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x9, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x81, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x2c4ad71a, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x938, 0x9, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x3, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf41, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000002c0)={0x32, 0x0, 0x6}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) 3m36.383560832s ago: executing program 5 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x1c04744, &(0x7f0000000300), 0xff, 0x49b, &(0x7f0000000680)="$eJzs3M9rHFUcAPDvTDb9qU2s9UdrwWgVgz+SJm21Bz0oCh4UFD3UY0zSUrttpIlgS9FUpB6l4F08Cv4FnjyJehJE8KB3KRQtQlsvrszuTJJdd9ImTbJb9/OBbd/MvJ33vnnzdt++t7MB9Kyh7J8k4o6I+DUiBhqbzRmGGv9du3Ju8vqVc5NJ1Gpv/JHU8129cm4yP8XC87bnO4bTiPTjJC+k2eyZsycmqtXp0/n26NzJd0dnz5x96vjJiWPTx6ZPjR8+fPDA2DNPjx9qet6hVcaZxXd1zwcze3e//NbFVyePXHz7+6+y/Wl+vIhjLQ1lgf9Zq2s99uhaF9Zh/9QW40wqna4NN6svIrLm6q/3/4Hoi8XGG4iXPupo5YB1lb1mby4/PF8D/seS6HQNgM4o3uizz7/5o3+Dhh5d4fLzjQ9AWezX8kfjSGVhbmA9/yBDEXFk/u/Ps0e0zEPU2swbAADcqm+y8c+TTeO/fPyRxr1L8u3I14YGI+KuiNgZEXdHxK6IuCeinve+iLh/heW3Lg39dx0mvbSY/nmFZ7+xbPz3bL621Tz+K0Z/MdiXb91Zj78/OXq8Or0//5sMR//mbHus3cmLU7z406dl5S8d/2WPrPxiLJif5FKlZYJuamJuYq0GpZfPR+yptIs/WVgJSCJid0TsWdmpdxSJ449/ubcs043jX8YarDPVvoh4rNH+89ESfyFZfn1ydEtUp/ePNq6KvjZl/PDjhdfKyr+l+NdA1v7bmq//lhwDfyVL12tnV17Ghd8+KV1brazy+t+UvFlf092U73t/Ym7u9FjEpuSV+nbT/iXXSX17fDF/Fv/wvvb9f2f+nCz+ByJib8QvRbd7MG+7hyLi4YjYt0z8373wyDtlx7qh/afavv4tXP+Dze2/8kTfiW+/Liu/Nf4k317MkbX/wXpqON9Tf/3LbS05b3l1tuQ5Vns1AwAAwO0nrX83PklHFtJpOjLS+A7/rtiWVmdm5544OvPeqanGd+gHoz8t5j8HlsyHjiXz+Rkb2+P5XHFx/EA+b/xZ39Ykier0yORMdarDsUOv217S/zO/t5vMjojnNrSGwLpyvxb0rtb+n3aoHsDG8/4PvUv/h96l/0PvKvr/60v2fdiSp2QtALjNef+H3qX/Q+9a6P/nO1sPYON5/4ee1O4m+eI3Dm7hlv9lE8VvM5TlqSxz936XJorZ0W6pz4kkIta3iEi7I9LSROQ/YtEt9Vl54nptlU+vLNO7bzax8a9FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6+HfAAAA//9IHuJO") r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) accept$alg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) 3m32.009883032s ago: executing program 5 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, 0x0, 0x0) 3m20.321123293s ago: executing program 5 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000000000e7b6284000a6a098cbe3000000007b8af88e0d62f9000000000000846d5451ad90e3d0ea08000000000000104ef62ea375e190c6"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 3m4.672927739s ago: executing program 54 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000000000e7b6284000a6a098cbe3000000007b8af88e0d62f9000000000000846d5451ad90e3d0ea08000000000000104ef62ea375e190c6"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 1m32.257758062s ago: executing program 9 (id=2057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x4048043) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r3, 0x1c243811) keyctl$chown(0x4, r3, 0xee00, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0xfff, 0xfffffffa}, 0x10) 1m28.057294818s ago: executing program 2 (id=2064): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8000007, 'syz0\x00'}) shutdown(r1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f00000000c0)) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1m25.801956804s ago: executing program 9 (id=2068): syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m24.813744467s ago: executing program 2 (id=2069): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 1m19.388395878s ago: executing program 2 (id=2074): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ba330c4fa7236f0008484e41cfbee5c6e2060b969c7f8a3bb60da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720579e9b84a17fc7d25d0ed230b6f"], 0x11, 0x6a0, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnDgbDVOY8VJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trd9UvebMPnE80+zzPPzDO/+c3LvkTWBPi/delU2vfTyaVTr9+p2mv35pbW7s3d6NWTjCdpJe1ukeJmUnyYXEx3yheqmc1wxbDt/Grx/OWPPln7uNtqZ2O86qUzPMD2bvZitZkynWSkKR/BpvHefLjxxjeqxXpmqoSd7CUO9ttoknKTHx3f6BmkHOlrDL3egcOj6L5v9ule/1PJkSQTvTe01W5n6+lHuKM93YtWn1wcAAAAcGAcfXA3uZPJ/Y4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpPm+f9FM7V69ekUvef/j/U9Y39sn8MdbvvIJnqV+62nEQwAAAAAAAAAPFlfepDfXi7LyV67LOr/83+5bhyrX5/JO7mdhSzndO5kPitZyXJmk0z1DTR2Z35lZXm2t+ZnZVkOWfPswDXP7jLgzuPYawAAAAAAAAD4n3GhKX+aS5nc51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTIhnpFvV0rFefSqudZCLJWLXcavL3Xv0wu7/fAQAAAMBTcPRBHuROJnvtsqi/8x+vv/dP5J3czEoWs5KlLORK/VtA91t/a+3e3NLavbkb1fT5cb/17436HyZ3DKMeMd3fHgZv+US9RCdXs1jPOZ0383aWciWtes3KiV48g+N6v4qpuNBVlrtL0JWmrPb8l015MEzVGRldz8hME1uVjWe3z0T/0XmILc2mtf7Lz7E95PzCtlsp/tM7Jkd6c5Jnvrdzzkf3tDOPZGsmzvadfce3z0TylT/+7ofXlm5ev1asnjo4p9EejP9z46rZmom5vky8uOtMXL19ODOxVSsvrNcv5bv5QU5lOm9kOYv5ceazkoVM5zt1bb45n6vXqe0zdXFT642dohhrjsvIlpi+fLRbbhfTy/W6k1nM9/N2rmQhr9X/zmY2X8+5nMv5viP8wi6u+taAq/5Pw4M/+dWm0knyi6Y8GKq8PtuX1/577lTd1z+nlXK8u95zj+3euK79xaZSHYmfNeXBsJ6Jiay/S/Sie76XgdGBmfh1fVu5vXTz+vK1+Vtbxi1WB2/vlWze/T3dSEb2svBeVefLc9XBqlubz46q7/mBfbN137H1vtbWvt901vt2ulLHms9wnx/pbN334sC+ubrvRF/fxuetz8qy7H7eAuDAO/LqkbHOvzp/63zQ+XnnWuf1iW+Pf2P8pbGM/nX0m+2ZkVdaLxW/zwf5SXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo9rvvXZ9fWlpY3lIpy/LukK4nUkk72TTnL3/uWyZJ/TCg3Q9YLX2xldRz2mkqewvs7sPtzvsPm4R/NMfkqST8sVQmhp4/WyuflmV5MGLeTaVsHJR4nkDl1bIst11mX29LwFNwZuXGrTO3333va4s35t9aeGvh5vlz587PnD/32tyZq4tLCzPd1/2OEngS+j6BAwAAAAAAAAAAAIfE7v44p3i0v+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeASXTqV9P0VmZ07PVO21e3NL1dSrbyz5aZJWkmI6KT5MLqY7ZapvuGLYdlaTyx99svZxt9Vupnr51nbr7c5qM2U6yUhTDjAxaGZ5d9h4RT3OreHjbTFsL4r1viphJ3uJg/323wAAAP//H4wcFQ==") truncate(0x0, 0x2) 1m17.38392503s ago: executing program 2 (id=2077): r0 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x30000008}) epoll_create1(0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) accept$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 1m14.93886073s ago: executing program 9 (id=2079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='irq_handler_entry\x00', 0xffffffffffffffff, 0x0, 0x300000000}, 0x9f9a6f51aa9d9e09) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @restrict, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1m12.829149655s ago: executing program 2 (id=2094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000001480)={r0}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r2, 0x0, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r0, 0x0) sendmsg$rds(r0, 0x0, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000", @ANYRES64], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0xffffe000) clock_gettime(0x2, 0x0) r7 = accept4$rose(r0, &(0x7f0000000400)=@full={0xb, @dev, @netrom, 0x0, [@default, @default, @default, @remote, @rose, @rose]}, &(0x7f0000000440)=0x40, 0x800) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000480)={{r7}, "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"}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 1m11.826234627s ago: executing program 9 (id=2082): socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) getrlimit(0xb, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x7, @remote, 0x80000001}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, @in={0x2, 0x4e20, @private=0xa010101}], 0x68) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) write$P9_RSTATu(r0, &(0x7f0000000080)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04\xff\x00\x00\x00v{evoo~\x05\xc6\x00\x05\x00\x007\xd9:\x8b\xcd2W\x92\x00', 0x38, 'pJ\x86\x02\x00\x02\x00|\xfag>\xff\xeb\t\xb5{\x82\x00\xb5\x00\x01+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xd6\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00'/56, 0x18, '\xcf\xc2\x9ci\xab\x9d\xe6L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z\x00\x00\x00\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073795d310000000028000480080002400000000008000140000000051400"], 0xe8}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r2, 0x400000) 1m11.805428572s ago: executing program 2 (id=2084): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) futex(0x0, 0x6, 0x2, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000240)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x8) 1m7.390638105s ago: executing program 9 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fstat(0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f0000000580)}) syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x1) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m6.408470901s ago: executing program 9 (id=2089): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x20) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@errors_remount}, {@fat=@debug}, {@fat=@uid}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@nocase}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") 59.760574244s ago: executing program 0 (id=2098): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) accept4(r3, 0x0, 0x0, 0x800) io_setup(0x4, 0x0) io_submit(0x0, 0x0, &(0x7f00000002c0)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) 55.595891843s ago: executing program 55 (id=2084): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) futex(0x0, 0x6, 0x2, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000240)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x8) 50.667732172s ago: executing program 56 (id=2089): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x20) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat(r5, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000040)={[{@fat=@errors_remount}, {@fat=@debug}, {@fat=@uid}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@nocase}, {@nodots}]}, 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") 47.065435107s ago: executing program 4 (id=2111): openat$nullb(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000a007) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) setresuid(0xee01, 0xee00, 0x0) syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) shutdown(r2, 0x2) 46.997881206s ago: executing program 0 (id=2112): bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ba330c4fa7236f0008484e41cfbee5c6e2060b969c7f8a3bb60da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720579e9b84a17fc7d25d0ed230b6f"], 0x11, 0x6a0, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnDgbDVOY8VJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trd9UvebMPnE80+zzPPzDO/+c3LvkTWBPi/delU2vfTyaVTr9+p2mv35pbW7s3d6NWTjCdpJe1ukeJmUnyYXEx3yheqmc1wxbDt/Grx/OWPPln7uNtqZ2O86qUzPMD2bvZitZkynWSkKR/BpvHefLjxxjeqxXpmqoSd7CUO9ttoknKTHx3f6BmkHOlrDL3egcOj6L5v9ule/1PJkSQTvTe01W5n6+lHuKM93YtWn1wcAAAAcGAcfXA3uZPJ/Y4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpPm+f9FM7V69ekUvef/j/U9Y39sn8MdbvvIJnqV+62nEQwAAAAAAAAAPFlfepDfXi7LyV67LOr/83+5bhyrX5/JO7mdhSzndO5kPitZyXJmk0z1DTR2Z35lZXm2t+ZnZVkOWfPswDXP7jLgzuPYawAAAAAAAAD4n3GhKX+aS5nc51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTIhnpFvV0rFefSqudZCLJWLXcavL3Xv0wu7/fAQAAAMBTcPRBHuROJnvtsqi/8x+vv/dP5J3czEoWs5KlLORK/VtA91t/a+3e3NLavbkb1fT5cb/17436HyZ3DKMeMd3fHgZv+US9RCdXs1jPOZ0383aWciWtes3KiV48g+N6v4qpuNBVlrtL0JWmrPb8l015MEzVGRldz8hME1uVjWe3z0T/0XmILc2mtf7Lz7E95PzCtlsp/tM7Jkd6c5Jnvrdzzkf3tDOPZGsmzvadfce3z0TylT/+7ofXlm5ev1asnjo4p9EejP9z46rZmom5vky8uOtMXL19ODOxVSsvrNcv5bv5QU5lOm9kOYv5ceazkoVM5zt1bb45n6vXqe0zdXFT642dohhrjsvIlpi+fLRbbhfTy/W6k1nM9/N2rmQhr9X/zmY2X8+5nMv5viP8wi6u+taAq/5Pw4M/+dWm0knyi6Y8GKq8PtuX1/577lTd1z+nlXK8u95zj+3euK79xaZSHYmfNeXBsJ6Jiay/S/Sie76XgdGBmfh1fVu5vXTz+vK1+Vtbxi1WB2/vlWze/T3dSEb2svBeVefLc9XBqlubz46q7/mBfbN137H1vtbWvt901vt2ulLHms9wnx/pbN334sC+ubrvRF/fxuetz8qy7H7eAuDAO/LqkbHOvzp/63zQ+XnnWuf1iW+Pf2P8pbGM/nX0m+2ZkVdaLxW/zwf5SXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo9rvvXZ9fWlpY3lIpy/LukK4nUkk72TTnL3/uWyZJ/TCg3Q9YLX2xldRz2mkqewvs7sPtzvsPm4R/NMfkqST8sVQmhp4/WyuflmV5MGLeTaVsHJR4nkDl1bIst11mX29LwFNwZuXGrTO3333va4s35t9aeGvh5vlz587PnD/32tyZq4tLCzPd1/2OEngS+j6BAwAAAAAAAAAAAIfE7v44p3i0v+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeASXTqV9P0VmZ07PVO21e3NL1dSrbyz5aZJWkmI6KT5MLqY7ZapvuGLYdlaTyx99svZxt9Vupnr51nbr7c5qM2U6yUhTDjAxaGZ5d9h4RT3OreHjbTFsL4r1viphJ3uJg/323wAAAP//H4wcFQ==") truncate(0x0, 0x2) 42.956437347s ago: executing program 0 (id=2113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x4020400) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) fanotify_init(0xf00, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010302000000fcdbdf252400000018000180140002007465616d5e736c61"], 0x2c}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000180)={@my=0x1}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 30.274259811s ago: executing program 0 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r4 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xffffffffffffeaf0, 0x0, 0x67e8, 0x0, 0xff, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffffffffb443, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) connect$inet(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) 30.272593385s ago: executing program 7 (id=2127): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000019480)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x11, 0x148, 0x0, 0x0, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x7}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 30.27047417s ago: executing program 4 (id=2128): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c504000000000000"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) 27.597386575s ago: executing program 0 (id=2131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 26.71709876s ago: executing program 7 (id=2116): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x94) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x8, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x4, 0x33, 0x1, 0xf9e4, 0x5, 0x5, 0xffffffffffffffff}) msgctl$IPC_INFO(0x0, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000044c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r0, 0x3, 0x1, 0x5, 0x3, [], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) 25.21010028s ago: executing program 7 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0xb}}]}}) syz_open_dev$media(0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x5, &(0x7f0000000840)={0x1a, 0xd1f, 0xfffffff9}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 24.929197776s ago: executing program 4 (id=2119): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x58b2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="200100", @ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) accept4$packet(r1, &(0x7f0000002000), &(0x7f0000000100)=0x14, 0x80000) 24.393806943s ago: executing program 3 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 23.785604375s ago: executing program 0 (id=2122): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 22.156678427s ago: executing program 1 (id=2123): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) listen(r6, 0x80000001) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x3e) 20.829214204s ago: executing program 3 (id=2124): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1008008, &(0x7f0000000100)={[{@compr_zlib}, {@rp_size={'rp_size', 0x3d, 0x101000000}}, {@rp_size={'rp_size', 0x3d, 0x103}}], [{@pcr={'pcr', 0x3d, 0xc}}]}, 0xff, 0x257, &(0x7f0000000300)="$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") pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000001380)="$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") r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300), 0x4) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac91b93eec369217142e5897"], 0x1, 0x5f8, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) 18.947179268s ago: executing program 1 (id=2125): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) statx(r1, 0x0, 0x1000, 0x1, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c851, &(0x7f0000000080)={0x11, 0xf8, r7, 0x1, 0xdf, 0x6, @random="15ad0541b058"}, 0x14) 18.945203075s ago: executing program 7 (id=2130): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000600)='^\x00', &(0x7f0000000640)) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000400)={0x7, 0x7, 0x2}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x484}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x10}}], 0x30}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x11) socket(0x10, 0x3, 0x0) 18.82024773s ago: executing program 4 (id=2132): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000280)={[], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@fsname={'fsname', 0x3d, 'bcachefs\x00'}}, {@audit}, {@appraise}, {@fowner_lt}, {@smackfshat={'smackfshat', 0x3d, 'bcachefs\x00'}}, {@obj_type={'obj_type', 0x3d, '}^&{'}}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.689454383s ago: executing program 6 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r5, 0x10, 0x3, 0x7ffd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r6, 0x20, 0x2000, 0x8000) 13.937321946s ago: executing program 7 (id=2133): openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002"], 0x98}}, 0x0) 13.714536857s ago: executing program 3 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) fanotify_init(0x200, 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x2fb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 13.581630794s ago: executing program 1 (id=2135): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r4, 0x0, 0x2) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r4, 0x8044610a, &(0x7f0000000080)) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) tkill(r1, 0xb) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 13.417280601s ago: executing program 4 (id=2136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010001", 0x7) socket(0x1d, 0x80805, 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9000a0006000500010802000600137d116e04a0ef879956193165d5dc06000000fd4b3d499aaa04"], 0xf) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @void}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 11.728883989s ago: executing program 7 (id=2137): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000140)=0x6) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x4000000) 11.724963613s ago: executing program 3 (id=2138): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000100)={[{@bsdgroups}, {@abort}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') 11.658620137s ago: executing program 6 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='irq_handler_entry\x00', 0xffffffffffffffff, 0x0, 0x300000000}, 0x9f9a6f51aa9d9e09) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @restrict, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@gid}, {@shortad}, {@uid}, {}, {@noadinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 9.695122845s ago: executing program 6 (id=2140): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fstat(0xffffffffffffffff, 0x0) ioprio_get$uid(0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f0000000580)}) syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x1) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 9.542357874s ago: executing program 1 (id=2141): socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000e00)) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = memfd_create(0x0, 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0xd0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000004000000000000000080000001832000003000000000000000000000018000100060000000000000028f6000018660000080000000000000003000000950000000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x5, 0x5}, {0x2, 0x5, 0x6, 0x8}, {0xfffffffd, 0x1, 0xfffffffd, 0xc}, {0x1, 0x3, 0xc, 0x2}], 0x10, 0x1}, 0x94) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) 9.491631712s ago: executing program 3 (id=2142): r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0xf8}}, 0x40000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = timerfd_create(0x0, 0x80800) timerfd_settime(r6, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_usb_connect(0x2, 0x1b, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x23, 0xe2, 0x79, 0x8, 0xbda, 0x8198, 0xc049, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6a, 0x9, 0x40, 0x9}}]}}, 0x0) 8.052237563s ago: executing program 57 (id=2122): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="71756965742c636f6465706167653d64656661756c742c696f636861727365743d69736f383835392d332c71756965742c706172743d3078303030303030303030303030303030352c0092e73659b6f19fbbe01b9cc908dab9ad4d60fd5d2fe7f6f2a8504daf6ce25e47ccd96db758f99cd394edcacf7d6641565eb30fdd75538e1b4b26856e0d8d3dd5696871fea56befab9d6054e8a3d7ec6b0446b9854be7c547de0e6327b26b688927c436320bf5a8f3da0d373f123f05a7c23bc44cb09b3569c1a2e6a53db85a352c84d2be28861582595be300b40f1569d42e14addbebd853776fc5f01715e85eeaa188002d9d98f77bbecf7e075f264e052bb8cdbe5dfa461764272d3bb874306cf0962de8b667984388934fb1b44cc555064550a2df4ea53d3974a652e6dcf8ba8b5264497efdc53ec6742c9fac1e406f1eb7cd1ca3baafdee5c34f59975c6cbf0680dedc70db5b03870a1a"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x7ffeedc0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 7.446698238s ago: executing program 6 (id=2144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x9) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 4.345578635s ago: executing program 3 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xff59}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, &(0x7f0000000540)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x49) mkdir(0x0, 0x0) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x3c9282, 0x44) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x0, 0x158, 0x0, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'pimreg0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x141180, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x6, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) fanotify_init(0x2, 0x101000) 3.862347497s ago: executing program 1 (id=2146): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x29, 0x33, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 2.753997909s ago: executing program 1 (id=2147): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$rdma_cm(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$jffs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1008008, &(0x7f0000000100)={[{@compr_zlib}, {@rp_size={'rp_size', 0x3d, 0x101000000}}, {@rp_size={'rp_size', 0x3d, 0x103}}], [{@pcr={'pcr', 0x3d, 0xc}}]}, 0xff, 0x257, &(0x7f0000000300)="$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") pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000001380)="$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") r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000003340)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300), 0x4) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2000003, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6465636f6d706f7365008000000000000042000fc32c6e6f636172726965722c6e6f6465636e6d706f736500a580263e005a80c976898113cb9f4680642ce86dd3b5d3ba4a739e6654e4a1277ef2dd52ea98c5ea630da0c29cd73f8b9f4fd077e97f3ec1acc1ac91b93eec369217142e5897"], 0x1, 0x5f8, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) 2.741215375s ago: executing program 6 (id=2148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 11.276335ms ago: executing program 6 (id=2149): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x106, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x3c}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000019480)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x11, 0x148, 0x0, 0x0, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x0, 0x7}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 0s ago: executing program 4 (id=2160): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x24004800) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) kernel console output (not intermixed with test programs): left allmulticast mode [ 1384.990039][ T6343] bridge_slave_0: left promiscuous mode [ 1384.995883][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.507472][ T6343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.520740][ T6343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.534057][ T6343] bond0 (unregistering): Released all slaves [ 1385.579136][T14506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.586299][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.593703][T14506] bridge_slave_0: entered allmulticast mode [ 1385.602238][T14506] bridge_slave_0: entered promiscuous mode [ 1385.638551][T14506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.646144][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.660247][T14506] bridge_slave_1: entered allmulticast mode [ 1385.668226][T14506] bridge_slave_1: entered promiscuous mode [ 1385.796665][T14506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.913487][T14506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.059853][ T6343] hsr_slave_0: left promiscuous mode [ 1386.110379][ T6343] hsr_slave_1: left promiscuous mode [ 1386.131140][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.138570][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.161091][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.168556][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1386.236719][ T6343] veth1_macvtap: left promiscuous mode [ 1386.248767][ T6343] veth0_macvtap: left promiscuous mode [ 1386.269446][ T6343] veth1_vlan: left promiscuous mode [ 1386.274918][ T6343] veth0_vlan: left promiscuous mode [ 1386.327617][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1386.340665][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1386.349644][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1386.360904][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1386.370764][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1387.015591][ T6343] team0 (unregistering): Port device team_slave_1 removed [ 1387.050223][ T6343] team0 (unregistering): Port device team_slave_0 removed [ 1387.395728][T14506] team0: Port device team_slave_0 added [ 1387.408548][T14506] team0: Port device team_slave_1 added [ 1387.494007][T14506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.501244][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.528396][T14506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.542385][T14506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.552000][T14506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.578675][T14506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.672290][T14506] hsr_slave_0: entered promiscuous mode [ 1387.678845][T14506] hsr_slave_1: entered promiscuous mode [ 1387.685767][T14506] debugfs: 'hsr0' already exists in 'hsr' [ 1387.691709][T14506] Cannot create hsr debugfs directory [ 1387.967353][ T6343] IPVS: stop unused estimator thread 0... [ 1388.159529][ T6343] bridge_slave_1: left allmulticast mode [ 1388.165282][ T6343] bridge_slave_1: left promiscuous mode [ 1388.174095][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.190552][ T6343] bridge_slave_0: left allmulticast mode [ 1388.196634][ T6343] bridge_slave_0: left promiscuous mode [ 1388.202775][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.338770][ T6343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.351958][ T6343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.363044][ T6343] bond0 (unregistering): Released all slaves [ 1388.413426][ T5826] Bluetooth: hci0: command tx timeout [ 1388.529180][ T6343] hsr_slave_0: left promiscuous mode [ 1388.536593][ T6343] hsr_slave_1: left promiscuous mode [ 1388.545054][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.556625][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.723071][ T6343] team0 (unregistering): Port device team_slave_1 removed [ 1388.750631][ T6343] team0 (unregistering): Port device team_slave_0 removed [ 1388.953178][T14593] chnl_net:caif_netlink_parms(): no params data found [ 1389.139285][T14593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.146554][T14593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.154925][T14593] bridge_slave_0: entered allmulticast mode [ 1389.163841][T14593] bridge_slave_0: entered promiscuous mode [ 1389.174428][T14593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.181813][T14593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.189128][T14593] bridge_slave_1: entered allmulticast mode [ 1389.197161][T14593] bridge_slave_1: entered promiscuous mode [ 1389.264902][T14593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1389.285518][T14593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1389.362650][T14593] team0: Port device team_slave_0 added [ 1389.386037][T14593] team0: Port device team_slave_1 added [ 1389.428672][T14593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.436515][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.463714][T14593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.498802][T14593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.505852][T14593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.532904][T14593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.561566][T14506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1389.573211][T14506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1389.584337][T14506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1389.637333][T14593] hsr_slave_0: entered promiscuous mode [ 1389.644754][T14593] hsr_slave_1: entered promiscuous mode [ 1389.652617][T14593] debugfs: 'hsr0' already exists in 'hsr' [ 1389.658346][T14593] Cannot create hsr debugfs directory [ 1389.664301][T14506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1389.942976][T14506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.015584][T14506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.034856][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.042076][T11861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.085781][T10706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.092975][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.385146][T14593] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1390.402540][T14593] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1390.422174][T14593] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1390.437199][T14593] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1390.491996][ T5826] Bluetooth: hci0: command tx timeout [ 1390.575465][T14506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.599317][T14593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.641688][T14593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.666508][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.673727][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.697470][T10706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.704664][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.761065][T14506] veth0_vlan: entered promiscuous mode [ 1390.795712][T14506] veth1_vlan: entered promiscuous mode [ 1390.866813][T14506] veth0_macvtap: entered promiscuous mode [ 1390.891865][T14506] veth1_macvtap: entered promiscuous mode [ 1390.933445][T14506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.954144][T14506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.975719][T10706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.990057][T10706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.004171][T10706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.014548][T10706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.168254][T10706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.178886][T10706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.247452][T14593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.256072][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.279114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.886315][T14651] loop0: detected capacity change from 0 to 2048 [ 1391.914161][T14651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1392.897598][ T5826] Bluetooth: hci0: command tx timeout [ 1396.019265][ T5826] Bluetooth: hci0: command tx timeout [ 1398.064936][T14593] veth0_vlan: entered promiscuous mode [ 1398.129634][T14593] veth1_vlan: entered promiscuous mode [ 1401.386873][T14593] veth0_macvtap: entered promiscuous mode [ 1401.446117][T14593] veth1_macvtap: entered promiscuous mode [ 1401.810450][T14593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.838568][T14593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.949476][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1633'. [ 1402.958479][T14718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1633'. [ 1403.510331][T11869] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.539286][T11869] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.548079][T11869] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.803263][T11869] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.293602][T11869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.386345][T11869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.054508][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.083747][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 1410.272144][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.049331][T14748] loop6: detected capacity change from 0 to 2048 [ 1411.098084][T14748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1417.858818][T14781] loop1: detected capacity change from 0 to 1024 [ 1422.744178][ T5829] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1423.284282][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1423.317516][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1423.327149][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1423.339235][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1423.359540][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1425.619369][ T5829] Bluetooth: hci6: command tx timeout [ 1425.900661][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 1426.697904][T14832] loop0: detected capacity change from 0 to 512 [ 1426.711355][T14832] EXT4-fs: Ignoring removed nobh option [ 1426.746311][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1426.758481][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1426.770013][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1426.778888][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1426.786849][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1427.018072][T14832] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1662: iget: bad i_size value: 38620345925642 [ 1427.174826][T14832] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1662: couldn't read orphan inode 15 (err -117) [ 1427.570290][T14832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.690207][ T5826] Bluetooth: hci6: command tx timeout [ 1428.781762][T11861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.984830][ T5826] Bluetooth: hci4: command tx timeout [ 1429.110274][T13496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.763861][T11861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.770395][ T5826] Bluetooth: hci6: command tx timeout [ 1431.057063][ T5826] Bluetooth: hci4: command tx timeout [ 1432.119063][ T5826] Bluetooth: hci6: command tx timeout [ 1433.120148][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.126983][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.134410][ T5826] Bluetooth: hci4: command tx timeout [ 1433.155614][T11861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.378912][T11861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.223423][ T5826] Bluetooth: hci4: command tx timeout [ 1435.587505][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'. [ 1436.078740][T14799] chnl_net:caif_netlink_parms(): no params data found [ 1436.547099][T14825] chnl_net:caif_netlink_parms(): no params data found [ 1437.704146][T14925] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1437.712844][T14925] UDF-fs: Scanning with blocksize 512 failed [ 1437.726553][T14925] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1437.737174][T14925] UDF-fs: Scanning with blocksize 1024 failed [ 1437.768471][T14925] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1437.779139][T14925] UDF-fs: Scanning with blocksize 2048 failed [ 1437.816001][T13164] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1437.833793][T14925] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1437.841982][T14925] UDF-fs: Scanning with blocksize 4096 failed [ 1438.082738][T14799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.092545][T14799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.114281][T14799] bridge_slave_0: entered allmulticast mode [ 1438.142380][T14799] bridge_slave_0: entered promiscuous mode [ 1438.189316][T13164] usb 7-1: Using ep0 maxpacket: 32 [ 1438.198424][T13164] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.229127][T13164] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1438.254060][T13164] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1438.267842][T13164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.276046][T13164] usb 7-1: Product: syz [ 1438.337742][T14799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.386397][T13164] usb 7-1: Manufacturer: syz [ 1438.415214][T14799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.429048][T13164] usb 7-1: SerialNumber: syz [ 1438.458023][T14799] bridge_slave_1: entered allmulticast mode [ 1438.465709][T13164] usb 7-1: config 0 descriptor?? [ 1438.502257][T14799] bridge_slave_1: entered promiscuous mode [ 1438.553788][T11861] bridge_slave_1: left allmulticast mode [ 1438.559650][T11861] bridge_slave_1: left promiscuous mode [ 1438.565461][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.608291][T11861] bridge_slave_0: left allmulticast mode [ 1438.634988][T11861] bridge_slave_0: left promiscuous mode [ 1438.780379][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.111826][T13164] usb 7-1: USB disconnect, device number 7 [ 1445.313134][T14969] loop6: detected capacity change from 0 to 2048 [ 1445.427125][T14969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1446.874117][T14986] loop7: detected capacity change from 0 to 1024 [ 1447.393223][T14986] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1447.404199][T14986] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1447.420202][T14986] JBD2: no valid journal superblock found [ 1447.425942][T14986] EXT4-fs (loop7): Could not load journal inode [ 1448.094077][T14993] loop7: detected capacity change from 0 to 1024 [ 1449.489227][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1449.879069][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 1449.898914][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.639065][ T5896] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1450.714122][ T5896] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1450.901612][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.942307][ T5896] usb 2-1: Product: syz [ 1450.951512][ T5896] usb 2-1: Manufacturer: syz [ 1450.969744][ T5896] usb 2-1: SerialNumber: syz [ 1450.998916][ T5896] usb 2-1: config 0 descriptor?? [ 1451.263037][ T5889] usb 2-1: USB disconnect, device number 4 [ 1451.480805][T11861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.814279][T11861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1452.743027][T11861] bond0 (unregistering): Released all slaves [ 1453.285266][T10706] hfsplus: b-tree write err: -5, ino 4 [ 1457.503460][T15048] loop6: detected capacity change from 0 to 1024 [ 1457.538854][T15048] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1457.550865][T15048] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1458.238212][T15048] JBD2: no valid journal superblock found [ 1458.244224][T15048] EXT4-fs (loop6): Could not load journal inode [ 1459.150705][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.158690][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.169265][T14825] bridge_slave_0: entered allmulticast mode [ 1459.891479][T14825] bridge_slave_0: entered promiscuous mode [ 1459.934455][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.032099][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 1460.250702][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.708255][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.715697][T14825] bridge_slave_1: entered allmulticast mode [ 1460.946104][T14825] bridge_slave_1: entered promiscuous mode [ 1461.458652][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.350916][T14976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1464.389457][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.414495][T15108] loop6: detected capacity change from 0 to 128 [ 1464.491443][T15108] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1464.509623][T14976] usb 2-1: Using ep0 maxpacket: 32 [ 1464.521687][T14976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.553888][T14976] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.569861][T15108] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1464.582590][T14976] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1464.609142][T14976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.916936][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.927434][T14976] usb 2-1: Product: syz [ 1465.606666][T14976] usb 2-1: Manufacturer: syz [ 1465.611585][T14976] usb 2-1: SerialNumber: syz [ 1465.653721][T14976] usb 2-1: config 0 descriptor?? [ 1465.790128][T14799] team0: Port device team_slave_0 added [ 1466.489429][T11153] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1466.504327][T14799] team0: Port device team_slave_1 added [ 1466.651489][T11861] hsr_slave_0: left promiscuous mode [ 1466.705485][T11861] hsr_slave_1: left promiscuous mode [ 1466.743985][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1466.803960][T11861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.867324][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1466.974056][T15126] loop0: detected capacity change from 0 to 32768 [ 1467.055874][T11861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.206091][T15126] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1468.011484][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1468.011605][ T30] audit: type=1800 audit(2000000101.779:145): pid=15138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1712" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1468.112264][T11861] veth1_macvtap: left promiscuous mode [ 1468.118520][T11861] veth0_macvtap: left promiscuous mode [ 1468.137870][T11861] veth1_vlan: left promiscuous mode [ 1468.150248][T11861] veth0_vlan: left promiscuous mode [ 1468.485817][T15126] XFS (loop0): Ending clean mount [ 1468.498628][T15126] XFS (loop0): Quotacheck needed: Please wait. [ 1468.591053][ T975] usb 2-1: USB disconnect, device number 5 [ 1469.045227][T15126] XFS (loop0): Quotacheck: Done. [ 1470.599223][T13496] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1473.636624][T15178] loop0: detected capacity change from 0 to 64 [ 1477.649908][T11861] team0 (unregistering): Port device team_slave_1 removed [ 1478.703318][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1478.759603][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1478.770378][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1478.787213][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1478.800229][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1478.873097][T11861] team0 (unregistering): Port device team_slave_0 removed [ 1478.928411][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1478.946144][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1478.956746][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1478.966907][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1478.977148][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1479.027028][T15205] loop6: detected capacity change from 0 to 32768 [ 1479.175210][T15205] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1479.685212][T15205] XFS (loop6): Ending clean mount [ 1479.700672][T15205] XFS (loop6): Quotacheck needed: Please wait. [ 1479.809639][T15205] XFS (loop6): Quotacheck: Done. [ 1480.972185][ T5826] Bluetooth: hci5: command tx timeout [ 1481.049092][ T5826] Bluetooth: hci7: command tx timeout [ 1481.050425][T11153] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1483.413721][ T5826] Bluetooth: hci5: command tx timeout [ 1483.419253][ T5826] Bluetooth: hci7: command tx timeout [ 1484.533616][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'. [ 1484.666881][T15242] loop6: detected capacity change from 0 to 512 [ 1484.703571][T15242] EXT4-fs: Ignoring removed nobh option [ 1484.894990][T15242] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1736: iget: bad i_size value: 38620345925642 [ 1485.031878][T15242] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1736: couldn't read orphan inode 15 (err -117) [ 1485.461555][T15242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1485.474390][ T5829] Bluetooth: hci7: command tx timeout [ 1485.474412][ T5826] Bluetooth: hci5: command tx timeout [ 1486.760431][T15246] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1487.780655][ T5826] Bluetooth: hci7: command tx timeout [ 1487.786260][ T5826] Bluetooth: hci5: command tx timeout [ 1488.778935][T11153] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.318598][T15267] loop1: detected capacity change from 0 to 2048 [ 1489.588462][T15267] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1490.118353][T11861] IPVS: stop unused estimator thread 0... [ 1492.114065][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805534a800: rx timeout, send abort [ 1492.626938][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805534a800: abort rx timeout. Force session deactivation [ 1492.910823][ T5897] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1493.469078][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1493.476777][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.491636][ T5897] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1493.525319][ T5897] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1493.722904][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.025548][ T5897] usb 7-1: Product: syz [ 1494.038377][ T5897] usb 7-1: Manufacturer: syz [ 1494.059116][ T5897] usb 7-1: SerialNumber: syz [ 1494.087662][ T5897] usb 7-1: config 0 descriptor?? [ 1494.105932][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.120068][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.332829][T11861] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.462420][T15202] chnl_net:caif_netlink_parms(): no params data found [ 1494.728289][T11861] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.586170][ T978] usb 7-1: USB disconnect, device number 8 [ 1496.259461][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.495288][T11861] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.645899][T15332] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1497.653751][T15332] UDF-fs: Scanning with blocksize 512 failed [ 1497.794535][T15332] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1497.802553][T15332] UDF-fs: Scanning with blocksize 1024 failed [ 1497.828997][T15332] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1497.836585][T15332] UDF-fs: Scanning with blocksize 2048 failed [ 1497.855707][T15332] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1497.863335][T15332] UDF-fs: Scanning with blocksize 4096 failed [ 1498.157034][T15207] chnl_net:caif_netlink_parms(): no params data found [ 1498.495413][T15343] loop7: detected capacity change from 0 to 16 [ 1498.506681][T15343] erofs: Unknown parameter '01777777777777777777777000000000000000000000000000000000000000000000000000000000000000000' [ 1498.872826][T11861] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.561834][T15348] loop0: detected capacity change from 0 to 2048 [ 1499.641690][T15348] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1499.783488][T15354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.404635][T15353] loop1: detected capacity change from 0 to 2048 [ 1500.738876][T15353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1503.857758][T15202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.890342][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.339406][T15202] bridge_slave_0: entered allmulticast mode [ 1504.399484][T15202] bridge_slave_0: entered promiscuous mode [ 1504.559135][ T975] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1505.121732][ T975] usb 7-1: Using ep0 maxpacket: 32 [ 1505.131206][ T975] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.146948][ T975] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1505.435995][ T975] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1505.706505][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.746638][ T975] usb 7-1: Product: syz [ 1505.779628][ T975] usb 7-1: Manufacturer: syz [ 1505.784301][ T975] usb 7-1: SerialNumber: syz [ 1506.813685][ T975] usb 7-1: config 0 descriptor?? [ 1506.949354][ T9700] usb 7-1: USB disconnect, device number 9 [ 1507.032639][T15202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.052395][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.072506][T15202] bridge_slave_1: entered allmulticast mode [ 1507.130105][T15202] bridge_slave_1: entered promiscuous mode [ 1507.251357][T15207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.279909][T15207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.287312][T15207] bridge_slave_0: entered allmulticast mode [ 1507.324305][T15207] bridge_slave_0: entered promiscuous mode [ 1507.409648][T15202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.439364][T15207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.446687][T15207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.477632][T15207] bridge_slave_1: entered allmulticast mode [ 1507.496178][T15207] bridge_slave_1: entered promiscuous mode [ 1507.626113][T15202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.379318][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1508.477465][T15423] loop7: detected capacity change from 0 to 164 [ 1508.712097][T15423] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1508.766786][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 1508.939035][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.074044][T11861] bridge_slave_1: left allmulticast mode [ 1509.087769][T11861] bridge_slave_1: left promiscuous mode [ 1509.107520][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.136616][T11861] bridge_slave_0: left allmulticast mode [ 1509.142495][T11861] bridge_slave_0: left promiscuous mode [ 1509.148577][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.178182][T11861] bridge_slave_1: left allmulticast mode [ 1509.187446][T11861] bridge_slave_1: left promiscuous mode [ 1509.198083][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.212500][T11861] bridge_slave_0: left allmulticast mode [ 1509.221571][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1509.231550][T11861] bridge_slave_0: left promiscuous mode [ 1509.238054][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.248328][ T5889] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1509.257573][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.270398][ T5889] usb 1-1: Product: syz [ 1509.280645][ T5889] usb 1-1: Manufacturer: syz [ 1509.288462][T11861] bridge_slave_1: left allmulticast mode [ 1509.294339][ T5889] usb 1-1: SerialNumber: syz [ 1509.300613][T11861] bridge_slave_1: left promiscuous mode [ 1509.309009][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.593523][T11861] bridge_slave_0: left allmulticast mode [ 1509.617720][T11861] bridge_slave_0: left promiscuous mode [ 1509.628464][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.011279][ T5889] usb 1-1: config 0 descriptor?? [ 1510.019118][T11861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.240731][ T5897] usb 1-1: USB disconnect, device number 5 [ 1513.124192][T11861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.148702][T11861] bond0 (unregistering): Released all slaves [ 1515.637165][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1778'. [ 1517.096368][T11861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.256994][T11861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.330229][T11861] bond0 (unregistering): Released all slaves [ 1517.607042][T15457] loop0: detected capacity change from 0 to 2048 [ 1518.649432][T15457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1522.341786][T15494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1524.777390][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 1528.171250][ T5918] IPVS: starting estimator thread 0... [ 1528.319169][T15521] IPVS: using max 21 ests per chain, 50400 per kthread [ 1529.182160][T11861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.196556][T11861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.206810][T11861] bond0 (unregistering): Released all slaves [ 1529.256404][T15207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1529.271281][T15202] team0: Port device team_slave_0 added [ 1529.286277][T15202] team0: Port device team_slave_1 added [ 1529.306043][T15207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.424337][T15202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.431745][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.457698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.466606][T15202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.551945][T15202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.565236][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.591216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.598787][T15202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.623106][T15207] team0: Port device team_slave_0 added [ 1529.668714][T15207] team0: Port device team_slave_1 added [ 1529.835661][T15202] hsr_slave_0: entered promiscuous mode [ 1529.846803][T15202] hsr_slave_1: entered promiscuous mode [ 1529.855394][T15202] debugfs: 'hsr0' already exists in 'hsr' [ 1529.861436][T15202] Cannot create hsr debugfs directory [ 1529.873177][T15207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.882634][T15207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.908612][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.917168][T15207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.936190][T15207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.943507][T15207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.970621][T15207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.993536][T11861] hsr_slave_0: left promiscuous mode [ 1530.000653][T11861] hsr_slave_1: left promiscuous mode [ 1530.006820][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.016349][T11861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.025932][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.034351][T11861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.062104][T11861] veth1_macvtap: left promiscuous mode [ 1530.067673][T11861] veth0_macvtap: left promiscuous mode [ 1530.075891][T11861] veth1_vlan: left promiscuous mode [ 1530.081271][T11861] veth0_vlan: left promiscuous mode [ 1530.198989][T11861] team0 (unregistering): Port device team_slave_1 removed [ 1530.235861][T11861] team0 (unregistering): Port device team_slave_0 removed [ 1530.812126][T11861] team0 (unregistering): Port device team_slave_1 removed [ 1530.844662][T11861] team0 (unregistering): Port device team_slave_0 removed [ 1531.298314][T15207] hsr_slave_0: entered promiscuous mode [ 1531.305499][T15207] hsr_slave_1: entered promiscuous mode [ 1531.312037][T15207] debugfs: 'hsr0' already exists in 'hsr' [ 1531.317774][T15207] Cannot create hsr debugfs directory [ 1532.455922][T15202] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1532.477989][T15202] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1532.490816][T15202] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1532.528439][T15202] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1532.627459][T15207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1532.647780][T15207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1532.663340][T15207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1532.696412][T15207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1532.801837][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.844367][T15202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.875720][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.882953][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.908525][T15207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.935133][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.942352][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.990802][T15207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.027564][T10706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.034748][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.059647][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.066802][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.565677][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.696171][T15207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.813926][T15207] veth0_vlan: entered promiscuous mode [ 1533.850360][T15207] veth1_vlan: entered promiscuous mode [ 1533.932978][T15207] veth0_macvtap: entered promiscuous mode [ 1533.963595][T15207] veth1_macvtap: entered promiscuous mode [ 1534.007358][T15207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.051904][T15207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.102327][ T7311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.122321][ T7311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.134242][ T7311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.145878][ T7311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.320335][ T7322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.328314][ T7322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.358795][T15202] veth0_vlan: entered promiscuous mode [ 1534.404983][T15202] veth1_vlan: entered promiscuous mode [ 1534.437789][ T7322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.455603][ T7322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.537473][T15202] veth0_macvtap: entered promiscuous mode [ 1534.568459][T15202] veth1_macvtap: entered promiscuous mode [ 1534.625376][T15202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.036993][T15202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1535.885960][T15630] loop6: detected capacity change from 0 to 128 [ 1536.498426][ T5968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.523756][ T5968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.718426][ T5968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.029317][ T5968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.051872][T10706] bio_check_eod: 176 callbacks suppressed [ 1538.051898][T10706] kworker/u8:0: attempt to access beyond end of device [ 1538.051898][T10706] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1538.511820][T15648] loop0: detected capacity change from 0 to 128 [ 1539.392992][T15655] loop6: detected capacity change from 0 to 64 [ 1542.329340][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 1546.680444][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1546.709380][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1546.737201][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1546.771394][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1546.789839][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1548.889385][ T5826] Bluetooth: hci4: command tx timeout [ 1551.339053][ T5826] Bluetooth: hci4: command tx timeout [ 1551.483552][ T6023] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.305955][T15733] loop7: detected capacity change from 0 to 128 [ 1553.362354][ T6023] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.379392][ T5826] Bluetooth: hci4: command tx timeout [ 1553.708164][T15737] loop3: detected capacity change from 0 to 32768 [ 1554.099884][T15737] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1554.540545][ T30] audit: type=1800 audit(2000000187.949:146): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1819" name="file2" dev="loop7" ino=1048900 res=0 errno=0 [ 1555.262222][T15746] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 1555.271470][T15746] FAT-fs (loop7): Filesystem has been set read-only [ 1555.459015][ T5826] Bluetooth: hci4: command tx timeout [ 1555.535431][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.541934][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.622005][T15207] ocfs2: Unmounting device (7,3) on (node local) [ 1556.639064][ T30] audit: type=1326 audit(2000000190.039:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.124666][ T6023] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.149246][ T30] audit: type=1326 audit(2000000190.039:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.171648][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.250211][ T30] audit: type=1326 audit(2000000190.039:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.272606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1558.519533][ T30] audit: type=1326 audit(2000000190.039:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.673464][T15773] loop0: detected capacity change from 0 to 512 [ 1558.684753][ T30] audit: type=1326 audit(2000000190.039:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.695234][ T6023] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.757586][T15773] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1558.824230][ T30] audit: type=1326 audit(2000000190.039:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1558.875501][T15773] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1558.907617][T15681] chnl_net:caif_netlink_parms(): no params data found [ 1558.958440][T15773] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:516: comm syz.0.1828: Block bitmap for bg 0 marked uninitialized [ 1559.018252][ T30] audit: type=1326 audit(2000000190.039:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1559.097948][T15773] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1559.123143][ T30] audit: type=1326 audit(2000000190.039:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1559.157284][T15773] EXT4-fs (loop0): 1 orphan inode deleted [ 1559.179735][T15773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1559.209904][ T30] audit: type=1326 audit(2000000190.049:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6f0b8eec9 code=0x7ffc0000 [ 1559.271700][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1559.285986][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1559.295481][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1559.314908][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1559.324050][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1560.543529][T13496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.151469][ T5826] Bluetooth: hci1: command tx timeout [ 1562.585754][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.593417][T15681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.620392][T15681] bridge_slave_0: entered allmulticast mode [ 1562.671536][T15681] bridge_slave_0: entered promiscuous mode [ 1562.739751][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.746948][T15681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.869375][T15681] bridge_slave_1: entered allmulticast mode [ 1562.909323][T15681] bridge_slave_1: entered promiscuous mode [ 1563.910342][ T6023] bridge_slave_1: left allmulticast mode [ 1563.916082][ T6023] bridge_slave_1: left promiscuous mode [ 1563.939401][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.249207][ T5826] Bluetooth: hci1: command tx timeout [ 1564.886988][ T6023] bridge_slave_0: left allmulticast mode [ 1564.933306][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1564.951720][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1564.962289][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1564.969131][ T6023] bridge_slave_0: left promiscuous mode [ 1564.975104][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.988150][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1564.997085][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1565.872339][T15827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.355499][ T5826] Bluetooth: hci1: command tx timeout [ 1567.159046][ T5826] Bluetooth: hci5: command tx timeout [ 1568.519002][ T5826] Bluetooth: hci1: command tx timeout [ 1569.405991][ T5829] Bluetooth: hci5: command tx timeout [ 1571.479136][ T5829] Bluetooth: hci5: command tx timeout [ 1571.583306][T15852] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1571.819814][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.868671][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.912295][ T6023] bond0 (unregistering): Released all slaves [ 1572.817270][T15859] comedi comedi3: comedi_config --init_data is deprecated [ 1572.887158][T15681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.910508][T15856] loop0: detected capacity change from 0 to 1024 [ 1572.945793][T15681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.599102][ T5829] Bluetooth: hci5: command tx timeout [ 1578.187249][T15871] lo speed is unknown, defaulting to 1000 [ 1578.193849][T15871] lo speed is unknown, defaulting to 1000 [ 1578.203755][T15871] lo speed is unknown, defaulting to 1000 [ 1578.216159][T15871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1578.235089][T15871] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1578.276464][T15871] lo speed is unknown, defaulting to 1000 [ 1578.289295][T15871] lo speed is unknown, defaulting to 1000 [ 1578.297096][T15871] lo speed is unknown, defaulting to 1000 [ 1578.306207][T15871] lo speed is unknown, defaulting to 1000 [ 1578.314068][T15871] lo speed is unknown, defaulting to 1000 [ 1578.323166][T15871] lo speed is unknown, defaulting to 1000 [ 1578.330992][T15871] lo speed is unknown, defaulting to 1000 [ 1578.639288][ T6023] hsr_slave_0: left promiscuous mode [ 1578.662978][ T6023] hsr_slave_1: left promiscuous mode [ 1578.670470][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.677872][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.716378][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.725897][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.798120][ T6023] veth1_macvtap: left promiscuous mode [ 1578.804411][ T6023] veth0_macvtap: left promiscuous mode [ 1578.815004][ T6023] veth1_vlan: left promiscuous mode [ 1578.821014][ T6023] veth0_vlan: left promiscuous mode [ 1580.306560][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 1580.362938][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 1580.857084][T15681] team0: Port device team_slave_0 added [ 1580.890854][T15681] team0: Port device team_slave_1 added [ 1580.942823][T15818] lo speed is unknown, defaulting to 1000 [ 1581.140460][T15681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.147455][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.176519][T15681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.236565][T15681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.244393][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1581.271966][T15681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.447554][T15681] hsr_slave_0: entered promiscuous mode [ 1581.454621][T15681] hsr_slave_1: entered promiscuous mode [ 1581.465083][T15681] debugfs: 'hsr0' already exists in 'hsr' [ 1581.471842][T15681] Cannot create hsr debugfs directory [ 1581.529549][T15778] chnl_net:caif_netlink_parms(): no params data found [ 1581.795594][ T6023] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.931548][ T6023] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.948071][T15778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.960098][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.967345][T15778] bridge_slave_0: entered allmulticast mode [ 1581.979004][T15778] bridge_slave_0: entered promiscuous mode [ 1582.074715][ T6023] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.100950][T15778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.109645][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.116883][T15778] bridge_slave_1: entered allmulticast mode [ 1582.125691][T15778] bridge_slave_1: entered promiscuous mode [ 1582.216649][ T6023] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.301324][T15778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1582.321786][T15778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.446407][T15818] chnl_net:caif_netlink_parms(): no params data found [ 1582.480819][T15778] team0: Port device team_slave_0 added [ 1582.536853][T15778] team0: Port device team_slave_1 added [ 1582.701646][T15778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.710796][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.738228][T15778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.751495][T15778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.758454][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.784648][T15778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.078737][ T6023] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.151608][T15778] hsr_slave_0: entered promiscuous mode [ 1583.158596][T15778] hsr_slave_1: entered promiscuous mode [ 1583.170411][T15778] debugfs: 'hsr0' already exists in 'hsr' [ 1583.176188][T15778] Cannot create hsr debugfs directory [ 1583.205047][T15818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.221990][T15818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.232235][T15818] bridge_slave_0: entered allmulticast mode [ 1583.241394][T15818] bridge_slave_0: entered promiscuous mode [ 1583.272096][ T6023] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.317733][T15818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.325219][T15818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.332755][T15818] bridge_slave_1: entered allmulticast mode [ 1583.344593][T15818] bridge_slave_1: entered promiscuous mode [ 1583.395143][ T6023] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.527571][T15818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.561092][ T6023] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.623287][T15818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1583.733482][T15681] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1583.766161][T15818] team0: Port device team_slave_0 added [ 1583.792417][T15681] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1583.806962][T15681] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1583.832345][T15818] team0: Port device team_slave_1 added [ 1583.857977][T15681] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1584.013709][T15818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.021998][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.052895][T15818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.066887][T15818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.074803][T15818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.102171][T15818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.175106][ T6023] bridge_slave_1: left allmulticast mode [ 1584.185357][ T6023] bridge_slave_1: left promiscuous mode [ 1584.192586][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.203699][ T6023] bridge_slave_0: left allmulticast mode [ 1584.211179][ T6023] bridge_slave_0: left promiscuous mode [ 1584.217024][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.232593][ T6023] bridge_slave_1: left allmulticast mode [ 1584.242576][ T6023] bridge_slave_1: left promiscuous mode [ 1584.248406][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.264459][ T6023] bridge_slave_0: left allmulticast mode [ 1584.271484][ T6023] bridge_slave_0: left promiscuous mode [ 1584.277304][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.887480][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.901579][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.921615][ T6023] bond0 (unregistering): Released all slaves [ 1585.385538][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1585.398459][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1585.410857][ T6023] bond0 (unregistering): Released all slaves [ 1585.840496][T15818] hsr_slave_0: entered promiscuous mode [ 1585.847588][T15818] hsr_slave_1: entered promiscuous mode [ 1585.860161][T15818] debugfs: 'hsr0' already exists in 'hsr' [ 1585.870139][T15818] Cannot create hsr debugfs directory [ 1586.317985][ T6023] hsr_slave_0: left promiscuous mode [ 1586.324424][ T6023] hsr_slave_1: left promiscuous mode [ 1586.336423][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.344042][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.352575][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.360750][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.381753][ T6023] hsr_slave_0: left promiscuous mode [ 1586.387858][ T6023] hsr_slave_1: left promiscuous mode [ 1586.394989][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.402555][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.415926][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1586.423440][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.460130][ T6023] veth1_macvtap: left promiscuous mode [ 1586.465687][ T6023] veth0_macvtap: left promiscuous mode [ 1586.471495][ T6023] veth1_vlan: left promiscuous mode [ 1586.476824][ T6023] veth0_vlan: left promiscuous mode [ 1586.483611][ T6023] veth1_macvtap: left promiscuous mode [ 1586.490175][ T6023] veth0_macvtap: left promiscuous mode [ 1586.496475][ T6023] veth1_vlan: left promiscuous mode [ 1586.502183][ T6023] veth0_vlan: left promiscuous mode [ 1587.066570][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 1587.118090][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 1587.857526][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 1587.897561][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 1588.427936][T15681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.455182][T15778] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1588.501059][T15778] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1588.513754][T15778] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1588.565031][T15778] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1588.600483][T15681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.625305][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.632701][T11861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.661759][T11861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.669015][T11861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.996597][T15778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.055237][T15778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.156574][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.163806][T11861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.260619][T11861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.267831][T11861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.379497][T15818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1589.476365][T15818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1589.493909][T15818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1589.541838][T15681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.562550][T15818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1589.825716][T15818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.888721][T15818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.933194][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.940459][T11861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.993538][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.000774][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.187812][T15778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.294585][T15681] veth0_vlan: entered promiscuous mode [ 1590.326579][T15681] veth1_vlan: entered promiscuous mode [ 1590.432608][T15681] veth0_macvtap: entered promiscuous mode [ 1590.461422][T15681] veth1_macvtap: entered promiscuous mode [ 1590.521513][T15681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.554994][T15681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.610731][T11861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.633647][T11861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.698103][T11861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.734852][T11861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.866623][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.913800][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.944939][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.025961][T10707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.040672][T10707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.178648][T15778] veth0_vlan: entered promiscuous mode [ 1591.254216][T15818] veth0_vlan: entered promiscuous mode [ 1591.291527][T15778] veth1_vlan: entered promiscuous mode [ 1592.812783][T15818] veth1_vlan: entered promiscuous mode [ 1594.358890][T15778] veth0_macvtap: entered promiscuous mode [ 1594.389284][T15778] veth1_macvtap: entered promiscuous mode [ 1594.529545][T15818] veth0_macvtap: entered promiscuous mode [ 1594.665715][T15778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.622262][T15818] veth1_macvtap: entered promiscuous mode [ 1595.911197][T15778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.995499][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.016598][T16114] loop0: detected capacity change from 0 to 2048 [ 1597.145610][T16114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1598.495516][ T7311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.539210][ T7311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.548008][ T7311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.361572][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.369074][ T7311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.515383][ T7311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.546868][T10706] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.574942][T10706] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.600540][T10706] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.317114][T16134] loop0: detected capacity change from 0 to 1024 [ 1601.343815][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.380080][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.137978][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.146373][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.071631][T16155] loop7: detected capacity change from 0 to 2 [ 1603.088724][T16155] jffs2: rp_size unrepresentable [ 1603.971589][T10706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.999001][T10706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.368044][T16158] loop0: detected capacity change from 0 to 32768 [ 1604.444912][T16158] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1604.464432][T10706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.492831][T16158] XFS (loop0): totally zeroed log [ 1604.498296][T16158] XFS (loop0): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 1604.518649][T16158] XFS (loop0): log mount/recovery failed: error -22 [ 1604.532456][T16158] XFS (loop0): log mount failed [ 1604.729993][T10706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.897573][T16194] loop2: detected capacity change from 0 to 64 [ 1608.480173][T16194] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 1608.480173][T16194] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 1609.969209][T16202] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1610.027637][T16202] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1615.938149][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1615.938174][ T30] audit: type=1326 audit(2000000249.589:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1616.278538][T16217] loop7: detected capacity change from 0 to 2048 [ 1617.330469][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.347233][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.499125][ T30] audit: type=1326 audit(2000000249.589:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1617.604683][ T30] audit: type=1326 audit(2000000249.589:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1617.754468][T16217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1618.106039][ T30] audit: type=1326 audit(2000000249.589:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1619.139949][ T30] audit: type=1326 audit(2000000249.589:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1620.407524][T16253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1881'. [ 1620.808500][ T30] audit: type=1326 audit(2000000249.589:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1621.002571][ T30] audit: type=1326 audit(2000000249.599:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1621.376546][T16263] loop5: detected capacity change from 0 to 22 [ 1621.392268][T16263] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1622.162460][T16263] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1622.198809][ T30] audit: type=1326 audit(2000000249.599:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1622.470221][ T30] audit: type=1326 audit(2000000249.599:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1623.179039][ T30] audit: type=1326 audit(2000000249.599:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1623.263424][ T30] audit: type=1326 audit(2000000249.599:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1623.354809][ T30] audit: type=1326 audit(2000000249.599:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1623.378969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.466493][ T30] audit: type=1326 audit(2000000249.599:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1624.492658][ T5826] Bluetooth: hci7: command 0x0406 tx timeout [ 1624.534123][ T30] audit: type=1326 audit(2000000249.599:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16220 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe38eec9 code=0x7ffc0000 [ 1630.217411][T16300] loop3: detected capacity change from 0 to 256 [ 1630.422127][T16304] loop5: detected capacity change from 0 to 1024 [ 1630.467440][T16304] EXT4-fs: Ignoring removed i_version option [ 1630.496673][T16304] EXT4-fs: inline encryption not supported [ 1630.515626][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1891'. [ 1630.565922][T16304] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1630.691855][T16304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.995940][T16310] loop7: detected capacity change from 0 to 2048 [ 1632.830592][T15681] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1633.770629][T16310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1639.759040][ T978] IPVS: starting estimator thread 0... [ 1639.859002][T16355] IPVS: using max 23 ests per chain, 55200 per kthread [ 1642.048704][T16369] loop3: detected capacity change from 0 to 2048 [ 1642.097755][T16369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1642.210342][T16371] loop2: detected capacity change from 0 to 1024 [ 1643.401345][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1643.412978][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1643.427244][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1643.504803][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1643.584847][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1645.459061][T16377] lo speed is unknown, defaulting to 1000 [ 1645.693261][ T5829] Bluetooth: hci3: command tx timeout [ 1646.481994][T16395] loop7: detected capacity change from 0 to 2048 [ 1646.542581][T16395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1647.814398][ T5829] Bluetooth: hci3: command tx timeout [ 1648.558528][T16401] loop5: detected capacity change from 0 to 512 [ 1649.176160][T16401] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 1649.181783][ T6053] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.853063][ T5826] Bluetooth: hci3: command tx timeout [ 1650.409687][T16421] loop7: detected capacity change from 0 to 1024 [ 1650.458429][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 1651.675358][ T6053] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.987697][ T5826] Bluetooth: hci3: command tx timeout [ 1652.085268][T16421] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 1652.149919][T16421] hfsplus: failed to load root directory [ 1652.313240][T16436] loop2: detected capacity change from 0 to 512 [ 1652.419020][T16436] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1652.518170][T16436] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1652.571246][ T6053] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.582972][T16436] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:516: comm syz.2.1920: Block bitmap for bg 0 marked uninitialized [ 1652.967119][T16436] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1654.633099][ T6053] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.720878][T16436] EXT4-fs (loop2): 1 orphan inode deleted [ 1654.728718][T16436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1656.646134][T16457] loop3: detected capacity change from 0 to 2048 [ 1656.688387][T15818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.728045][T16457] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1658.792255][T16377] chnl_net:caif_netlink_parms(): no params data found [ 1659.890855][ T6053] bridge_slave_1: left allmulticast mode [ 1659.896551][ T6053] bridge_slave_1: left promiscuous mode [ 1659.921079][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.042990][ T6053] bridge_slave_0: left allmulticast mode [ 1660.089074][ T6053] bridge_slave_0: left promiscuous mode [ 1660.140279][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.572575][T16495] netlink: 'syz.2.1932': attribute type 7 has an invalid length. [ 1664.841650][T16504] loop0: detected capacity change from 0 to 64 [ 1666.464690][T16515] loop3: detected capacity change from 0 to 1024 [ 1666.557836][T16515] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 1666.608334][T16515] hfsplus: failed to load root directory [ 1668.763741][T16515] input: syz1 as /devices/virtual/input/input8 [ 1669.459667][T16532] sctp: [Deprecated]: syz.0.1940 (pid 16532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1669.459667][T16532] Use struct sctp_sack_info instead [ 1671.702518][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 1671.735994][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 1674.193791][T16557] loop3: detected capacity change from 0 to 2048 [ 1674.386398][T16557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1676.290776][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 1677.034820][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1677.140509][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1677.180805][ T6053] bond0 (unregistering): Released all slaves [ 1678.506536][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.513115][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1680.233241][ T5918] IPVS: starting estimator thread 0... [ 1680.360957][T16599] IPVS: using max 21 ests per chain, 50400 per kthread [ 1680.460317][T16598] sctp: [Deprecated]: syz.2.1957 (pid 16598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1680.460317][T16598] Use struct sctp_sack_info instead [ 1683.952704][T16619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1684.215205][T16619] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1685.983187][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1686.052397][T16619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1686.086722][T16619] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1686.106603][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.155293][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.163110][T16377] bridge_slave_0: entered allmulticast mode [ 1686.190120][T16377] bridge_slave_0: entered promiscuous mode [ 1686.231836][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.269183][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.294892][T16377] bridge_slave_1: entered allmulticast mode [ 1686.362958][T16377] bridge_slave_1: entered promiscuous mode [ 1687.354008][T16619] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1687.410232][T16619] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1687.497483][T16619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1687.519051][T16619] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1687.566220][T16619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1687.576966][T16619] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1688.162365][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.172102][T16619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1688.182761][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.204904][T16641] loop7: detected capacity change from 0 to 2048 [ 1688.213202][T16619] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1688.351150][T16377] team0: Port device team_slave_0 added [ 1688.390576][T16570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1688.427292][T16570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1688.441493][T16570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.452953][T16570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.464826][T16570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1688.478381][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1688.508138][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1688.518250][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.533220][T16641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.533473][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.554129][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1689.902979][T16377] team0: Port device team_slave_1 added [ 1690.649670][ T5826] Bluetooth: hci1: command tx timeout [ 1690.679785][ T6053] hsr_slave_0: left promiscuous mode [ 1690.736704][ T6053] hsr_slave_1: left promiscuous mode [ 1690.753032][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1690.789039][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1690.829363][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.058248][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.744966][T16670] sctp: [Deprecated]: syz.3.1971 (pid 16670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1691.744966][T16670] Use struct sctp_sack_info instead [ 1691.938394][ T6053] veth1_macvtap: left promiscuous mode [ 1691.961982][ T6053] veth0_macvtap: left promiscuous mode [ 1691.976889][ T6053] veth1_vlan: left promiscuous mode [ 1691.984366][ T6053] veth0_vlan: left promiscuous mode [ 1692.799111][ T5826] Bluetooth: hci1: command tx timeout [ 1693.327712][T13418] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1695.058670][ T5826] Bluetooth: hci1: command tx timeout [ 1695.413914][T13418] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1695.469012][T13418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.477100][T13418] usb 3-1: Product: syz [ 1695.497147][T13418] usb 3-1: Manufacturer: syz [ 1695.510891][T13418] usb 3-1: can't set config #1, error -71 [ 1695.518503][T13418] usb 3-1: USB disconnect, device number 2 [ 1695.594822][T16688] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1695.718064][T16570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1695.737997][T16570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1695.754315][T16570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1696.013602][T16570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1696.025292][T16570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1699.140181][T16570] Bluetooth: hci1: command tx timeout [ 1699.148653][T16570] Bluetooth: hci4: command tx timeout [ 1701.219364][ T5826] Bluetooth: hci4: command tx timeout [ 1701.696791][T16712] loop0: detected capacity change from 0 to 2048 [ 1701.733903][T16712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1702.307922][T16714] loop2: detected capacity change from 0 to 65536 [ 1702.321506][T16714] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1702.560300][T16714] XFS (loop2): Ending clean mount [ 1703.145332][T15818] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1703.289109][ T5826] Bluetooth: hci4: command tx timeout [ 1704.105100][T16735] loop2: detected capacity change from 0 to 40427 [ 1704.160905][T16735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1704.169171][T16735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1704.181233][T16735] F2FS-fs (loop2): invalid crc value [ 1704.306331][T16735] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1704.319561][T16735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1704.326732][T16735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1705.392096][ T5826] Bluetooth: hci4: command tx timeout [ 1706.846103][ T7318] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1708.158114][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1708.495890][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1708.813486][ T5826] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1715.065335][T16785] Unsupported ieee802154 address type: 0 [ 1716.076738][T16621] lo speed is unknown, defaulting to 1000 [ 1717.012077][T16692] lo speed is unknown, defaulting to 1000 [ 1717.307617][T16803] loop0: detected capacity change from 0 to 2048 [ 1717.323813][T16803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1718.482856][T16814] Invalid ELF header magic: != ELF [ 1719.048155][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 1719.076811][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 1719.227840][T16808] ceph: No mds server is up or the cluster is laggy [ 1719.905730][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 1719.968822][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 1720.043572][T16822] loop7: detected capacity change from 0 to 1024 [ 1721.146531][T16621] chnl_net:caif_netlink_parms(): no params data found [ 1721.940281][T16843] loop2: detected capacity change from 0 to 2048 [ 1721.954634][T16843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1724.688425][T16864] loop0: detected capacity change from 0 to 512 [ 1727.480530][T16877] loop2: detected capacity change from 0 to 512 [ 1727.488031][T16877] EXT4-fs: Ignoring removed oldalloc option [ 1727.536913][T16877] EXT4-fs: Mount option(s) incompatible with ext2 [ 1727.951223][ T6053] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.178642][T16886] overlayfs: failed to resolve './file1': -2 [ 1730.355488][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 1734.456457][ T6053] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.715454][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.723530][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.734223][T16621] bridge_slave_0: entered allmulticast mode [ 1734.743594][T16621] bridge_slave_0: entered promiscuous mode [ 1734.752489][T16692] chnl_net:caif_netlink_parms(): no params data found [ 1734.773871][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.783853][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.791245][T16621] bridge_slave_1: entered allmulticast mode [ 1734.799655][T16621] bridge_slave_1: entered promiscuous mode [ 1734.827349][ T6053] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.938438][ T6053] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.956888][T16621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.972799][T16621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.024829][T16621] team0: Port device team_slave_0 added [ 1735.058792][T16621] team0: Port device team_slave_1 added [ 1735.099265][T16692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.106524][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.114592][T16692] bridge_slave_0: entered allmulticast mode [ 1735.124201][T16692] bridge_slave_0: entered promiscuous mode [ 1735.178006][T16692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.186754][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.195759][T16692] bridge_slave_1: entered allmulticast mode [ 1735.204578][T16692] bridge_slave_1: entered promiscuous mode [ 1735.212782][T16621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1735.221522][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.249115][T16621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1735.262544][T16621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1735.269753][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1735.296628][T16621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.391188][T16692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.402445][ T6053] bridge_slave_1: left allmulticast mode [ 1735.408114][ T6053] bridge_slave_1: left promiscuous mode [ 1735.414164][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.424066][ T6053] bridge_slave_0: left allmulticast mode [ 1735.429891][ T6053] bridge_slave_0: left promiscuous mode [ 1735.435636][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.452020][ T6053] bridge_slave_1: left allmulticast mode [ 1735.457702][ T6053] bridge_slave_1: left promiscuous mode [ 1735.463930][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.474508][ T6053] bridge_slave_0: left allmulticast mode [ 1735.480722][ T6053] bridge_slave_0: left promiscuous mode [ 1735.487994][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.637099][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.648367][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.658980][ T6053] bond0 (unregistering): Released all slaves [ 1735.941271][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1735.952948][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.964269][ T6053] bond0 (unregistering): Released all slaves [ 1735.998014][T16692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.077100][T16621] hsr_slave_0: entered promiscuous mode [ 1736.088523][T16621] hsr_slave_1: entered promiscuous mode [ 1736.162472][T16692] team0: Port device team_slave_0 added [ 1736.172512][T16692] team0: Port device team_slave_1 added [ 1736.299958][T16692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.308019][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.335102][T16692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.349328][T16692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.356334][T16692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.383498][T16692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.458432][ T6053] hsr_slave_0: left promiscuous mode [ 1736.466851][ T6053] hsr_slave_1: left promiscuous mode [ 1736.473851][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.482370][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.491427][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.498817][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.521021][ T6053] veth1_macvtap: left promiscuous mode [ 1736.526577][ T6053] veth0_macvtap: left promiscuous mode [ 1736.532505][ T6053] veth1_vlan: left promiscuous mode [ 1736.537832][ T6053] veth0_vlan: left promiscuous mode [ 1736.671285][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1736.700846][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1737.202076][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1737.244013][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1737.716561][T16692] hsr_slave_0: entered promiscuous mode [ 1737.723459][T16692] hsr_slave_1: entered promiscuous mode [ 1737.730262][T16692] debugfs: 'hsr0' already exists in 'hsr' [ 1737.737341][T16692] Cannot create hsr debugfs directory [ 1738.926749][T16570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1738.939855][T16570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1738.948786][T16570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1738.960272][T16570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1738.970264][T16570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1738.996886][T16692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1739.009697][T16692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1739.023149][T16692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1739.036965][T16692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1739.055955][ T6053] bridge_slave_1: left allmulticast mode [ 1739.062076][ T6053] bridge_slave_1: left promiscuous mode [ 1739.069984][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.079844][ T6053] bridge_slave_0: left allmulticast mode [ 1739.086190][ T6053] bridge_slave_0: left promiscuous mode [ 1739.092221][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.206401][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.218162][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.228326][ T6053] bond0 (unregistering): Released all slaves [ 1739.296197][T16915] lo speed is unknown, defaulting to 1000 [ 1739.373741][ T6053] hsr_slave_0: left promiscuous mode [ 1739.381714][ T6053] hsr_slave_1: left promiscuous mode [ 1739.387879][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1739.396677][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1739.571463][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1739.606041][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1739.860342][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.866715][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.034397][T16692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.073799][T16915] chnl_net:caif_netlink_parms(): no params data found [ 1740.107870][T16692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1740.138032][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.145239][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1740.199766][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.206931][T11869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.287723][T16915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.296714][T16915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.304147][T16915] bridge_slave_0: entered allmulticast mode [ 1740.313657][T16915] bridge_slave_0: entered promiscuous mode [ 1740.323087][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.330892][T16915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.338197][T16915] bridge_slave_1: entered allmulticast mode [ 1740.346623][T16915] bridge_slave_1: entered promiscuous mode [ 1740.425550][T16915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.444361][T16915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.504328][T16915] team0: Port device team_slave_0 added [ 1740.517859][T16915] team0: Port device team_slave_1 added [ 1740.573585][T16915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.581840][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.609409][T16915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.632443][T16915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.639585][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.667264][T16915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.766705][T16915] hsr_slave_0: entered promiscuous mode [ 1740.775497][T16915] hsr_slave_1: entered promiscuous mode [ 1741.051054][T16570] Bluetooth: hci1: command tx timeout [ 1741.124094][T16915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1741.154268][T16915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1741.185182][T16915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1741.202741][T16915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1741.269161][T16692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1741.405901][T16915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.434728][T16915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.452028][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.459197][T11869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.496461][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.503643][T11869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1741.968020][T16692] veth0_vlan: entered promiscuous mode [ 1741.989722][T16692] veth1_vlan: entered promiscuous mode [ 1742.014601][T16915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.075692][T16692] veth0_macvtap: entered promiscuous mode [ 1742.105809][T16692] veth1_macvtap: entered promiscuous mode [ 1742.143760][T16692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.176893][T16692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.212871][T16878] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.231132][T16878] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.270765][T16878] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.292219][T16878] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.440508][T16878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.468776][T16878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.523951][ T7306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.544650][ T7306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.823440][T16990] random: crng reseeded on system resumption [ 1743.131611][T16570] Bluetooth: hci1: command tx timeout [ 1743.661266][T16994] tipc: Can't bind to reserved service type 0 [ 1744.839090][T16915] veth0_vlan: entered promiscuous mode [ 1745.094736][T16915] veth1_vlan: entered promiscuous mode [ 1745.212617][T16570] Bluetooth: hci1: command tx timeout [ 1745.260764][T16915] veth0_macvtap: entered promiscuous mode [ 1745.337389][T16915] veth1_macvtap: entered promiscuous mode [ 1745.461025][T16915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.513110][T16915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.602323][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.654223][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.038316][ T7322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.047868][T16570] Bluetooth: hci1: command tx timeout [ 1749.045866][ T7322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.678063][T17035] loop3: detected capacity change from 0 to 1024 [ 1750.714705][T17035] EXT4-fs: Ignoring removed i_version option [ 1750.749218][T17035] EXT4-fs: inline encryption not supported [ 1750.793175][T17035] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1751.008672][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.041001][T17035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1751.290963][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.947482][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1753.128895][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1753.578257][T17052] Bluetooth: MGMT ver 1.23 [ 1755.300929][T15207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.867455][T17060] random: crng reseeded on system resumption [ 1758.156290][T17081] loop4: detected capacity change from 0 to 2 [ 1758.166982][T17081] jffs2: rp_size unrepresentable [ 1758.323905][T17084] loop4: detected capacity change from 0 to 2048 [ 1758.333012][T17084] nilfs2: Unknown parameter 'RDdf' [ 1759.340171][T17029] udevd[17029]: incorrect nilfs2 checksum on /dev/loop4 [ 1761.022487][T17097] loop4: detected capacity change from 0 to 2048 [ 1761.093267][T17100] trusted_key: syz.9.2041 sent an empty control message without MSG_MORE. [ 1761.311626][T17097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1764.400685][T17123] loop3: detected capacity change from 0 to 2048 [ 1764.414313][T17123] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1765.447434][T17122] loop0: detected capacity change from 0 to 1024 [ 1765.551225][T17118] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1765.597722][T17122] EXT4-fs: Ignoring removed i_version option [ 1765.750222][T17122] EXT4-fs: inline encryption not supported [ 1765.830403][T17122] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1766.041867][T17122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1769.359640][T17162] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1769.466080][T13496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1769.970071][T17154] loop3: detected capacity change from 0 to 65536 [ 1770.151227][T17154] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1770.242388][T17176] random: crng reseeded on system resumption [ 1771.169946][T17154] XFS (loop3): Ending clean mount [ 1771.420538][T17182] sctp: [Deprecated]: syz.7.2065 (pid 17182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1771.420538][T17182] Use struct sctp_sack_info instead [ 1772.759908][T17186] loop9: detected capacity change from 0 to 40427 [ 1772.783884][T15207] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1772.787675][T17186] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1772.806294][T17186] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1772.845529][T17191] block device autoloading is deprecated and will be removed. [ 1773.088998][T17194] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1773.113942][T17186] F2FS-fs (loop9): invalid crc value [ 1773.130926][T17194] qnx6: wrong signature (magic) in superblock #1. [ 1773.137458][T17194] qnx6: unable to read the first superblock [ 1773.519225][T17186] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1773.604006][T17186] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1773.611302][T17186] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1774.493728][T17204] loop0: detected capacity change from 0 to 2048 [ 1774.562218][T17204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1783.057999][T17248] loop3: detected capacity change from 0 to 64 [ 1783.412958][T17255] loop4: detected capacity change from 0 to 512 [ 1784.010903][T17263] loop2: detected capacity change from 0 to 1024 [ 1785.048980][T17255] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 1785.538887][T17269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1785.568594][T17269] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1786.046604][T17279] loop9: detected capacity change from 0 to 512 [ 1786.058029][T17279] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1786.106493][T17279] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2068: iget: bogus i_mode (5) [ 1786.150555][T17279] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.2068: couldn't read orphan inode 15 (err -117) [ 1786.187536][T17279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1786.224447][T17279] ext2 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1787.310207][T16570] Bluetooth: hci4: command 0x0c1a tx timeout [ 1787.586367][T17269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1788.118891][T17269] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1788.170671][T16692] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1792.477171][T17320] autofs: Unknown parameter 'H<J@ʑzD!FqBX:l5.`Y ' [ 1793.597856][T17333] loop3: detected capacity change from 0 to 2048 [ 1793.647625][T17333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1795.158989][ T975] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1795.360975][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 1796.039072][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.066452][ T975] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1796.111553][ T975] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1796.131086][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.193621][ T975] usb 5-1: Product: syz [ 1796.197956][ T975] usb 5-1: Manufacturer: syz [ 1797.319660][T17362] loop9: detected capacity change from 0 to 512 [ 1797.965467][ T975] usb 5-1: SerialNumber: syz [ 1798.115182][ T975] usb 5-1: config 0 descriptor?? [ 1798.120892][ T975] usb 5-1: can't set config #0, error -71 [ 1798.131577][ T975] usb 5-1: USB disconnect, device number 13 [ 1798.359526][T17368] loop4: detected capacity change from 0 to 1024 [ 1798.367223][T17368] EXT4-fs: Ignoring removed orlov option [ 1798.373120][T17368] EXT4-fs: Ignoring removed nobh option [ 1798.378699][T17368] EXT4-fs: Ignoring removed bh option [ 1798.597109][T17368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1798.648463][T17368] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4192: comm syz.4.2092: Allocating blocks 481-513 which overlap fs metadata [ 1798.694728][T17373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1800.760127][ T30] audit: type=1800 audit(2000000434.519:175): pid=17378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2092" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1801.370110][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.376624][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.250867][T16915] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1803.409747][ T978] libceph: connect (1)[c::]:6789 error -101 [ 1803.500693][T17398] Invalid ELF header magic: != ELF [ 1803.509251][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 1803.777415][T17394] ceph: No mds server is up or the cluster is laggy [ 1803.985466][ T978] libceph: connect (1)[c::]:6789 error -101 [ 1804.019886][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 1804.726732][T17406] loop7: detected capacity change from 0 to 2048 [ 1805.689929][T17406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1814.001892][T17459] loop4: detected capacity change from 0 to 64 [ 1814.148048][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1814.162319][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1814.173867][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1814.182150][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1814.190272][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1814.683517][T16570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1815.202282][T17464] vivid-009: kernel_thread() failed [ 1815.239216][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1815.248424][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1815.259270][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1815.267177][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1815.580197][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1815.599362][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1815.611255][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1815.659034][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1815.669950][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1816.212162][T17477] loop0: detected capacity change from 0 to 1024 [ 1816.898985][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2121'. [ 1819.229023][ T5826] Bluetooth: hci3: command tx timeout [ 1819.235684][ T5826] Bluetooth: hci5: command tx timeout [ 1819.332656][T17477] hfsplus: failed to load extents file [ 1819.650695][ T7306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.062842][T17467] lo speed is unknown, defaulting to 1000 [ 1821.155523][T17457] lo speed is unknown, defaulting to 1000 [ 1821.289036][T16570] Bluetooth: hci5: command tx timeout [ 1821.295778][T16570] Bluetooth: hci3: command tx timeout [ 1822.181936][ T7306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.577054][ T7306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.761844][ T7306] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.369366][ T5826] Bluetooth: hci3: command tx timeout [ 1823.374873][T16570] Bluetooth: hci5: command tx timeout [ 1823.508487][T17457] chnl_net:caif_netlink_parms(): no params data found [ 1823.538595][T17467] chnl_net:caif_netlink_parms(): no params data found [ 1823.580040][ T7306] bridge_slave_1: left allmulticast mode [ 1823.585745][ T7306] bridge_slave_1: left promiscuous mode [ 1823.595195][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.614939][ T7306] bridge_slave_0: left allmulticast mode [ 1823.629150][ T7306] bridge_slave_0: left promiscuous mode [ 1823.635018][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.167630][ T7306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.180762][ T7306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.191322][ T7306] bond0 (unregistering): Released all slaves [ 1824.558597][T17457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.567202][T17457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.583110][T17457] bridge_slave_0: entered allmulticast mode [ 1824.597682][T17457] bridge_slave_0: entered promiscuous mode [ 1824.607086][T17457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.614435][T17457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.622101][T17457] bridge_slave_1: entered allmulticast mode [ 1824.631937][T17457] bridge_slave_1: entered promiscuous mode [ 1824.662277][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.671321][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.683516][T17467] bridge_slave_0: entered allmulticast mode [ 1824.698268][T17467] bridge_slave_0: entered promiscuous mode [ 1824.741708][ T7306] hsr_slave_0: left promiscuous mode [ 1824.748309][ T7306] hsr_slave_1: left promiscuous mode [ 1824.755126][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.765191][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.777970][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.786579][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.816346][ T7306] veth1_macvtap: left promiscuous mode [ 1824.822514][ T7306] veth0_macvtap: left promiscuous mode [ 1824.828217][ T7306] veth1_vlan: left promiscuous mode [ 1824.834650][ T7306] veth0_vlan: left promiscuous mode [ 1825.382334][ T7306] team0 (unregistering): Port device team_slave_1 removed [ 1825.428019][ T7306] team0 (unregistering): Port device team_slave_0 removed [ 1825.450528][ T5826] Bluetooth: hci3: command tx timeout [ 1825.455999][ T5826] Bluetooth: hci5: command tx timeout [ 1825.838677][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.848458][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.855873][T17467] bridge_slave_1: entered allmulticast mode [ 1825.864011][T17467] bridge_slave_1: entered promiscuous mode [ 1825.900819][T17457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.917134][T17457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.007110][T17457] team0: Port device team_slave_0 added [ 1826.018288][T17457] team0: Port device team_slave_1 added [ 1826.058268][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.145192][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.157085][T17457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.165605][T17457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.192619][T17457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.245700][T17457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.254492][T17457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.282929][T17457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.300387][T17467] team0: Port device team_slave_0 added [ 1826.351473][T17467] team0: Port device team_slave_1 added [ 1826.371298][ T7306] IPVS: stop unused estimator thread 0... [ 1826.445484][T17457] hsr_slave_0: entered promiscuous mode [ 1826.452584][T17457] hsr_slave_1: entered promiscuous mode [ 1826.459889][T17457] debugfs: 'hsr0' already exists in 'hsr' [ 1826.465647][T17457] Cannot create hsr debugfs directory [ 1826.533935][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.543232][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.571487][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.611703][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.624774][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1826.652994][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.740014][ T7306] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.824833][T17467] hsr_slave_0: entered promiscuous mode [ 1826.831870][T17467] hsr_slave_1: entered promiscuous mode [ 1826.838372][T17467] debugfs: 'hsr0' already exists in 'hsr' [ 1826.854747][T17467] Cannot create hsr debugfs directory [ 1826.912583][ T7306] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.038045][ T7306] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.123485][ T7306] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.604797][ T7306] bridge_slave_1: left allmulticast mode [ 1827.614951][ T7306] bridge_slave_1: left promiscuous mode [ 1827.621765][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.636087][ T7306] bridge_slave_0: left allmulticast mode [ 1827.642364][ T7306] bridge_slave_0: left promiscuous mode [ 1827.651956][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.161994][ T7306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1828.192729][ T7306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1828.206546][ T7306] bond0 (unregistering): Released all slaves [ 1828.536229][ T7306] hsr_slave_0: left promiscuous mode [ 1828.543139][ T7306] hsr_slave_1: left promiscuous mode [ 1828.550074][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1828.557480][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.568264][ T7306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1828.587197][ T7306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1828.617288][ T7306] veth1_macvtap: left promiscuous mode [ 1828.623052][ T7306] veth0_macvtap: left promiscuous mode [ 1828.628760][ T7306] veth1_vlan: left promiscuous mode [ 1828.641195][ T7306] veth0_vlan: left promiscuous mode [ 1829.303084][ T7306] team0 (unregistering): Port device team_slave_1 removed [ 1829.350781][ T7306] team0 (unregistering): Port device team_slave_0 removed [ 1829.835742][ T9700] infiniband syz1: ib_query_port failed (-19) [ 1830.451254][T17467] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1830.482447][T17467] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1830.504914][T17467] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1830.542291][T17467] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1830.642238][T17457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1830.676452][T17457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1830.706309][T17457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1830.725874][T17457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1830.806530][T17467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.840369][T17467] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.861790][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.869013][ T7322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.914190][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.921435][ T7322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.061529][T17457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.093648][T17457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.114887][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.122136][T10707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.163899][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.171156][T10707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.476998][T17467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.561851][T17467] veth0_vlan: entered promiscuous mode [ 1831.584293][T17467] veth1_vlan: entered promiscuous mode [ 1831.634014][T17467] veth0_macvtap: entered promiscuous mode [ 1831.654988][T17467] veth1_macvtap: entered promiscuous mode [ 1831.698572][T17457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.735826][T17467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.755971][T17467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.784817][ T7308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.804456][ T7308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.834829][ T7308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.860370][ T7308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.994800][ T7322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.018044][ T7322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.070270][ T7308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.078753][ T7308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.648721][T17651] Invalid ELF section header size [ 1832.662640][T17649] loop3: detected capacity change from 0 to 1024 [ 1834.186822][T17660] program syz.4.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1834.419748][T17649] EXT4-fs: Ignoring removed i_version option [ 1834.732386][T17649] EXT4-fs: inline encryption not supported [ 1834.771261][T17649] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1835.755265][T17649] EXT4-fs: error -4 creating inode table initialization thread [ 1835.783906][T17649] EXT4-fs (loop3): mount failed [ 1835.830165][T17457] veth0_vlan: entered promiscuous mode [ 1835.911062][T17457] veth1_vlan: entered promiscuous mode [ 1835.964129][T17671] loop1: detected capacity change from 0 to 2048 [ 1835.999066][T17671] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1836.083216][T17457] veth0_macvtap: entered promiscuous mode [ 1836.113624][T17457] veth1_macvtap: entered promiscuous mode [ 1836.190893][T17457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.025570][T17457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.517641][ T7322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.758640][T17684] loop0: detected capacity change from 0 to 1024 [ 1837.778468][T17684] EXT4-fs: Ignoring removed orlov option [ 1838.245338][ T7322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.267511][T17684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1838.279998][T17684] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1838.353126][T17682] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.2131: inode has both inline data and extents flags [ 1838.382066][ T7322] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.429287][ T7322] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.162338][T13496] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1840.395050][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.497678][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.795784][T17707] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1843.540503][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.557844][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.760145][T17722] loop3: detected capacity change from 0 to 2 [ 1843.771323][T17722] jffs2: rp_size unrepresentable [ 1843.967466][T17723] loop3: detected capacity change from 0 to 2048 [ 1843.977534][T17723] nilfs2: Unknown parameter 'RDdf' [ 1844.341902][T17723] loop3: detected capacity change from 0 to 1024 [ 1846.125972][T17731] loop4: detected capacity change from 0 to 1024 [ 1846.144755][T17723] hfsplus: bad catalog folder entry [ 1846.389368][T17731] ext4: Unknown parameter 'fsmagic' [ 1848.412035][T17736] loop6: detected capacity change from 0 to 128 [ 1848.605975][T17736] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1848.714925][T17736] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.458676][T17759] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1849.490120][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2133'. [ 1849.499455][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'. [ 1850.729649][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 1850.771680][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 1850.788762][T17764] Invalid ELF header magic: != ELF [ 1850.852571][T17754] ceph: No mds server is up or the cluster is laggy [ 1851.109588][ T5992] libceph: connect (1)[c::]:6789 error -101 [ 1851.119569][ T5992] libceph: mon0 (1)[c::]:6789 connect error [ 1851.328992][T17457] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1851.469859][T17769] loop3: detected capacity change from 0 to 512 [ 1851.515381][T17769] EXT4-fs: Ignoring removed oldalloc option [ 1851.593865][T17769] EXT4-fs: Mount option(s) incompatible with ext2 [ 1851.657423][T17773] loop6: detected capacity change from 0 to 2048 [ 1851.716152][T17773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1851.719670][T17775] overlayfs: failed to resolve './file1': -2 [ 1853.015064][T17771] loop7: detected capacity change from 0 to 4096 [ 1853.359213][T17771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1853.443584][T17786] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1853.455900][T17786] qnx6: wrong signature (magic) in superblock #1. [ 1854.188353][T17786] qnx6: unable to read the first superblock [ 1854.528929][T17561] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1855.327409][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 1858.069073][T17561] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1858.317044][T17561] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1858.339004][T17561] usb 4-1: can't read configurations, error -71 [ 1862.451872][T17829] loop1: detected capacity change from 0 to 2 [ 1862.459642][T17829] jffs2: rp_size unrepresentable [ 1862.736502][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1862.741230][ C0] ------------[ cut here ]------------ [ 1862.743102][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.748854][ C0] ODEBUG: free active (active state 0) object: ffff88807d715490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1862.768764][ C0] WARNING: CPU: 0 PID: 11105 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1862.778526][ C0] Modules linked in: [ 1862.782987][ C0] CPU: 0 UID: 0 PID: 11105 Comm: kworker/0:2H Not tainted syzkaller #0 PREEMPT(full) [ 1862.792680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1862.802876][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1862.809401][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1862.815299][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 fa f1 8b 4c 89 e6 48 c7 c7 a0 ee f1 8b e8 6f b2 c9 fc 90 <0f> 0b 90 90 58 83 05 56 eb d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1862.835157][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 1862.841328][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 1862.849446][ C0] RDX: ffff88802d098000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1862.857512][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1862.865596][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f540 [ 1862.873680][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a515ad0 R15: ffffc90000007b18 [ 1862.881757][ C0] FS: 0000000000000000(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 1862.890811][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1862.897488][ C0] CR2: 0000200000002000 CR3: 00000000760ba000 CR4: 0000000000350ef0 [ 1862.905569][ C0] Call Trace: [ 1862.908920][ C0] [ 1862.911789][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1862.917508][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1862.923428][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.929165][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 1862.934833][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1862.941016][ C0] kfree+0x291/0x6d0 [ 1862.944994][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1862.950214][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1862.955403][ C0] rose_timer_expiry+0x53f/0x630 [ 1862.960439][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1862.965987][ C0] call_timer_fn+0x19a/0x620 [ 1862.970660][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1862.975864][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.981600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1862.987367][ C0] ? mark_held_locks+0x49/0x80 [ 1862.992240][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1862.997783][ C0] __run_timers+0x6ef/0x960 [ 1863.002499][ C0] ? __pfx___run_timers+0x10/0x10 [ 1863.007606][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.013389][ C0] run_timer_base+0x114/0x190 [ 1863.018177][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1863.023474][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.029216][ C0] run_timer_softirq+0x1a/0x40 [ 1863.034056][ C0] handle_softirqs+0x219/0x8e0 [ 1863.039028][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1863.044404][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.050158][ C0] __irq_exit_rcu+0x109/0x170 [ 1863.054939][ C0] irq_exit_rcu+0x9/0x30 [ 1863.059250][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1863.064987][ C0] [ 1863.067991][ C0] [ 1863.070983][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1863.077045][ C0] RIP: 0010:lock_release+0x60/0x2f0 [ 1863.082344][ C0] Code: 87 38 02 00 00 89 c0 48 0f a3 05 5b 63 ea 0e 0f 82 b1 01 00 00 8b 3d b3 93 ea 0e 85 ff 0f 84 25 01 00 00 65 8b 05 38 9f 0b 12 <85> c0 0f 85 16 01 00 00 65 4c 8b 35 78 5d 0b 12 41 8b b6 2c 0b 00 [ 1863.102171][ C0] RSP: 0018:ffffc90003a0f900 EFLAGS: 00000202 [ 1863.108324][ C0] RAX: 0000000000000000 RBX: ffff88802fdea8b0 RCX: ffffffff89023d67 [ 1863.116408][ C0] RDX: 0000000000000000 RSI: ffffffff8bf1e8c0 RDI: 0000000000000001 [ 1863.124492][ C0] RBP: ffff88802fdea897 R08: 0000000000000007 R09: ffffffffffffefff [ 1863.132604][ C0] R10: ffff88802fdea897 R11: 0000000000000001 R12: ffffffff89023d7d [ 1863.140680][ C0] R13: ffff88802fdea888 R14: ffff88802fdea898 R15: 0000000000000001 [ 1863.148753][ C0] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1863.154272][ C0] ? snd_seq_port_use_ptr+0x137/0x1b0 [ 1863.159739][ C0] _raw_read_unlock+0x16/0x50 [ 1863.164499][ C0] snd_seq_port_use_ptr+0x14d/0x1b0 [ 1863.169791][ C0] snd_seq_deliver_single_event+0x188/0x7f0 [ 1863.175809][ C0] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1863.182376][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1863.188279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.194008][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.199305][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.205023][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1863.210934][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.216648][ C0] ? snd_seq_timer_get_cur_tick+0x7a/0x90 [ 1863.222488][ C0] snd_seq_deliver_event+0x2c5/0x860 [ 1863.227872][ C0] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1863.233768][ C0] ? mark_held_locks+0x49/0x80 [ 1863.238633][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.243939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.249663][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1863.255561][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.261288][ C0] ? client_use_ptr+0x106/0x490 [ 1863.266221][ C0] snd_seq_kernel_client_dispatch+0x120/0x1a0 [ 1863.272392][ C0] snd_vmidi_output_work+0x1d1/0x390 [ 1863.277759][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1863.283678][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.289418][ C0] ? rcu_is_watching+0x12/0xc0 [ 1863.294251][ C0] process_one_work+0x9cf/0x1b70 [ 1863.299303][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1863.304760][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.310504][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.316227][ C0] ? assign_work+0x1a0/0x250 [ 1863.320912][ C0] worker_thread+0x6c8/0xf10 [ 1863.325584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.331309][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.337019][ C0] ? __kthread_parkme+0x19e/0x250 [ 1863.342122][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.347843][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1863.353047][ C0] kthread+0x3c5/0x780 [ 1863.357187][ C0] ? __pfx_kthread+0x10/0x10 [ 1863.361868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.367572][ C0] ? rcu_is_watching+0x12/0xc0 [ 1863.372419][ C0] ? __pfx_kthread+0x10/0x10 [ 1863.377093][ C0] ret_from_fork+0x675/0x7d0 [ 1863.381779][ C0] ? __pfx_kthread+0x10/0x10 [ 1863.386461][ C0] ret_from_fork_asm+0x1a/0x30 [ 1863.391348][ C0] [ 1863.394410][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1863.401686][ C0] CPU: 0 UID: 0 PID: 11105 Comm: kworker/0:2H Not tainted syzkaller #0 PREEMPT(full) [ 1863.411232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1863.421289][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 1863.427716][ C0] Call Trace: [ 1863.430988][ C0] [ 1863.433823][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1863.438431][ C0] vpanic+0x640/0x6f0 [ 1863.442426][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1863.447629][ C0] panic+0xca/0xd0 [ 1863.451360][ C0] ? __pfx_panic+0x10/0x10 [ 1863.455796][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1863.460917][ C0] check_panic_on_warn+0xab/0xb0 [ 1863.465866][ C0] __warn+0xf6/0x3c0 [ 1863.469766][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1863.474977][ C0] report_bug+0x3c3/0x580 [ 1863.479353][ C0] ? debug_print_object+0x1a2/0x2b0 [ 1863.484562][ C0] handle_bug+0x184/0x210 [ 1863.488899][ C0] exc_invalid_op+0x17/0x50 [ 1863.493422][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1863.498272][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1863.504087][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 20 fa f1 8b 4c 89 e6 48 c7 c7 a0 ee f1 8b e8 6f b2 c9 fc 90 <0f> 0b 90 90 58 83 05 56 eb d1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1863.523709][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010282 [ 1863.529785][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817b5ee8 [ 1863.537753][ C0] RDX: ffff88802d098000 RSI: ffffffff817b5ef5 RDI: 0000000000000001 [ 1863.545727][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1863.553697][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf1f540 [ 1863.561669][ C0] R13: ffffffff8b901fe0 R14: ffffffff8a515ad0 R15: ffffc90000007b18 [ 1863.569646][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1863.575295][ C0] ? __warn_printk+0x198/0x350 [ 1863.580063][ C0] ? __warn_printk+0x1a5/0x350 [ 1863.584837][ C0] ? debug_print_object+0x1a1/0x2b0 [ 1863.590040][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1863.595681][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1863.601503][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.607156][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 1863.612738][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1863.618859][ C0] kfree+0x291/0x6d0 [ 1863.622853][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1863.627993][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1863.633123][ C0] rose_timer_expiry+0x53f/0x630 [ 1863.638086][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1863.643565][ C0] call_timer_fn+0x19a/0x620 [ 1863.648171][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1863.653384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.659044][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.664687][ C0] ? mark_held_locks+0x49/0x80 [ 1863.669459][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1863.674933][ C0] __run_timers+0x6ef/0x960 [ 1863.679460][ C0] ? __pfx___run_timers+0x10/0x10 [ 1863.684541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.690207][ C0] run_timer_base+0x114/0x190 [ 1863.694901][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1863.700111][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.705766][ C0] run_timer_softirq+0x1a/0x40 [ 1863.710542][ C0] handle_softirqs+0x219/0x8e0 [ 1863.715333][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1863.720639][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.726287][ C0] __irq_exit_rcu+0x109/0x170 [ 1863.730984][ C0] irq_exit_rcu+0x9/0x30 [ 1863.735226][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1863.740877][ C0] [ 1863.743797][ C0] [ 1863.746716][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1863.752704][ C0] RIP: 0010:lock_release+0x60/0x2f0 [ 1863.757912][ C0] Code: 87 38 02 00 00 89 c0 48 0f a3 05 5b 63 ea 0e 0f 82 b1 01 00 00 8b 3d b3 93 ea 0e 85 ff 0f 84 25 01 00 00 65 8b 05 38 9f 0b 12 <85> c0 0f 85 16 01 00 00 65 4c 8b 35 78 5d 0b 12 41 8b b6 2c 0b 00 [ 1863.777533][ C0] RSP: 0018:ffffc90003a0f900 EFLAGS: 00000202 [ 1863.783611][ C0] RAX: 0000000000000000 RBX: ffff88802fdea8b0 RCX: ffffffff89023d67 [ 1863.791586][ C0] RDX: 0000000000000000 RSI: ffffffff8bf1e8c0 RDI: 0000000000000001 [ 1863.799567][ C0] RBP: ffff88802fdea897 R08: 0000000000000007 R09: ffffffffffffefff [ 1863.807540][ C0] R10: ffff88802fdea897 R11: 0000000000000001 R12: ffffffff89023d7d [ 1863.815518][ C0] R13: ffff88802fdea888 R14: ffff88802fdea898 R15: 0000000000000001 [ 1863.823502][ C0] ? snd_seq_port_use_ptr+0x14d/0x1b0 [ 1863.828893][ C0] ? snd_seq_port_use_ptr+0x137/0x1b0 [ 1863.834285][ C0] _raw_read_unlock+0x16/0x50 [ 1863.838987][ C0] snd_seq_port_use_ptr+0x14d/0x1b0 [ 1863.844203][ C0] snd_seq_deliver_single_event+0x188/0x7f0 [ 1863.850108][ C0] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 1863.856535][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1863.862368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.868013][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.873241][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.878886][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1863.884733][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.890379][ C0] ? snd_seq_timer_get_cur_tick+0x7a/0x90 [ 1863.896141][ C0] snd_seq_deliver_event+0x2c5/0x860 [ 1863.901459][ C0] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 1863.907280][ C0] ? mark_held_locks+0x49/0x80 [ 1863.912064][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.917285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.922937][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1863.928767][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.934432][ C0] ? client_use_ptr+0x106/0x490 [ 1863.939306][ C0] snd_seq_kernel_client_dispatch+0x120/0x1a0 [ 1863.945390][ C0] snd_vmidi_output_work+0x1d1/0x390 [ 1863.950689][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1863.956532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.962195][ C0] ? rcu_is_watching+0x12/0xc0 [ 1863.966980][ C0] process_one_work+0x9cf/0x1b70 [ 1863.971959][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1863.977352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.983014][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1863.988665][ C0] ? assign_work+0x1a0/0x250 [ 1863.993281][ C0] worker_thread+0x6c8/0xf10 [ 1863.997908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1864.003570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1864.009223][ C0] ? __kthread_parkme+0x19e/0x250 [ 1864.014279][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1864.019938][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1864.025069][ C0] kthread+0x3c5/0x780 [ 1864.029154][ C0] ? __pfx_kthread+0x10/0x10 [ 1864.033838][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1864.039486][ C0] ? rcu_is_watching+0x12/0xc0 [ 1864.044258][ C0] ? __pfx_kthread+0x10/0x10 [ 1864.048880][ C0] ret_from_fork+0x675/0x7d0 [ 1864.053505][ C0] ? __pfx_kthread+0x10/0x10 [ 1864.058114][ C0] ret_from_fork_asm+0x1a/0x30 [ 1864.062914][ C0] [ 1864.066237][ C0] Kernel Offset: disabled [ 1864.070566][ C0] Rebooting in 86400 seconds..