last executing test programs: 6m43.942998387s ago: executing program 1 (id=21): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$usbfs(0x0, 0x205, 0x2581) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x80, 0x9}]}) fdatasync(r0) 6m32.236664478s ago: executing program 1 (id=37): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 6m30.064514314s ago: executing program 1 (id=43): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 6m25.928067989s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) 6m22.501286273s ago: executing program 1 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6012, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 6m12.371544165s ago: executing program 1 (id=72): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) 5m55.429593292s ago: executing program 32 (id=72): socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) 5m55.176063609s ago: executing program 5 (id=96): r0 = syz_open_dev$radio(&(0x7f0000006b80), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x24000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x1, 0x5}) socket$inet6(0xa, 0x3, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}, 0x10}, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x38, 0x24, 0x601, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}]}, 0x38}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000006c00)={0x8190000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) 5m51.61844794s ago: executing program 5 (id=105): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x23, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) keyctl$search(0xb, 0x0, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 5m49.842471583s ago: executing program 5 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0), 0x0, 0xff00) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) 5m37.670411076s ago: executing program 5 (id=121): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 5m37.245130293s ago: executing program 5 (id=123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, r4, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000500), 0x200004, &(0x7f0000000ac0)=ANY=[]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5m35.281141684s ago: executing program 5 (id=124): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000005680)='./file0\x00', &(0x7f00000056c0), 0x0) fanotify_init(0x200, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x5000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m26.518388039s ago: executing program 3 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x5, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x218888, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x10000000000001, 0x0, 0x0, 0x2) 5m23.607625099s ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0xa00) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) sendto$inet6(r0, &(0x7f0000000080)="8c98aa3e748a8784dc683d0100a5cc309d95fe1f7296a6c6", 0x18, 0x8010, 0x0, 0x0) 5m22.044824291s ago: executing program 3 (id=149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r0, 0x0, 0x578410eb) 5m18.269478012s ago: executing program 33 (id=124): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000055c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000005680)='./file0\x00', &(0x7f00000056c0), 0x0) fanotify_init(0x200, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x5000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m18.22567471s ago: executing program 3 (id=153): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x87) fchdir(r3) creat(0x0, 0x80) ptrace(0x10, r2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x10010, 0xffffffffffffffff, 0x10ce8000) ptrace$setregset(0x4205, r2, 0x204, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, 0x0) 5m12.970416173s ago: executing program 3 (id=164): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3e03) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m7.772305318s ago: executing program 3 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0xa00) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) sendto$inet6(r0, &(0x7f0000000080)="8c98aa3e748a8784dc683d0100a5cc309d95fe1f7296a6c6", 0x18, 0x8010, 0x0, 0x0) 5m7.044847655s ago: executing program 34 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x3, 0xa00) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000007c0), 0x60cb02, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r1, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="03000000100000000700000001000000", 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) sendto$inet6(r0, &(0x7f0000000080)="8c98aa3e748a8784dc683d0100a5cc309d95fe1f7296a6c6", 0x18, 0x8010, 0x0, 0x0) 3m45.900576329s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'batadv0\x00', 'gre0\x00'}, 0x0, 0x128, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x3, 0x0, 0x7, 0x3ff}, {0x4}}}, @common=@inet=@tos={{0x28}, {0x3, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9, 0xfffd, 0x2, 0x0, 0x0, "1ca8cb60a1d8235bc6c25bb4f87a3bc0fd5f5508e8f4a9bf65cddc9b23c9d87a29a94942b3e6a6c9b05899bf3ac6b3d190bc8430552eeddb62273b536c87cd50"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x398) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8) 3m44.029324813s ago: executing program 0 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 3m41.322768877s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8a5, 0x7, 0x10}, 0xffffffffffffffba) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, 0x0) 3m39.850289204s ago: executing program 0 (id=277): read$FUSE(0xffffffffffffffff, &(0x7f0000005700)={0x2020}, 0x2020) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x3, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffffe, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x4}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001160000003200000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000ff0000000000000000000000000000000a"], 0xf8}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1e9, &(0x7f0000000980)="$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") setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) shmctl$SHM_LOCK(0x0, 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x3) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x800000, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x822021, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 3m37.804166029s ago: executing program 0 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) setns(0xc9, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) 3m35.564171259s ago: executing program 0 (id=283): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0xa, 0x5, 0x0) acct(0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8) sendto$inet6(r2, &(0x7f00000001c0)="02", 0x1, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) vmsplice(r0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) 3m33.817746559s ago: executing program 35 (id=283): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0xa, 0x5, 0x0) acct(0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8}, 0x8) sendto$inet6(r2, &(0x7f00000001c0)="02", 0x1, 0x8003, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) vmsplice(r0, 0x0, 0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) 59.903921293s ago: executing program 8 (id=463): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800020, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {@orlov}, {@journal_ioprio}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@data_err_ignore}, {@acl}, {@test_dummy_encryption_v1}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000000)={[{@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x87f}}]}, 0x0, 0x543, &(0x7f0000000a80)="$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") chdir(&(0x7f0000000200)='./file7\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0x4, &(0x7f0000003100)=[{&(0x7f0000000480)=""/89, 0x59}], 0x1, 0x0, 0x1, {0x0, 0x0, 0xfc, '\x00', 0x0}}) 55.644026375s ago: executing program 8 (id=465): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 53.936740888s ago: executing program 8 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000002280)=ANY=[@ANYBLOB='fd', @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB="2c677201", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='mountaddr\x00', &(0x7f0000000380)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/204) 52.063162893s ago: executing program 8 (id=471): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r5, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 50.304012974s ago: executing program 8 (id=473): unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) fallocate(r4, 0x71, 0x80000001, 0xcfc9) prlimit64(r1, 0x8, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'wg2\x00', {0x2, 0x0, @empty}}) 48.045298293s ago: executing program 8 (id=474): r0 = open_tree(0xffffffffffffffff, 0x0, 0x81901) lchown(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x2040000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000fff9df250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 32.64932883s ago: executing program 36 (id=474): r0 = open_tree(0xffffffffffffffff, 0x0, 0x81901) lchown(&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x2, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_clone(0x2040000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000fff9df250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 31.07394027s ago: executing program 2 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") open(0x0, 0x4827e, 0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) 25.615832258s ago: executing program 2 (id=505): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 25.026025796s ago: executing program 9 (id=507): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 24.774496078s ago: executing program 7 (id=509): add_key$fscrypt_v1(0x0, &(0x7f0000000400)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r0, r1, 0x0, 0x201f00) move_pages(0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="b812420d61edb97e", 0x8}], 0x1, &(0x7f0000001040)}, 0x40004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001140)) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) fallocate(r4, 0x20, 0x0, 0x8000) truncate(0x0, 0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) kcmp(0x0, 0x0, 0x4, r3, r1) 23.735903666s ago: executing program 9 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2}) 22.903838973s ago: executing program 9 (id=512): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140878025000000000000010902270001010080000904000003e00101000705810200"], 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x40) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 19.202933056s ago: executing program 4 (id=514): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x7, 0x0, 0x2, 0xa}}, 0x20) 18.559555961s ago: executing program 4 (id=515): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 18.537409926s ago: executing program 2 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) 15.554596181s ago: executing program 2 (id=517): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000f0906010200000000000000000700000009000200e5a2a84b5f598c73797a32000700000500010007000000173bb484457312492638ae07f7adbf04000780"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 15.398920421s ago: executing program 4 (id=518): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001dc0)={0xfffffffe, 0x8, 0x2, {0xb, @win={{0x4, 0x7, 0x3, 0xffff}, 0x3, 0x10001, 0x0, 0xa087, 0x0, 0x7}}, 0xfffffffe}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000a00)=""/87, &(0x7f0000000d00)=""/65, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x29, 0x8, 0xdb0078e65cb35ffe, 0x5, 0x3, 0xb, 0x3, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_fuse_handle_req(r4, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xffffffffffffffff, 0x4, 0x0, {0x1, 0x7ffffffffffffffc, 0xfffffffffffffff8, 0x2, 0x8, 0xc, 0xbe, 0xfffffff9, 0x406, 0x8000, 0x4, 0x0, r5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 13.818340267s ago: executing program 9 (id=519): r0 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000001c0)=""/44, 0x2c) r4 = syz_io_uring_setup(0x18d6, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x8, 0x8, {0x0}, {}, 0x9, 0x5}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000300)=r5) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 13.65995248s ago: executing program 2 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) waitid(0x2, r2, 0x0, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x7b, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.199453163s ago: executing program 4 (id=521): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) fanotify_init(0x8, 0x101000) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, 0x0) mmap(&(0x7f0000bd3000/0x4000)=nil, 0x4000, 0x6, 0x8031, 0xffffffffffffffff, 0x2adcf000) 12.835588964s ago: executing program 6 (id=522): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2980, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) userfaultfd(0x80001) syz_emit_ethernet(0x1e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000001980)=0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r3, @ANYRES32], 0x2c}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005500010029bd70000200000007", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 10.039256252s ago: executing program 2 (id=523): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x138) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 9.973650872s ago: executing program 7 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, 0x0) r0 = fanotify_init(0x8, 0x80000) fanotify_mark(r0, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7f0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) 8.810266407s ago: executing program 7 (id=525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r6, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) 8.661991996s ago: executing program 6 (id=526): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x89, &(0x7f00000007c0)={@local, @random="6e1ae785b3a1", @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "37000e", 0x53, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x5, [], "70cf507de400"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [0x2], "0080d5db64"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "4de0"}, {0x8, 0x88be, 0x0, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x1}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x4, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x40840) 6.920956037s ago: executing program 6 (id=527): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma'], 0xe) 6.883950827s ago: executing program 7 (id=528): socket(0x2, 0x80805, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x14f, &(0x7f0000000240)="$eJzs289KAlEUx/HfqKnZP8tqES2CINrkqIHVzh5FdBJpLMk2ShA9Su9Xi3atMpr0hqMQGHrJ+X42np+Hi2cWV89GAYisig7kyPkO++nsY86xPRKAOekPXj/6AKIn/m57AgB2vF5KbUkvbw81xZNj+8FXvzLsx1Lj/SdpLzHoO2kth/eLZ+loeN7JTDyfMf2Vif3jw+Hnr2pN69pQVpvaUm7Qr5vzu3/YhAAAiA5H+XAeeSOmq6bvFUxeCnLR5GSQS6F8anIqyPnarV+f1SMAmFLsl/sfD93/ROj+A/i/Ot3eddX3vTsKCgoKU9j+ZgIwa+59q+12ur2TZqva8BreTblULl8Uzs+KbrD4u6PrP4AF8vOjb3sSAAAAAAAAAAAAAAAwrW3t2B4BAAAAwJzM4+9Etp8RAAAAAAAAAAAAAAAAAIBF8xkAAP//Cn4hMA==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0xfff}], 0x1, 0x122, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f00000001c0)=ANY=[@ANYBLOB='shortname=win95,utf8=1,utf8=1,utf8=1,shortname=win95,fmask=00000000000000000005645,shortname=lower,uni_xlate=0,utf8=1,uni_xlate=0,utf8=0,allow_utime=00000000000000000000007,rodir,discard,nfs\x00\x00\x00\x00tale_ro,rodir,check=relaxed,fsuuid=098Ve991-V279-^fc0-d\x00b0-e53da23f,uid=', @ANYRES8, @ANYBLOB=',subj_role=%,fowner<', @ANYRESDEC=0x0, @ANYRES8], 0x26, 0x2bf, &(0x7f0000000900)="$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") 6.39603414s ago: executing program 6 (id=529): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xc, &(0x7f0000000000)={0x5, 0xffffffff, 0x8}) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x13, 0xb, 0x7}, {0x6, 0x11, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044090) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.117357498s ago: executing program 4 (id=530): mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x7002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/inject\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1000000, 0x0, 0x0, 0xfa000, 0x1a5e00}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000200)=""/1024, 0x400) read$FUSE(r0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x30100) 3.415557417s ago: executing program 6 (id=531): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB="71756965742c6469725f756d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d6b6f69382d722c636f6465706167653d6b6f69382d72752c71756965742c66696c655f756d61736b3d30303030303030303030303030303030303030303030362c66696c655f756d61736b3d30303030303030303030303030303030303030313236342c63726561746f723d8c10b0812c66696c655f756d61736b3d30303030303030303030303030303030303030303030322c0063458b8eded22e0b4081b59940f79211dd3e735f57164b50bdf46f8f03a49b"], 0x2, 0x379, &(0x7f0000000880)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b40)='ns\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000340)=0x793) socket$xdp(0x2c, 0x3, 0x0) accept4(r2, &(0x7f0000000580)=@nl, &(0x7f0000000140)=0x80, 0x800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) getresuid(&(0x7f0000000500), 0x0, &(0x7f0000000600)=0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r5, {r6, r7}}, './file0\x00'}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x3}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) fchdir(r2) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0xcf, "ed3636a8346fb62915027cafdbaab62134e6473e6b66aac963dbfad5d82d1d577efe8a3280e59711b9f8aa436afe608b0c4bb37f51f4ced77d0eeaa181b9a2e81695da2f04b33804c2cb63db3b6b16e900b87002974af588ea09fcd35bf6c922b1e7867823387e95b31ca4f22bc453b14a196de7430ab3ab12a54d6663ada4457fc66034dd7db024b82e79497f4a4b860ffcea44b245bc7000d68c6130c83ba8e3a0022b454494fe849121183bea5252f803ef93a1fc268906694ffdca98788ee6c6c5123592596cf01a1e0be1c541"}, &(0x7f0000000480)=0xf3) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="ac110000", @ANYRES16=0x0, @ANYBLOB="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"], 0x11ac}, 0x1, 0x0, 0x0, 0x10000010}, 0x20000000) 1.819375431s ago: executing program 7 (id=532): socket$rds(0x15, 0x5, 0x0) memfd_create(&(0x7f0000000100)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1m\x13}\xe1\xdf4f!\xd5d\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85\b\x00\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5>j\x87\x04\x11y\xa1\xc8\x9f\x9etiHv\xef\x1a\xedS\xd6\x91%||/c\x87\x94Y\xa0\x8e\x03\x00\x00\x00\x00\x00\x00\x003:\x99\x1e\xac`\x00\x00\x00\x00m\xeaB\xf0K\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80', 0x1) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r2, &(0x7f0000000000)=[{0xfd, 0xc, 0x5, 0x77, @time={0x3, 0x6}, {0x6, 0x8}, {0x6, 0x3}, @queue={0x1, {0x4, 0x3}}}, {0x6, 0x5, 0xd, 0x6, @tick=0x9, {0x7, 0x7f}, {0x3, 0x7}, @control={0x7f, 0x1, 0x2}}], 0x38) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x816}, 0x23f58e5b666a3f02) 1.816142536s ago: executing program 4 (id=543): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 1.595438192s ago: executing program 6 (id=533): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) setgroups(0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) 519.409076ms ago: executing program 9 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) socket(0x1, 0x803, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.375717ms ago: executing program 9 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_route(0x10, 0x3, 0x0) tkill(r4, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r5, 0x0, 0x0) 0s ago: executing program 7 (id=536): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xa) timerfd_create(0x0, 0x80800) kernel console output (not intermixed with test programs): high-speed USB device number 2 using dummy_hcd [ 216.830694][ C0] gadgetfs: connected [ 216.882990][ T6737] gadgetfs: suspended from state 3 [ 216.888372][ T6737] gadgetfs: disconnected [ 216.971030][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.090760][ T6049] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.125953][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.257100][ T6530] team0: Port device team_slave_0 added [ 217.279464][ T6530] team0: Port device team_slave_1 added [ 217.549706][ T6751] loop4: detected capacity change from 0 to 32768 [ 217.618385][ T5622] Bluetooth: hci4: command tx timeout [ 217.635633][ T6751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.197 (6751) [ 217.653054][ T6751] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.663303][ T6751] BTRFS info (device loop4): using sha256 checksum algorithm [ 217.896921][ T6751] BTRFS info (device loop4): enabling ssd optimizations [ 217.904020][ T6751] BTRFS info (device loop4): turning on sync discard [ 217.910719][ T6751] BTRFS info (device loop4): enabling free space tree [ 218.651064][ T6772] loop2: detected capacity change from 0 to 512 [ 218.728291][ T6772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.121234][ T31] audit: type=1800 audit(1786980409.824:7): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.197" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 220.572218][ T5622] Bluetooth: hci4: command tx timeout [ 220.876603][ T6779] loop0: detected capacity change from 0 to 65536 [ 221.386488][ T6779] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 221.597807][ T6049] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.643862][ T6779] XFS (loop0): Ending clean mount [ 221.649607][ T6779] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 221.702008][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.796981][ T5604] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.273494][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.299740][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.360138][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.585024][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.621629][ T5610] Bluetooth: hci1: command 0x0406 tx timeout [ 222.629025][ T51] Bluetooth: hci4: command tx timeout [ 222.651660][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.329795][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.432077][ T6811] loop4: detected capacity change from 0 to 24 [ 223.474525][ T6811] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 223.529985][ T6811] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 223.912273][ T6822] loop2: detected capacity change from 0 to 256 [ 223.928423][ T6822] exfat: Deprecated parameter 'utf8' [ 223.934133][ T6822] exfat: Deprecated parameter 'namecase' [ 223.940643][ T6822] exfat: Deprecated parameter 'namecase' [ 223.946573][ T6822] exfat: Deprecated parameter 'utf8' [ 224.093295][ T6822] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 224.108968][ T6822] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 224.438855][ T6822] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 225.518101][ T6824] loop4: detected capacity change from 0 to 4096 [ 225.763699][ T6824] EXT4-fs (loop4): Test dummy encryption mode enabled [ 225.939796][ T6833] loop0: detected capacity change from 0 to 256 [ 225.954094][ T6833] exfat: Deprecated parameter 'utf8' [ 225.959671][ T6833] exfat: Deprecated parameter 'namecase' [ 225.966282][ T6833] exfat: Deprecated parameter 'namecase' [ 225.972089][ T6833] exfat: Deprecated parameter 'utf8' [ 226.078818][ T6833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 226.094682][ T6833] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 226.154435][ T6824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.252722][ T6833] exFAT-fs (loop0): start_clu is invalid cluster(0x400) [ 226.778648][ T6530] hsr_slave_0: entered promiscuous mode [ 226.857419][ T6530] hsr_slave_1: entered promiscuous mode [ 226.902412][ T6530] debugfs: 'hsr0' already exists in 'hsr' [ 226.951370][ T6530] Cannot create hsr debugfs directory [ 227.320964][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.362446][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.427455][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.545826][ T6626] bridge_slave_0: entered allmulticast mode [ 227.669944][ T6626] bridge_slave_0: entered promiscuous mode [ 227.789891][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 228.160091][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.188469][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.204979][ T6626] bridge_slave_1: entered allmulticast mode [ 228.245892][ T6626] bridge_slave_1: entered promiscuous mode [ 229.352445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 230.919764][ T6859] loop2: detected capacity change from 0 to 512 [ 234.472086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 235.175314][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.151203][ T6049] bridge_slave_1: left allmulticast mode [ 236.160515][ T6049] bridge_slave_1: left promiscuous mode [ 236.172743][ T6882] loop2: detected capacity change from 0 to 24 [ 236.198712][ T6882] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 236.201414][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.242014][ T6049] bridge_slave_0: left allmulticast mode [ 236.248828][ T6049] bridge_slave_0: left promiscuous mode [ 236.256525][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.293184][ T6882] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 236.503643][ T6049] bridge_slave_1: left allmulticast mode [ 236.515932][ T6049] bridge_slave_1: left promiscuous mode [ 236.534257][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.376099][ T6049] bridge_slave_0: left allmulticast mode [ 237.381920][ T6049] bridge_slave_0: left promiscuous mode [ 237.389194][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.733789][ T6895] hub 8-0:1.0: USB hub found [ 237.740879][ T6895] hub 8-0:1.0: 1 port detected [ 239.272689][ T5740] IPVS: starting estimator thread 0... [ 239.361651][ T6901] IPVS: using max 25 ests per chain, 60000 per kthread [ 241.575852][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.624646][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.645967][ T6049] bond0 (unregistering): Released all slaves [ 243.822247][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.902656][ T6930] ubi0: attaching mtd0 [ 243.925688][ T6930] ubi0: scanning is finished [ 244.190962][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.220673][ T6049] bond0 (unregistering): Released all slaves [ 244.389905][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.643097][ T6930] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 245.725539][ T6939] loop2: detected capacity change from 0 to 24 [ 245.742904][ T6939] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 245.751303][ T6940] read descriptors [ 245.786099][ T6939] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 245.836638][ T5617] ffs_data_put(): freeing [ 245.901329][ T6626] team0: Port device team_slave_0 added [ 245.910202][ T6626] team0: Port device team_slave_1 added [ 246.117033][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.124320][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.158006][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.228866][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.257472][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.286433][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.368474][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.376240][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.386812][ T6708] bridge_slave_0: entered allmulticast mode [ 246.398756][ T6708] bridge_slave_0: entered promiscuous mode [ 246.420276][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.427587][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.437732][ T6708] bridge_slave_1: entered allmulticast mode [ 246.446521][ T6708] bridge_slave_1: entered promiscuous mode [ 246.769524][ T6626] hsr_slave_0: entered promiscuous mode [ 246.809161][ T6626] hsr_slave_1: entered promiscuous mode [ 246.846623][ T6967] loop2: detected capacity change from 0 to 256 [ 246.859928][ T6967] exfat: Deprecated parameter 'utf8' [ 246.865729][ T6967] exfat: Deprecated parameter 'namecase' [ 246.871620][ T6967] exfat: Deprecated parameter 'namecase' [ 246.877385][ T6967] exfat: Deprecated parameter 'utf8' [ 246.890100][ T6626] debugfs: 'hsr0' already exists in 'hsr' [ 246.934612][ T6626] Cannot create hsr debugfs directory [ 247.020291][ T6967] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 247.036604][ T6967] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 247.166791][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.189800][ T6967] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 247.317320][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.538732][ T6969] loop4: detected capacity change from 0 to 1024 [ 247.574384][ T6969] ext4: Unknown parameter 'context' [ 248.240626][ T6971] loop4: detected capacity change from 0 to 1024 [ 248.306043][ T6971] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 248.332102][ T6971] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 248.878529][ T6971] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 248.887972][ T6971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 248.910676][ T6971] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.231: Freeing blocks not in datazone - block = 0, count = 4096 [ 248.924471][ T6971] loop4: lost filesystem error report for type 5 error -117 [ 248.941511][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 248.956445][ C0] EXT4-fs (loop4): initial error at time 1786980439: ext4_free_blocks:6718 [ 248.965076][ C0] EXT4-fs (loop4): last error at time 1786980439: ext4_free_blocks:6718 [ 248.980427][ T6049] hsr_slave_0: left promiscuous mode [ 248.993395][ T6049] hsr_slave_1: left promiscuous mode [ 249.000239][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.097097][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.146464][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.158825][ T6971] EXT4-fs (loop4): Remounting filesystem read-only [ 249.166510][ T6971] EXT4-fs (loop4): 1 orphan inode deleted [ 249.192909][ T6971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.255722][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.327810][ T6049] hsr_slave_0: left promiscuous mode [ 250.051573][ T6049] hsr_slave_1: left promiscuous mode [ 250.066717][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.184267][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.202995][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.275916][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.319373][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.342747][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.353665][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.665964][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.697853][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.739209][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.049826][ T6049] veth1_macvtap: left promiscuous mode [ 251.080918][ T6049] veth0_macvtap: left promiscuous mode [ 251.089599][ T6049] veth1_vlan: left promiscuous mode [ 251.568007][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.579951][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.592383][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.604225][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.623724][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.635384][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.647035][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.658640][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.670470][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 251.682543][ T6994] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.892621][ T5622] Bluetooth: hci6: command tx timeout [ 252.972709][ T6049] veth0_vlan: left promiscuous mode [ 253.033973][ T6049] veth1_macvtap: left promiscuous mode [ 253.047472][ T6049] veth0_macvtap: left promiscuous mode [ 253.242083][ T6049] veth1_vlan: left promiscuous mode [ 253.251916][ T6049] veth0_vlan: left promiscuous mode [ 254.943733][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.951704][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.021922][ T5622] Bluetooth: hci6: command tx timeout [ 255.034978][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 255.103245][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 256.208590][ T7012] loop0: detected capacity change from 0 to 24 [ 256.231065][ T7012] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 256.245725][ T7012] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 256.285941][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 256.313838][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 256.430758][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 256.912732][ T6708] team0: Port device team_slave_0 added [ 256.979103][ T6708] team0: Port device team_slave_1 added [ 257.103249][ T5622] Bluetooth: hci6: command tx timeout [ 258.258336][ T10] libceph: connect (1)[c::]:6789 error -101 [ 258.282006][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 258.505565][ T7028] ceph: No mds server is up or the cluster is laggy [ 258.586376][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 258.614878][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 259.192452][ T5622] Bluetooth: hci6: command tx timeout [ 259.434178][ T10] libceph: connect (1)[c::]:6789 error -101 [ 259.491295][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 259.757329][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.806750][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.121491][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.143730][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.149321][ T7042] loop2: detected capacity change from 0 to 8192 [ 260.150802][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.239118][ T7054] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 260.750252][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.758106][ T7042] ntfs3: Unknown parameter 'no9ÿÿÿ' [ 260.995869][ T5610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.042999][ T5610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.078811][ T5610] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.106781][ T5610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.178552][ T5610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.438406][ T6708] hsr_slave_0: entered promiscuous mode [ 262.458014][ T6708] hsr_slave_1: entered promiscuous mode [ 262.474385][ T5610] Bluetooth: hci5: command 0x0405 tx timeout [ 263.141666][ T7082] loop0: detected capacity change from 0 to 32768 [ 263.177151][ T7082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.251 (7082) [ 263.261354][ T7082] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.271684][ T7082] BTRFS info (device loop0): using sha256 checksum algorithm [ 263.470729][ T5622] Bluetooth: hci7: command tx timeout [ 263.648757][ T7089] sctp_transport_update_pmtu: 104 callbacks suppressed [ 263.648789][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.670704][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.683966][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.696588][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.723486][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.735082][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.746770][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.759195][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.770960][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 263.783153][ T7089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 264.871164][ T7082] BTRFS info (device loop0): enabling ssd optimizations [ 264.878486][ T7082] BTRFS info (device loop0): turning on sync discard [ 264.885226][ T7082] BTRFS info (device loop0): enabling free space tree [ 265.169578][ T31] audit: type=1800 audit(1786980455.874:8): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 265.501589][ T5622] Bluetooth: hci7: command tx timeout [ 265.886801][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 266.038790][ T5617] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.628470][ T5622] Bluetooth: hci7: command tx timeout [ 269.662259][ T5610] Bluetooth: hci7: command 0x0419 tx timeout [ 269.893581][ T7137] loop0: detected capacity change from 0 to 4096 [ 271.751571][ T5622] Bluetooth: hci7: command 0x0419 tx timeout [ 275.351636][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 275.565104][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.575999][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.587301][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.595291][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.603009][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.201473][ T7179] loop0: detected capacity change from 0 to 256 [ 277.242771][ T7179] vfat: Unknown parameter 'nnonumtail' [ 277.489002][ T7184] loop2: detected capacity change from 0 to 64 [ 277.706977][ T5610] Bluetooth: hci0: command tx timeout [ 278.413415][ T7191] CIFS: Attempting to mount //127.0.0.1/share [ 279.355029][ T5613] hfs: node 4:3 still has 1 user(s)! [ 279.600777][ T7191] CIFS: VFS: cifs_mount failed w/return code = -512 [ 279.652348][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.698143][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.731329][ T6982] bridge_slave_0: entered allmulticast mode [ 279.742634][ T5610] Bluetooth: hci0: command tx timeout [ 279.781212][ T6982] bridge_slave_0: entered promiscuous mode [ 280.105432][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.086719][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.101803][ T6982] bridge_slave_1: entered allmulticast mode [ 281.357095][ T6982] bridge_slave_1: entered promiscuous mode [ 281.404446][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 281.841624][ T5610] Bluetooth: hci0: command tx timeout [ 283.190343][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.216766][ T5610] Bluetooth: hci0: command tx timeout [ 284.303255][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.767488][ T7231] hub 8-0:1.0: USB hub found [ 284.821113][ T7231] hub 8-0:1.0: 1 port detected [ 285.386962][ T7236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.744851][ T5848] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 285.821180][ T6982] team0: Port device team_slave_0 added [ 285.909914][ T5848] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 285.949601][ T7247] loop2: detected capacity change from 0 to 256 [ 285.963760][ T7247] exfat: Deprecated parameter 'utf8' [ 285.969567][ T7247] exfat: Deprecated parameter 'namecase' [ 285.976706][ T7247] exfat: Deprecated parameter 'namecase' [ 285.982471][ T7247] exfat: Deprecated parameter 'utf8' [ 286.087167][ T7247] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 286.104647][ T7247] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 286.215778][ T5848] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 286.235851][ T7247] exFAT-fs (loop2): start_clu is invalid cluster(0x400) [ 286.316974][ T5848] usb 5-1: config 1 has no interface number 0 [ 286.408666][ T5848] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 286.548503][ T5848] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.785362][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.814478][ T6982] team0: Port device team_slave_1 added [ 286.828261][ T7250] loop0: detected capacity change from 0 to 8 [ 286.860269][ T5848] usb 5-1: Product: syz [ 286.880768][ T5848] usb 5-1: Manufacturer: syz [ 286.907147][ T5848] usb 5-1: SerialNumber: syz [ 286.937273][ T7239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.955016][ T5848] usb 5-1: Error in usbnet_get_endpoints (-22) [ 287.650559][ T5848] usb 5-1: USB disconnect, device number 2 [ 287.752152][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.771600][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.814494][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.862422][ T5617] SQUASHFS error: Unable to read directory block [631:72] [ 287.876731][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.894708][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.922622][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.946275][ T5617] SQUASHFS error: Unable to read inode 0xe3 [ 287.954105][ T5617] SQUASHFS error: Unable to read inode 0xe3 [ 290.345627][ T6982] hsr_slave_0: entered promiscuous mode [ 291.022333][ T6982] hsr_slave_1: entered promiscuous mode [ 291.071945][ T6982] debugfs: 'hsr0' already exists in 'hsr' [ 291.179949][ T6982] Cannot create hsr debugfs directory [ 291.617887][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.643267][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.660781][ T7055] bridge_slave_0: entered allmulticast mode [ 291.685058][ T7055] bridge_slave_0: entered promiscuous mode [ 291.836122][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.846408][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.865988][ T7055] bridge_slave_1: entered allmulticast mode [ 291.894113][ T7055] bridge_slave_1: entered promiscuous mode [ 293.501021][ T7290] loop2: detected capacity change from 0 to 1024 [ 293.612525][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.629338][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.640630][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.650080][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.663487][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.745211][ T5622] Bluetooth: hci2: command tx timeout [ 295.793607][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.123422][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.415897][ T7055] team0: Port device team_slave_0 added [ 296.438864][ T7055] team0: Port device team_slave_1 added [ 296.907665][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.921523][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.982394][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.011628][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.021796][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.091987][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.206802][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 297.722320][ T6049] bridge_slave_1: left allmulticast mode [ 297.736398][ T6049] bridge_slave_1: left promiscuous mode [ 298.127058][ T7335] syz.2.292 uses obsolete (PF_INET,SOCK_PACKET) [ 298.137945][ T5622] Bluetooth: hci2: command tx timeout [ 298.217724][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.227565][ T6049] bridge_slave_0: left allmulticast mode [ 298.233318][ T6049] bridge_slave_0: left promiscuous mode [ 298.239128][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.258180][ T6049] bridge_slave_1: left allmulticast mode [ 298.264672][ T6049] bridge_slave_1: left promiscuous mode [ 298.270515][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.282939][ T6049] bridge_slave_0: left allmulticast mode [ 298.288676][ T6049] bridge_slave_0: left promiscuous mode [ 298.295091][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.335292][ T6049] bridge_slave_1: left allmulticast mode [ 298.341027][ T6049] bridge_slave_1: left promiscuous mode [ 298.347425][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.373335][ T6049] bridge_slave_0: left allmulticast mode [ 298.380457][ T6049] bridge_slave_0: left promiscuous mode [ 298.388591][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.587281][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.605283][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.619073][ T6049] bond0 (unregistering): Released all slaves [ 298.715165][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.736316][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.790342][ T6049] bond0 (unregistering): Released all slaves [ 299.320031][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.334546][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.348141][ T6049] bond0 (unregistering): Released all slaves [ 299.415850][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.423176][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.432039][ T7160] bridge_slave_0: entered allmulticast mode [ 299.441006][ T7160] bridge_slave_0: entered promiscuous mode [ 299.451872][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.464680][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.472577][ T7160] bridge_slave_1: entered allmulticast mode [ 299.480782][ T7160] bridge_slave_1: entered promiscuous mode [ 299.772163][ T7055] hsr_slave_0: entered promiscuous mode [ 299.778912][ T7055] hsr_slave_1: entered promiscuous mode [ 299.785508][ T7055] debugfs: 'hsr0' already exists in 'hsr' [ 299.791261][ T7055] Cannot create hsr debugfs directory [ 299.834577][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.908733][ T6049] hsr_slave_0: left promiscuous mode [ 299.925229][ T6049] hsr_slave_1: left promiscuous mode [ 299.937660][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.950352][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.976767][ T6049] hsr_slave_0: left promiscuous mode [ 299.992357][ T6049] hsr_slave_1: left promiscuous mode [ 299.998261][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.009235][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.022185][ T6049] hsr_slave_0: left promiscuous mode [ 300.028279][ T6049] hsr_slave_1: left promiscuous mode [ 300.035218][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.043174][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.221929][ T5622] Bluetooth: hci2: command tx timeout [ 300.333379][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 300.365474][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 300.781195][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 300.812865][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 301.227150][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 301.280156][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 301.614870][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 302.193600][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.302261][ T5622] Bluetooth: hci2: command tx timeout [ 302.426280][ T7160] team0: Port device team_slave_0 added [ 302.435874][ T7160] team0: Port device team_slave_1 added [ 302.507981][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.527598][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.590732][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.604242][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.611187][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.641522][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.720123][ T7384] ubi0: attaching mtd0 [ 302.744745][ T7384] ubi0: scanning is finished [ 303.408295][ T7384] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 304.484777][ T7395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.888036][ T7160] hsr_slave_0: entered promiscuous mode [ 304.960541][ T7160] hsr_slave_1: entered promiscuous mode [ 306.715375][ T7160] debugfs: 'hsr0' already exists in 'hsr' [ 306.797199][ T7160] Cannot create hsr debugfs directory [ 307.292440][ T7406] pim6reg: entered allmulticast mode [ 308.119759][ T7431] loop4: detected capacity change from 0 to 2048 [ 308.139470][ T7428] ceph: No mds server is up or the cluster is laggy [ 308.162798][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 308.273986][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 308.836681][ T7431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.849442][ T7431] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.225296][ T6982] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.336249][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.380469][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 309.393545][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.401880][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.416353][ T7291] bridge_slave_0: entered allmulticast mode [ 309.424535][ T7291] bridge_slave_0: entered promiscuous mode [ 309.481890][ T6982] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.492940][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.615166][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.801929][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.820556][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.851806][ T7291] bridge_slave_1: entered allmulticast mode [ 309.886830][ T7291] bridge_slave_1: entered promiscuous mode [ 310.564963][ T6982] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 310.608147][ T6982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.630096][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.644867][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.656629][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.705473][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.759323][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.906590][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.856160][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 311.953923][ T6049] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.398306][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.998817][ T7471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.085566][ T5610] Bluetooth: hci4: command tx timeout [ 314.208746][ T7464] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.313: No space for directory leaf checksum. Please run e2fsck -D. [ 314.305321][ T7464] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.313: checksumming directory block 0 [ 314.371409][ T7291] team0: Port device team_slave_0 added [ 314.381775][ T7464] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 314.393657][ T7464] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.313: No space for directory leaf checksum. Please run e2fsck -D. [ 314.418771][ T7464] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.313: checksumming directory block 0 [ 314.521164][ T6049] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.542066][ T7464] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 314.577548][ T7464] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.313: No space for directory leaf checksum. Please run e2fsck -D. [ 314.602027][ T7055] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 314.613788][ T7055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.623065][ T7464] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.313: checksumming directory block 0 [ 314.635453][ T7291] team0: Port device team_slave_1 added [ 314.695402][ T7464] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 314.709987][ T7055] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 314.732055][ T7464] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.2.313: No space for directory leaf checksum. Please run e2fsck -D. [ 314.756883][ T7055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.774432][ T7464] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #274: comm syz.2.313: checksumming directory block 0 [ 314.825277][ T7464] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 314.849621][ T6049] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.851706][ T7464] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 314.883683][ T7464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 314.958572][ T7055] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 314.974956][ T7055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.983390][ T7055] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 314.999677][ T7055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.030419][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.038957][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.075171][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.206917][ T7484] netlink: 168 bytes leftover after parsing attributes in process `syz.2.316'. [ 315.495970][ T6049] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.869905][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.877030][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.918663][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.144656][ T5622] Bluetooth: hci4: command tx timeout [ 316.159858][ T7291] hsr_slave_0: entered promiscuous mode [ 316.166807][ T7291] hsr_slave_1: entered promiscuous mode [ 316.174076][ T7291] debugfs: 'hsr0' already exists in 'hsr' [ 316.179803][ T7291] Cannot create hsr debugfs directory [ 316.386476][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.394578][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.225251][ T5622] Bluetooth: hci4: command tx timeout [ 318.686218][ T6049] bridge_slave_1: left allmulticast mode [ 318.701987][ T6049] bridge_slave_1: left promiscuous mode [ 318.719614][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.758993][ T6049] bridge_slave_0: left allmulticast mode [ 318.778150][ T6049] bridge_slave_0: left promiscuous mode [ 318.802827][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.860353][ T6049] bridge_slave_1: left allmulticast mode [ 318.870626][ T6049] bridge_slave_1: left promiscuous mode [ 318.876597][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.890929][ T6049] bridge_slave_0: left allmulticast mode [ 318.901577][ T6049] bridge_slave_0: left promiscuous mode [ 318.907388][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.311176][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.356316][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.374657][ T6049] bond0 (unregistering): Released all slaves [ 319.498110][ T31] audit: type=1326 audit(1786980510.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.605133][ T31] audit: type=1326 audit(1786980510.234:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.703582][ T31] audit: type=1326 audit(1786980510.244:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.746784][ T31] audit: type=1326 audit(1786980510.244:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.782255][ T31] audit: type=1326 audit(1786980510.244:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.808535][ T31] audit: type=1326 audit(1786980510.244:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.840114][ T31] audit: type=1326 audit(1786980510.244:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.871391][ T31] audit: type=1326 audit(1786980510.244:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.904504][ T31] audit: type=1326 audit(1786980510.244:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 319.941721][ T31] audit: type=1326 audit(1786980510.244:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.4.318" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9958f9e0d9 code=0x7ffc0000 [ 320.305559][ T5622] Bluetooth: hci4: command tx timeout [ 320.442876][ T7521] loop2: detected capacity change from 0 to 2048 [ 320.479703][ T7521] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.219817][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.263856][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.277080][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.285257][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.294369][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.305256][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.305683][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.357513][ T6049] bond0 (unregistering): Released all slaves [ 323.329942][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 323.964418][ T7547] netlink: 460 bytes leftover after parsing attributes in process `syz.2.323'. [ 324.183567][ T7554] loop4: detected capacity change from 0 to 512 [ 324.184479][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.200604][ T7554] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 324.211658][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.236171][ T7547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.253306][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.348237][ T7554] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -ENXIO [ 324.384252][ T5622] Bluetooth: hci5: command tx timeout [ 324.404343][ T7160] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.486470][ T7160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.494645][ T7554] loop4: detected capacity change from 0 to 1764 [ 324.546167][ T6049] hsr_slave_0: left promiscuous mode [ 324.567802][ T6049] hsr_slave_1: left promiscuous mode [ 324.578709][ T7554] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 324.597687][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.626153][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.644353][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.656794][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.675699][ T6049] hsr_slave_0: left promiscuous mode [ 324.685239][ T6049] hsr_slave_1: left promiscuous mode [ 324.691402][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.700015][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.719360][ T6049] veth1_macvtap: left promiscuous mode [ 324.725165][ T6049] veth0_macvtap: left promiscuous mode [ 324.730694][ T6049] veth1_vlan: left promiscuous mode [ 324.737007][ T6049] veth0_vlan: left promiscuous mode [ 324.755743][ T7562] fuse: Unknown parameter 'group_id00000000000000000000' [ 325.089217][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 325.136538][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 325.383439][ T7567] loop4: detected capacity change from 0 to 512 [ 325.431578][ T7567] EXT4-fs (loop4): Test dummy encryption mode enabled [ 325.524850][ T7567] EXT4-fs (loop4): 1 truncate cleaned up [ 325.546567][ T7567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.000973][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.220289][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 326.252233][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 326.372417][ T7572] loop4: detected capacity change from 0 to 32768 [ 326.436544][ T7572] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.462300][ T5622] Bluetooth: hci5: command tx timeout [ 326.474536][ T7160] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.497787][ T7572] XFS (loop4): Ending clean mount [ 326.508042][ T7160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.522405][ T7572] XFS (loop4): Quotacheck needed: Please wait. [ 326.651178][ T7572] XFS (loop4): Quotacheck: Done. [ 326.651198][ T7160] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.368380][ T31] kauditd_printk_skb: 169 callbacks suppressed [ 327.368426][ T31] audit: type=1800 audit(1786980517.774:188): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.327" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 327.616707][ T7160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.624806][ T7160] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.675875][ T5604] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.707408][ T7160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.321332][ T7596] sctp_transport_update_pmtu: 47 callbacks suppressed [ 328.321364][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.343167][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.354961][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.367023][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.393083][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.406685][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.419483][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.431719][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.445667][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.458826][ T7596] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 328.634976][ T5622] Bluetooth: hci5: command tx timeout [ 330.711852][ T5622] Bluetooth: hci5: command tx timeout [ 332.529845][ T7291] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 332.732086][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.442409][ T7291] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 333.497592][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.568035][ T7291] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 335.670496][ T7652] loop4: detected capacity change from 0 to 1024 [ 337.566214][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.727098][ T7291] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 337.883920][ T7291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.939131][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 337.947742][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.964553][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.974468][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.987172][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.996826][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.144791][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 338.145521][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.198707][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.228821][ T7449] bridge_slave_0: entered allmulticast mode [ 338.282958][ T7449] bridge_slave_0: entered promiscuous mode [ 338.320183][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.358696][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.378919][ T7449] bridge_slave_1: entered allmulticast mode [ 338.411158][ T7667] loop4: detected capacity change from 0 to 512 [ 338.419821][ T7449] bridge_slave_1: entered promiscuous mode [ 340.063603][ T51] Bluetooth: hci6: command tx timeout [ 341.189374][ T7449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.267077][ T7449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.455603][ T7449] team0: Port device team_slave_0 added [ 341.685510][ T7449] team0: Port device team_slave_1 added [ 342.165312][ T51] Bluetooth: hci6: command tx timeout [ 342.249254][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.257960][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.300720][ T7449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.314180][ T7449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.321143][ T7449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.348771][ T7449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.362057][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 342.634238][ T7449] hsr_slave_0: entered promiscuous mode [ 342.867529][ T7449] hsr_slave_1: entered promiscuous mode [ 343.698549][ T7739] syz.2.346 (7739): drop_caches: 2 [ 343.790866][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.808417][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.821700][ T7527] bridge_slave_0: entered allmulticast mode [ 343.841492][ T7527] bridge_slave_0: entered promiscuous mode [ 343.901002][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.918398][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.925840][ T7527] bridge_slave_1: entered allmulticast mode [ 343.937622][ T7527] bridge_slave_1: entered promiscuous mode [ 344.003832][ T7692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 344.092432][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.177087][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.229194][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.235473][ T51] Bluetooth: hci6: command tx timeout [ 346.003574][ T7527] team0: Port device team_slave_0 added [ 346.025924][ T7527] team0: Port device team_slave_1 added [ 346.194540][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.204805][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.233018][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.290948][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.301938][ T51] Bluetooth: hci6: command tx timeout [ 346.303301][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.328802][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.373293][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.793954][ T7757] loop2: detected capacity change from 0 to 8 [ 346.869096][ T7757] SQUASHFS error: Unable to read directory block [631:26] [ 347.434802][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.441994][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.471492][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.478683][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.541640][ T7527] hsr_slave_0: entered promiscuous mode [ 349.557438][ T7527] hsr_slave_1: entered promiscuous mode [ 349.569870][ T7527] debugfs: 'hsr0' already exists in 'hsr' [ 349.584156][ T7527] Cannot create hsr debugfs directory [ 349.874053][ T7783] loop4: detected capacity change from 0 to 1024 [ 349.884500][ T7785] loop2: detected capacity change from 0 to 24 [ 349.894709][ T7783] EXT4-fs: Ignoring removed orlov option [ 349.934090][ T7785] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 349.953343][ T7785] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 349.961964][ T7783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.260151][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 351.159377][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.215653][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.227728][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.235557][ T7656] bridge_slave_0: entered allmulticast mode [ 351.267978][ T7656] bridge_slave_0: entered promiscuous mode [ 351.903928][ T7811] loop2: detected capacity change from 0 to 512 [ 352.014256][ T7811] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.358: corrupted in-inode xattr: e_value out of bounds [ 352.121813][ T7811] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.131513][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 352.147196][ C0] EXT4-fs (loop2): initial error at time 1786980542: ext4_iget_extra_inode:5180: inode 15 [ 352.157235][ C0] EXT4-fs (loop2): last error at time 1786980542: ext4_iget_extra_inode:5180: inode 15 [ 352.180231][ T7811] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.358: couldn't read orphan inode 15 (err -117) [ 352.193326][ T7811] loop2: lost filesystem error report for type 5 error -117 [ 352.205805][ T7811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.261230][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.275893][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.296996][ T7656] bridge_slave_1: entered allmulticast mode [ 352.307968][ T7656] bridge_slave_1: entered promiscuous mode [ 353.288129][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.408704][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.419054][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.427536][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.437303][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.446015][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.495798][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.684688][ T7827] loop4: detected capacity change from 0 to 64 [ 354.278825][ T5610] Bluetooth: hci6: command 0x0405 tx timeout [ 354.631126][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.719518][ T6049] bridge_slave_1: left allmulticast mode [ 354.725951][ T6049] bridge_slave_1: left promiscuous mode [ 354.732144][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.750853][ T6049] bridge_slave_0: left allmulticast mode [ 354.756773][ T6049] bridge_slave_0: left promiscuous mode [ 354.763010][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.782872][ T6049] bridge_slave_1: left allmulticast mode [ 354.790185][ T6049] bridge_slave_1: left promiscuous mode [ 354.800357][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.831232][ T6049] bridge_slave_0: left allmulticast mode [ 354.848460][ T6049] bridge_slave_0: left promiscuous mode [ 354.863569][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.889116][ T5604] hfs: node 4:3 still has 1 user(s)! [ 355.585161][ T5610] Bluetooth: hci0: command tx timeout [ 356.613833][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.559153][ T7850] gfs2: not a GFS2 filesystem [ 357.584539][ T7850] hpfs: Bad magic ... probably not HPFS [ 357.771721][ T5610] Bluetooth: hci0: command tx timeout [ 357.936650][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.953990][ T6049] bond0 (unregistering): Released all slaves [ 358.227070][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.263115][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.297156][ T6049] bond0 (unregistering): Released all slaves [ 358.358523][ T7852] loop4: detected capacity change from 0 to 32768 [ 358.399829][ T7852] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.365 (7852) [ 358.563789][ T7656] team0: Port device team_slave_0 added [ 358.582582][ T7852] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 358.592754][ T7852] BTRFS info (device loop4): using crc32c checksum algorithm [ 358.600409][ T7852] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 358.764887][ T7852] BTRFS info (device loop4): rebuilding free space tree [ 358.846373][ T7852] BTRFS info (device loop4): disabling free space tree [ 358.853414][ T7852] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 358.865789][ T7852] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 358.889878][ T7852] BTRFS info (device loop4): enabling ssd optimizations [ 358.897780][ T7852] BTRFS info (device loop4): turning on async discard [ 358.904629][ T7852] BTRFS info (device loop4): enabling disk space caching [ 358.911752][ T7852] BTRFS info (device loop4): force clearing of disk cache [ 358.918881][ T7852] BTRFS info (device loop4): use zstd compression, level 3 [ 358.970913][ T7656] team0: Port device team_slave_1 added [ 359.019309][ T6049] hsr_slave_0: left promiscuous mode [ 359.053470][ T6049] hsr_slave_1: left promiscuous mode [ 359.079936][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.133253][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.189963][ T6049] hsr_slave_0: left promiscuous mode [ 359.759573][ T6049] hsr_slave_1: left promiscuous mode [ 359.790390][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.831355][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.838911][ T5610] Bluetooth: hci0: command tx timeout [ 359.945999][ T5604] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 360.127326][ T7883] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 361.951874][ T5610] Bluetooth: hci0: command tx timeout [ 362.435693][ T7908] hub 8-0:1.0: USB hub found [ 362.442104][ T7908] hub 8-0:1.0: 1 port detected [ 364.016272][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 364.058333][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 368.214737][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 368.234720][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 369.289675][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 369.531083][ T7937] loop4: detected capacity change from 0 to 40427 [ 369.547870][ T7937] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 369.555636][ T7937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 369.585100][ T7937] F2FS-fs (loop4): invalid crc value [ 369.672701][ T7937] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 369.700002][ T7937] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 369.707746][ T7937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 370.740485][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.770310][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.823016][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.836137][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.843357][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.972328][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.952013][ T7955] capability: warning: `syz.2.381' uses 32-bit capabilities (legacy support in use) [ 373.147205][ T7656] hsr_slave_0: entered promiscuous mode [ 373.205148][ T7656] hsr_slave_1: entered promiscuous mode [ 373.222423][ T7656] debugfs: 'hsr0' already exists in 'hsr' [ 373.237756][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.252717][ T7656] Cannot create hsr debugfs directory [ 373.272846][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.283247][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.301718][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.314218][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.933337][ T7971] loop4: detected capacity change from 0 to 256 [ 373.940474][ T7971] exfat: Deprecated parameter 'utf8' [ 373.945876][ T7971] exfat: Deprecated parameter 'namecase' [ 373.951662][ T7971] exfat: Deprecated parameter 'utf8' [ 373.975847][ T7971] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 375.443788][ T51] Bluetooth: hci2: command tx timeout [ 376.669963][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 377.511567][ T51] Bluetooth: hci2: command tx timeout [ 377.831094][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.839734][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.865359][ T8006] loop4: detected capacity change from 0 to 512 [ 378.959616][ T8006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.591694][ T51] Bluetooth: hci2: command tx timeout [ 380.009969][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.335905][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.359739][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.412184][ T7819] bridge_slave_0: entered allmulticast mode [ 380.426635][ T7819] bridge_slave_0: entered promiscuous mode [ 380.456123][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.475966][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.497262][ T7819] bridge_slave_1: entered allmulticast mode [ 380.525254][ T7819] bridge_slave_1: entered promiscuous mode [ 380.632324][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.707822][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.900289][ T7819] team0: Port device team_slave_0 added [ 380.985452][ T7819] team0: Port device team_slave_1 added [ 381.270886][ T8042] Bluetooth: MGMT ver 1.23 [ 381.300990][ T8043] loop4: detected capacity change from 0 to 16 [ 381.447856][ T8043] erofs (device loop4): too large lz4 pclusterblks 16832 [ 381.662421][ T51] Bluetooth: hci2: command tx timeout [ 382.004925][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.031229][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.080448][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.134913][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.294642][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.301058][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.336282][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.397367][ T8049] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5613] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8049] [ 382.454521][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.475812][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.507110][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.066437][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.311952][ T8057] 9p: Bad value for 'rfdno' [ 384.341404][ T7819] hsr_slave_0: entered promiscuous mode [ 384.348713][ T7819] hsr_slave_1: entered promiscuous mode [ 384.355839][ T7819] debugfs: 'hsr0' already exists in 'hsr' [ 384.362028][ T7819] Cannot create hsr debugfs directory [ 385.180694][ T5622] Bluetooth: hci4: command tx timeout [ 385.728123][ T8073] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 386.239458][ T8073] input: failed to attach handler evdev to device input6, error: -4 [ 387.281570][ T51] Bluetooth: hci4: command tx timeout [ 387.872602][ T8087] loop4: detected capacity change from 0 to 4096 [ 388.129977][ T8087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.371558][ T51] Bluetooth: hci4: command tx timeout [ 389.770161][ T5604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.123874][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.151816][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.171747][ T7958] bridge_slave_0: entered allmulticast mode [ 390.186830][ T7958] bridge_slave_0: entered promiscuous mode [ 390.408533][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.440003][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.462615][ T7958] bridge_slave_1: entered allmulticast mode [ 390.478464][ T7958] bridge_slave_1: entered promiscuous mode [ 391.269495][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.286787][ T6049] bridge_slave_1: left allmulticast mode [ 391.294309][ T6049] bridge_slave_1: left promiscuous mode [ 391.316273][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.355281][ T6049] bridge_slave_0: left allmulticast mode [ 391.389667][ T6049] bridge_slave_0: left promiscuous mode [ 391.413927][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.421714][ T51] Bluetooth: hci4: command tx timeout [ 391.516763][ T6049] bridge_slave_1: left allmulticast mode [ 391.545965][ T6049] bridge_slave_1: left promiscuous mode [ 391.589418][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.631917][ T8125] loop2: detected capacity change from 0 to 32768 [ 391.645455][ T8125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.403 (8125) [ 391.646292][ T6049] bridge_slave_0: left allmulticast mode [ 391.673031][ T6049] bridge_slave_0: left promiscuous mode [ 391.679070][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.719965][ T8125] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 391.731280][ T8125] BTRFS info (device loop2): using sha256 checksum algorithm [ 391.834878][ T8125] BTRFS info (device loop2): enabling ssd optimizations [ 391.841918][ T8125] BTRFS info (device loop2): turning on sync discard [ 391.848604][ T8125] BTRFS info (device loop2): enabling free space tree [ 391.855550][ T8125] BTRFS info (device loop2): use zlib compression, level 3 [ 392.292173][ T8149] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 392.874549][ T8148] loop4: detected capacity change from 0 to 4096 [ 392.907741][ T8148] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 392.954156][ T5613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 393.150349][ T8148] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 393.215957][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.216002][ T8148] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 393.577768][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.972175][ T6049] bond0 (unregistering): Released all slaves [ 394.488394][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.503086][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.515495][ T6049] bond0 (unregistering): Released all slaves [ 394.550941][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.655549][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20 [ 394.742086][ T6049] hsr_slave_0: left promiscuous mode [ 394.778843][ T6049] hsr_slave_1: left promiscuous mode [ 394.791395][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.831269][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.920606][ T6049] hsr_slave_0: left promiscuous mode [ 394.975743][ T6049] hsr_slave_1: left promiscuous mode [ 395.036407][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.125019][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.177859][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.229288][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.302610][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.315189][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.323029][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.709552][ T8171] o2cb: This node has not been configured. [ 396.715598][ T8171] o2cb: Cluster check failed. Fix errors before retrying. [ 396.723826][ T8171] (syz.4.407,8171,1):user_dlm_register:674 ERROR: status = -22 [ 396.731383][ T8171] (syz.4.407,8171,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 398.213186][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 398.296284][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 398.471029][ T5622] Bluetooth: hci5: command tx timeout [ 399.758697][ T8177] syz.4.410 (8177): drop_caches: 2 [ 400.060263][ T5622] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 400.554669][ T5622] Bluetooth: hci5: command 0x041b tx timeout [ 402.215150][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 402.247924][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 402.647917][ T5622] Bluetooth: hci5: command 0x041b tx timeout [ 403.527007][ T7958] team0: Port device team_slave_0 added [ 403.547309][ T7958] team0: Port device team_slave_1 added [ 404.044473][ T8212] loop2: detected capacity change from 0 to 2048 [ 404.355028][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.511630][ T8212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.524284][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.626290][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.703148][ T5622] Bluetooth: hci5: command 0x041b tx timeout [ 404.733995][ T8212] EXT4-fs (loop2): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 404.802054][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.834073][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.860272][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.905461][ T8212] EXT4-fs error (device loop2): __ext4_remount:6844: comm syz.2.418: Abort forced by user [ 404.942042][ T8212] EXT4-fs (loop2): Remounting filesystem read-only [ 404.967506][ T8212] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 405.166143][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 405.228804][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 405.447253][ T8233] tipc: Started in network mode [ 405.464886][ T8233] tipc: Node identity 4, cluster identity 4711 [ 405.478191][ T8233] tipc: Node number set to 4 [ 405.543480][ T7958] hsr_slave_0: entered promiscuous mode [ 405.570811][ T7958] hsr_slave_1: entered promiscuous mode [ 405.610893][ T7958] debugfs: 'hsr0' already exists in 'hsr' [ 405.645075][ T7958] Cannot create hsr debugfs directory [ 405.778188][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.835872][ T8253] loop2: detected capacity change from 0 to 32768 [ 406.851051][ T5622] Bluetooth: hci5: command 0x041b tx timeout [ 406.908561][ T8253] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 406.951307][ T8253] XFS (loop2): Ending clean mount [ 406.961163][ T8253] XFS (loop2): Quotacheck needed: Please wait. [ 407.014240][ T8253] XFS (loop2): Quotacheck: Done. [ 407.220509][ T31] audit: type=1800 audit(1786980597.924:189): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 407.553940][ T5613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 408.530547][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.555013][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.584349][ T8046] bridge_slave_0: entered allmulticast mode [ 408.608688][ T8046] bridge_slave_0: entered promiscuous mode [ 408.666667][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.688148][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.695993][ T8046] bridge_slave_1: entered allmulticast mode [ 408.707063][ T8046] bridge_slave_1: entered promiscuous mode [ 409.457560][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.486307][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.790601][ T8046] team0: Port device team_slave_0 added [ 409.803781][ T8046] team0: Port device team_slave_1 added [ 410.811404][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.821569][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.877977][ T8291] ubi0: attaching mtd0 [ 411.040857][ T8291] ubi0: scanning is finished [ 411.059801][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.213819][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.221932][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.261273][ T8291] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 412.261747][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.518494][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.530590][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.540684][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.553178][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.567539][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.893201][ T31] audit: type=1800 audit(1786980604.424:190): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.433" name="file0" dev="overlay" ino=804 res=0 errno=0 [ 414.249674][ T8046] hsr_slave_0: entered promiscuous mode [ 414.256554][ T8046] hsr_slave_1: entered promiscuous mode [ 414.263206][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 414.268961][ T8046] Cannot create hsr debugfs directory [ 414.645259][ T5622] Bluetooth: hci6: command tx timeout [ 416.708005][ T5622] Bluetooth: hci6: command tx timeout [ 417.008738][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 417.340953][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.357193][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.375715][ T8161] bridge_slave_0: entered allmulticast mode [ 417.394410][ T8161] bridge_slave_0: entered promiscuous mode [ 417.521340][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.531863][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.539123][ T8161] bridge_slave_1: entered allmulticast mode [ 417.549455][ T8161] bridge_slave_1: entered promiscuous mode [ 418.014682][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.487535][ T8353] sctp_transport_update_pmtu: 46 callbacks suppressed [ 418.487568][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.507192][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.519090][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.533849][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.558324][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.570761][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.582505][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.594952][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.607280][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.623442][ T8353] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 418.782021][ T5622] Bluetooth: hci6: command tx timeout [ 419.176439][ T7958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 419.670531][ T8359] ubi0: attaching mtd0 [ 419.691596][ T8359] ubi0: scanning is finished [ 420.265939][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.274936][ T7958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 420.295331][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.327931][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.393754][ T7958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 420.412878][ T8359] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 420.423944][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.435509][ T7958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 420.575523][ T7958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.874711][ T5622] Bluetooth: hci6: command tx timeout [ 421.705796][ T8161] team0: Port device team_slave_0 added [ 421.838479][ T8161] team0: Port device team_slave_1 added [ 422.653407][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.721350][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.907197][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.986942][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.022254][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.073712][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.084659][ T8380] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 423.262819][ T8161] hsr_slave_0: entered promiscuous mode [ 423.269637][ T8161] hsr_slave_1: entered promiscuous mode [ 423.277536][ T8161] debugfs: 'hsr0' already exists in 'hsr' [ 423.283447][ T8161] Cannot create hsr debugfs directory [ 423.674343][ T6049] bridge_slave_1: left allmulticast mode [ 423.680151][ T6049] bridge_slave_1: left promiscuous mode [ 423.689540][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.700404][ T6049] bridge_slave_0: left allmulticast mode [ 423.707917][ T6049] bridge_slave_0: left promiscuous mode [ 423.718610][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.796639][ T8387] loop4: detected capacity change from 0 to 32768 [ 423.832692][ T8387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.447 (8387) [ 423.948089][ T6049] bridge_slave_1: left allmulticast mode [ 423.955412][ T6049] bridge_slave_1: left promiscuous mode [ 423.964286][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.977854][ T6049] bridge_slave_0: left allmulticast mode [ 423.984400][ T6049] bridge_slave_0: left promiscuous mode [ 423.990233][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.004724][ T6049] bridge_slave_1: left allmulticast mode [ 424.010512][ T6049] bridge_slave_1: left promiscuous mode [ 424.017612][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.028303][ T6049] bridge_slave_0: left allmulticast mode [ 424.035241][ T8391] loop2: detected capacity change from 0 to 40427 [ 424.043536][ T6049] bridge_slave_0: left promiscuous mode [ 424.049133][ T8391] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 424.052551][ T8387] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.056946][ T8391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 424.067493][ T8387] BTRFS info (device loop4): using sha256 checksum algorithm [ 424.084799][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.097653][ T8391] F2FS-fs (loop2): invalid crc value [ 424.179824][ T8391] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 424.196072][ T8391] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 424.204268][ T8391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 424.291091][ T8387] BTRFS info (device loop4): enabling ssd optimizations [ 424.298191][ T8387] BTRFS info (device loop4): turning on sync discard [ 424.304977][ T8387] BTRFS info (device loop4): enabling free space tree [ 424.413662][ T31] audit: type=1800 audit(1786980615.114:191): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.447" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 426.165379][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.443435][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.661271][ T6049] bond0 (unregistering): Released all slaves [ 427.114836][ T5604] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.399896][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.447935][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.476675][ T6049] bond0 (unregistering): Released all slaves [ 429.596412][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.625451][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.639379][ T6049] bond0 (unregistering): Released all slaves [ 430.079763][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.103381][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.124598][ T8303] bridge_slave_0: entered allmulticast mode [ 430.146489][ T8303] bridge_slave_0: entered promiscuous mode [ 430.192435][ T6049] hsr_slave_0: left promiscuous mode [ 430.205043][ T6049] hsr_slave_1: left promiscuous mode [ 430.222613][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.242705][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.275381][ T6049] hsr_slave_0: left promiscuous mode [ 430.288809][ T6049] hsr_slave_1: left promiscuous mode [ 430.302750][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.352880][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.409572][ T6049] hsr_slave_0: left promiscuous mode [ 430.424051][ T6049] hsr_slave_1: left promiscuous mode [ 430.440218][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.472617][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.807974][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 430.830043][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 431.106317][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 431.139914][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 431.400102][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 431.417619][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 431.643170][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.674321][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.687435][ T8303] bridge_slave_1: entered allmulticast mode [ 431.704164][ T8303] bridge_slave_1: entered promiscuous mode [ 431.719921][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.732782][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.742960][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.752507][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.762274][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.831652][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.965529][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.076367][ T8303] team0: Port device team_slave_0 added [ 432.142438][ T8303] team0: Port device team_slave_1 added [ 432.217191][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.236766][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.265438][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.279449][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.288376][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.315127][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.448586][ T8303] hsr_slave_0: entered promiscuous mode [ 432.463474][ T8303] hsr_slave_1: entered promiscuous mode [ 432.994386][ T8046] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 433.014509][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.022696][ T8046] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 433.035531][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.076788][ T8046] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 433.109508][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.180066][ T8046] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 433.193137][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.822005][ T51] Bluetooth: hci0: command tx timeout [ 433.984952][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.998022][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.007370][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.016594][ T8428] bridge_slave_0: entered allmulticast mode [ 434.025845][ T8428] bridge_slave_0: entered promiscuous mode [ 434.046309][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.060032][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.067789][ T8428] bridge_slave_1: entered allmulticast mode [ 434.077849][ T8428] bridge_slave_1: entered promiscuous mode [ 434.183785][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.251247][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.267107][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.360878][ T8428] team0: Port device team_slave_0 added [ 434.404625][ T8428] team0: Port device team_slave_1 added [ 434.453945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.461133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.491097][ T6049] bridge_slave_1: left allmulticast mode [ 434.497851][ T6049] bridge_slave_1: left promiscuous mode [ 434.504139][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.516100][ T6049] bridge_slave_0: left allmulticast mode [ 434.522240][ T6049] bridge_slave_0: left promiscuous mode [ 434.528010][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.550448][ T6049] bridge_slave_1: left allmulticast mode [ 434.556433][ T6049] bridge_slave_1: left promiscuous mode [ 434.563492][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.576532][ T6049] bridge_slave_0: left allmulticast mode [ 434.582351][ T6049] bridge_slave_0: left promiscuous mode [ 434.588113][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.713509][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.727333][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.738753][ T6049] bond0 (unregistering): Released all slaves [ 434.819814][ T6049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.837792][ T6049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.848536][ T6049] bond0 (unregistering): Released all slaves [ 434.863565][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.870663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.880008][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.887798][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.914201][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.940208][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.953412][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.980054][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.056026][ T6049] hsr_slave_0: left promiscuous mode [ 435.072739][ T6049] hsr_slave_1: left promiscuous mode [ 435.078766][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.106424][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.121062][ T6049] hsr_slave_0: left promiscuous mode [ 435.128141][ T6049] hsr_slave_1: left promiscuous mode [ 435.136427][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.144633][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.353607][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 435.380938][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 435.755585][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 435.789663][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 435.901788][ T51] Bluetooth: hci0: command tx timeout [ 436.139237][ T8428] hsr_slave_0: entered promiscuous mode [ 436.146910][ T8428] hsr_slave_1: entered promiscuous mode [ 436.153642][ T8428] debugfs: 'hsr0' already exists in 'hsr' [ 436.159376][ T8428] Cannot create hsr debugfs directory [ 436.359505][ T8161] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.393857][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.422065][ T8046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.435360][ T8161] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.457919][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.505454][ T8161] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.528106][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.536322][ T8161] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.554208][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.877592][ T8303] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 436.904468][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.924916][ T8303] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 436.945227][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.960399][ T8303] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 436.986878][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.032974][ T8303] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 437.044191][ T8303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.204204][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.289401][ T8161] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.371214][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.378393][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.420396][ T6321] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.427575][ T6321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.630872][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.686609][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.808938][ T8303] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.837057][ T8428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 437.849935][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.876885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.884049][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.925098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.932294][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.949304][ T8428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 437.985515][ T51] Bluetooth: hci0: command tx timeout [ 438.019118][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.030567][ T8428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 438.052394][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.070712][ T8428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 438.101130][ T8428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.433801][ T8046] veth0_vlan: entered promiscuous mode [ 438.492300][ T8046] veth1_vlan: entered promiscuous mode [ 438.545354][ T8428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.655180][ T8046] veth0_macvtap: entered promiscuous mode [ 438.680673][ T8428] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.714852][ T8046] veth1_macvtap: entered promiscuous mode [ 438.771286][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.778506][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.793970][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.801118][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.930093][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.976097][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.988549][ T8161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.264828][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.274958][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.303128][ T1002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.340461][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.370748][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.388032][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.408907][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.549241][ T6161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.577051][ T6161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.595127][ T6321] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.707837][ T8303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.061838][ T5622] Bluetooth: hci0: command tx timeout [ 441.296052][ T8161] veth0_vlan: entered promiscuous mode [ 441.431096][ T8161] veth1_vlan: entered promiscuous mode [ 441.615122][ T8161] veth0_macvtap: entered promiscuous mode [ 441.657385][ T8161] veth1_macvtap: entered promiscuous mode [ 441.686185][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.698522][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.910734][ T8657] ubi0: attaching mtd0 [ 442.245261][ T8657] ubi0: scanning is finished [ 442.395830][ T8651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.475327][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.515013][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.575091][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.601596][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.635917][ T8657] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 444.882170][ T8679] hub 8-0:1.0: USB hub found [ 444.888728][ T8679] hub 8-0:1.0: 1 port detected [ 445.449705][ T8428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.326085][ T8695] loop4: detected capacity change from 0 to 512 [ 447.359629][ T8695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.446223][ T8695] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 447.805989][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.881218][ T8303] veth0_vlan: entered promiscuous mode [ 448.167293][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.409857][ T8694] loop4: detected capacity change from 0 to 1024 [ 448.668919][ T8691] loop8: detected capacity change from 0 to 4096 [ 448.698623][ T8303] veth1_vlan: entered promiscuous mode [ 449.876701][ T8694] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 450.033520][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.097298][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.186582][ T8303] veth0_macvtap: entered promiscuous mode [ 450.478644][ T8303] veth1_macvtap: entered promiscuous mode [ 450.906887][ T8718] loop2: detected capacity change from 0 to 512 [ 450.929592][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.526988][ T8718] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.467: invalid block [ 451.539174][ T8718] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 451.541498][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 451.557161][ C0] EXT4-fs (loop2): initial error at time 1786980642: ext4_get_branch:178: inode 11: block 4294967295 [ 451.568088][ C0] EXT4-fs (loop2): last error at time 1786980642: ext4_get_branch:178: inode 11: block 4294967295 [ 451.579450][ T8718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.467: invalid indirect mapped block 4294967295 (level 1) [ 451.593793][ T8718] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 451.612867][ T8718] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.467: invalid indirect mapped block 4294967295 (level 1) [ 451.636010][ T8718] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 451.638919][ T8718] EXT4-fs (loop2): 2 truncates cleaned up [ 451.659686][ T8718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.741428][ T8303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.989560][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.005995][ T6162] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.332266][ T6321] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.368765][ T6321] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.378233][ T6321] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.859396][ T8741] Mass Storage Function, version: 2009/09/11 [ 453.867160][ T8741] LUN: removable file: (no medium) [ 454.041783][ T31] audit: type=1800 audit(1786980644.694:192): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.470" name="cdrom" dev="configfs" ino=23514 res=0 errno=0 [ 454.629659][ T8742] loop6: detected capacity change from 0 to 32768 [ 454.672243][ T8746] hub 8-0:1.0: USB hub found [ 454.681298][ T8746] hub 8-0:1.0: 1 port detected [ 455.322193][ T8742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.469 (8742) [ 455.397956][ T8742] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.408105][ T8742] BTRFS info (device loop6): using sha256 checksum algorithm [ 455.586495][ T8742] BTRFS info (device loop6): enabling ssd optimizations [ 455.593546][ T8742] BTRFS info (device loop6): turning on sync discard [ 455.600511][ T8742] BTRFS info (device loop6): enabling free space tree [ 455.607371][ T8742] BTRFS info (device loop6): use zlib compression, level 3 [ 455.626028][ T8428] veth0_vlan: entered promiscuous mode [ 457.427735][ T8736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.647761][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.472'. [ 457.652270][ T8736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.108481][ T8161] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.112751][ T8428] veth1_vlan: entered promiscuous mode [ 458.238182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.261221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.791763][ T8428] veth0_macvtap: entered promiscuous mode [ 459.282489][ T8428] veth1_macvtap: entered promiscuous mode [ 460.521060][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.605176][ T8428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.714129][ T8726] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.766059][ T8726] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.136916][ T8726] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.152124][ T8726] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.574070][ T8798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 464.505558][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.483'. [ 465.185464][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.221105][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.512235][ T8832] xt_hashlimit: max too large, truncated to 1048576 [ 466.292130][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.530096][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.332165][ T8842] smc: net device vlan1 applied user defined pnetid SYZ2 [ 468.111806][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 468.123131][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 468.133641][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0cab instead [ 468.144219][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xd286 instead [ 468.154753][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 468.165242][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 468.176099][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 468.186706][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 468.198866][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 468.210585][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 468.220977][ T8853] jffs2: Further such events for this erase block will not be printed [ 468.236142][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 468.246684][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 468.257270][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0cab instead [ 468.267945][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xd286 instead [ 468.278464][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 468.289008][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 468.301107][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 468.312703][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 468.323286][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 468.333864][ T8853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 468.344315][ T8853] jffs2: Further such events for this erase block will not be printed [ 468.358081][ T8853] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 468.367457][ T8853] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 469.857618][ T8863] VFS: file-max limit 0 reached [ 471.736115][ T8880] loop6: detected capacity change from 0 to 32768 [ 471.758415][ T8880] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.493 (8880) [ 471.820067][ T8880] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 471.830311][ T8880] BTRFS info (device loop6): using crc32c checksum algorithm [ 471.837729][ T8880] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 473.057085][ T8880] BTRFS info (device loop6): rebuilding free space tree [ 473.123653][ T8880] BTRFS info (device loop6): disabling free space tree [ 473.130667][ T8880] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 473.141673][ T8880] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 473.362506][ T8880] BTRFS info (device loop6): enabling ssd optimizations [ 473.369507][ T8880] BTRFS info (device loop6): turning on async discard [ 473.376337][ T8880] BTRFS info (device loop6): enabling disk space caching [ 473.383611][ T8880] BTRFS info (device loop6): force clearing of disk cache [ 473.390724][ T8880] BTRFS info (device loop6): use zstd compression, level 3 [ 473.974862][ T29] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 474.507672][ T29] usb 10-1: not running at top speed; connect to a high speed hub [ 474.861646][ T29] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 474.887198][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.911786][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.082131][ T8161] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 475.146525][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.165796][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.174483][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.189296][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.204281][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.502335][ T8937] loop2: detected capacity change from 0 to 40427 [ 475.531102][ T8937] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 475.539891][ T8937] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 475.556029][ T8937] F2FS-fs (loop2): invalid crc value [ 475.575082][ T29] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 475.760442][ T8937] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 475.781894][ T8937] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 475.788937][ T8937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 475.846767][ T29] uvcvideo 10-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 476.142112][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 476.159922][ T8937] syz.2.502: attempt to access beyond end of device [ 476.159922][ T8937] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 476.227587][ T29] videodev: could not get a free minor [ 476.251537][ T29] uvcvideo 10-1:1.1: Failed to register meta-cap device (-23). [ 476.455000][ T5613] syz-executor: attempt to access beyond end of device [ 476.455000][ T5613] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 476.489472][ T5848] usb 10-1: USB disconnect, device number 2 [ 477.480946][ T5622] Bluetooth: hci2: command tx timeout [ 478.093285][ T8954] sctp: [Deprecated]: syz.6.501 (pid 8954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.093285][ T8954] Use struct sctp_sack_info instead [ 479.291534][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 479.291577][ T5613] Tainted: [L]=SOFTLOCKUP [ 479.291587][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 479.291603][ T5613] Call Trace: [ 479.291613][ T5613] [ 479.291623][ T5613] dump_stack_lvl+0xe8/0x150 [ 479.291672][ T5613] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 479.291710][ T5613] f2fs_write_end_io+0x124b/0x1710 [ 479.291770][ T5613] __submit_merged_bio+0x258/0x6a0 [ 479.291800][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.291831][ T5613] ? rcu_is_watching+0x15/0xb0 [ 479.291877][ T5613] __submit_merged_write_cond+0x3c9/0x4e0 [ 479.291923][ T5613] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 479.291969][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292010][ T5613] f2fs_write_data_pages+0x2a27/0x36f0 [ 479.292044][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292074][ T5613] ? __lock_acquire+0x683/0x2cf0 [ 479.292148][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 479.292233][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292264][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292294][ T5613] ? __bfs+0x153/0x290 [ 479.292327][ T5613] ? __pfx_hlock_conflict+0x10/0x10 [ 479.292373][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292415][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292445][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292475][ T5613] ? __lock_acquire+0x13e8/0x2cf0 [ 479.292540][ T5613] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 479.292577][ T5613] do_writepages+0x338/0x560 [ 479.292616][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292668][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292703][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292733][ T5613] ? do_raw_spin_unlock+0xf5/0x210 [ 479.292767][ T5613] filemap_fdatawrite+0x1e9/0x2f0 [ 479.292809][ T5613] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 479.292888][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292927][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.292962][ T5613] ? do_raw_spin_unlock+0xf5/0x210 [ 479.292995][ T5613] f2fs_sync_dirty_inodes+0x30e/0x830 [ 479.293051][ T5613] f2fs_write_checkpoint+0xa3d/0x2710 [ 479.293088][ T5613] ? __lock_acquire+0x683/0x2cf0 [ 479.293158][ T5613] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 479.293195][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.293286][ T5613] kill_f2fs_super+0x2f6/0x700 [ 479.293331][ T5613] ? __pfx_kill_f2fs_super+0x10/0x10 [ 479.293381][ T5613] ? call_rcu+0x64b/0x8b0 [ 479.293420][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.293450][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 479.293480][ T5613] ? srso_alias_return_thunk+0x5/0xfbef5 [ 479.293525][ T5613] deactivate_locked_super+0xbc/0x130 [ 479.293566][ T5613] cleanup_mnt+0x3d3/0x460 [ 479.293611][ T5613] task_work_run+0x1d9/0x270 [ 479.293663][ T5613] ? __pfx_task_work_run+0x10/0x10 [ 479.293715][ T5613] exit_to_user_mode_loop+0x1fa/0x750 [ 479.293749][ T5613] ? rcu_is_watching+0x15/0xb0 [ 479.293790][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.293818][ T5613] do_syscall_64+0x353/0x580 [ 479.293848][ T5613] ? trace_irq_disable+0x3b/0x140 [ 479.293887][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.293914][ T5613] RIP: 0033:0x7f64d0d9f317 [ 479.293937][ T5613] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 479.293959][ T5613] RSP: 002b:00007ffe72dd2f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 479.293986][ T5613] RAX: 0000000000000000 RBX: 00007f64d0e34474 RCX: 00007f64d0d9f317 [ 479.294003][ T5613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72dd3000 [ 479.294020][ T5613] RBP: 00007ffe72dd3000 R08: 00007ffe72dd4000 R09: 00000000ffffffff [ 479.294038][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72dd4090 [ 479.294055][ T5613] R13: 00007f64d0e34474 R14: 000000000007440f R15: 00007ffe72dd40d0 [ 479.294094][ T5613] [ 479.789053][ T5622] Bluetooth: hci2: command tx timeout [ 479.798918][ T5613] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 481.854064][ T51] Bluetooth: hci2: command tx timeout [ 484.489283][ T51] Bluetooth: hci2: command tx timeout [ 485.551766][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 486.136212][ T29] usb 10-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 486.206667][ T29] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.281667][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.293186][ T1018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.335923][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 486.393455][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.467383][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.148693][ T1018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.847685][ T9] usb 10-1: USB disconnect, device number 3 [ 489.898042][ T1018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.095439][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 491.181735][ T1018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.439766][ T9023] xt_hashlimit: max too large, truncated to 1048576 [ 492.428831][ T9031] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input8 [ 492.685351][ T9036] loop7: detected capacity change from 0 to 128 [ 496.831155][ T5733] IPVS: starting estimator thread 0... [ 496.956960][ T9051] IPVS: using max 26 ests per chain, 62400 per kthread [ 497.033269][ T1018] bridge_slave_1: left allmulticast mode [ 497.208450][ T9056] gadgetfs: bound to dummy_udc driver [ 497.234858][ T9057] binder: 9054:9057 ioctl c0306201 0 returned -14 [ 497.438942][ T1018] bridge_slave_1: left promiscuous mode [ 497.541691][ T5733] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 497.586598][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.722637][ C1] gadgetfs: connected [ 497.729370][ T5733] gadgetfs: disconnected [ 498.136735][ C1] gadgetfs: connected [ 498.224537][ T1018] bridge_slave_0: left allmulticast mode [ 498.262391][ T9054] gadgetfs: suspended from state 3 [ 498.267674][ T9054] gadgetfs: disconnected [ 498.302983][ T1018] bridge_slave_0: left promiscuous mode [ 498.338312][ T5733] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 498.388241][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.732396][ T5733] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 498.750679][ T5733] usb 2-1: can't read configurations, error -71 [ 499.140669][ T9067] loop7: detected capacity change from 0 to 64 [ 499.409872][ T9067] MINIX-fs: bad superblock [ 500.440853][ T9078] loop7: detected capacity change from 0 to 1024 [ 500.710855][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.908243][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.378865][ T9083] loop6: detected capacity change from 0 to 64 [ 504.307832][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.532'. [ 505.624507][ T9106] hub 8-0:1.0: USB hub found [ 505.629484][ T9106] hub 8-0:1.0: 1 port detected [ 505.710388][ T1018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.788576][ T1018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.834491][ T1018] bond0 (unregistering): Released all slaves [ 506.565381][ T9115] [ 506.567715][ T9115] ====================================================== [ 506.574704][ T9115] WARNING: possible circular locking dependency detected [ 506.581695][ T9115] syzkaller #0 Tainted: G L [ 506.587642][ T9115] ------------------------------------------------------ [ 506.594633][ T9115] syz.9.535/9115 is trying to acquire lock: [ 506.600507][ T9115] ffffffff8f9eb768 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 506.611379][ T9115] [ 506.611379][ T9115] but task is already holding lock: [ 506.618718][ T9115] ffff88803207b570 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x1cc/0x620 [ 506.627939][ T9115] [ 506.627939][ T9115] which lock already depends on the new lock. [ 506.627939][ T9115] [ 506.638311][ T9115] [ 506.638311][ T9115] the existing dependency chain (in reverse order) is: [ 506.647296][ T9115] [ 506.647296][ T9115] -> #3 (&p->frag_sem){++++}-{4:4}: [ 506.654665][ T9115] down_write_killable+0xa6/0x240 [ 506.660200][ T9115] configfs_rmdir+0x3b0/0x950 [ 506.665376][ T9115] vfs_rmdir+0x3e6/0x6a0 [ 506.670123][ T9115] filename_rmdir+0x292/0x520 [ 506.675299][ T9115] __se_sys_unlinkat+0x71/0x1a0 [ 506.680648][ T9115] do_syscall_64+0x174/0x580 [ 506.685740][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.692134][ T9115] [ 506.692134][ T9115] -> #2 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 506.700820][ T9115] down_write+0x96/0x200 [ 506.705569][ T9115] configfs_depend_item_unlocked+0x153/0x420 [ 506.712050][ T9115] usbg_make_tpg+0x1f6/0x590 [ 506.717143][ T9115] target_fabric_make_tpg+0xa8/0x6d0 [ 506.722937][ T9115] configfs_mkdir+0x4f6/0x9e0 [ 506.728109][ T9115] vfs_mkdir+0x406/0x620 [ 506.732866][ T9115] filename_mkdirat+0x285/0x510 [ 506.738213][ T9115] __se_sys_mkdirat+0x35/0x150 [ 506.743472][ T9115] do_syscall_64+0x174/0x580 [ 506.748563][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.754954][ T9115] [ 506.754954][ T9115] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 506.762584][ T9115] __mutex_lock+0x19d/0x1550 [ 506.767685][ T9115] tcm_set_name+0x2b/0xd0 [ 506.772538][ T9115] function_make+0x1a8/0x360 [ 506.777631][ T9115] configfs_mkdir+0x4f6/0x9e0 [ 506.782820][ T9115] vfs_mkdir+0x406/0x620 [ 506.787559][ T9115] filename_mkdirat+0x285/0x510 [ 506.792904][ T9115] __se_sys_mkdirat+0x35/0x150 [ 506.798167][ T9115] do_syscall_64+0x174/0x580 [ 506.803261][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.809678][ T9115] [ 506.809678][ T9115] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 506.817917][ T9115] __lock_acquire+0x1520/0x2cf0 [ 506.823288][ T9115] lock_acquire+0x106/0x350 [ 506.828298][ T9115] __mutex_lock+0x19d/0x1550 [ 506.833390][ T9115] uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 506.839789][ T9115] configfs_read_iter+0x2b7/0x620 [ 506.845323][ T9115] __kernel_read+0x4ca/0x960 [ 506.850422][ T9115] integrity_kernel_read+0x89/0xd0 [ 506.856045][ T9115] ima_calc_file_hash+0x451/0x890 [ 506.861587][ T9115] ima_collect_measurement+0x51b/0xa00 [ 506.867564][ T9115] process_measurement+0x1272/0x1c10 [ 506.873354][ T9115] ima_file_check+0xe1/0x130 [ 506.878450][ T9115] security_file_post_open+0xb3/0x260 [ 506.884329][ T9115] path_openat+0x2e90/0x3830 [ 506.889428][ T9115] do_file_open+0x23e/0x4a0 [ 506.894437][ T9115] do_sys_openat2+0x115/0x200 [ 506.899616][ T9115] __x64_sys_openat+0x138/0x170 [ 506.904986][ T9115] do_syscall_64+0x174/0x580 [ 506.910081][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.916474][ T9115] [ 506.916474][ T9115] other info that might help us debug this: [ 506.916474][ T9115] [ 506.926677][ T9115] Chain exists of: [ 506.926677][ T9115] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#27 --> &p->frag_sem [ 506.926677][ T9115] [ 506.941103][ T9115] Possible unsafe locking scenario: [ 506.941103][ T9115] [ 506.948531][ T9115] CPU0 CPU1 [ 506.953871][ T9115] ---- ---- [ 506.959207][ T9115] rlock(&p->frag_sem); [ 506.963428][ T9115] lock(&sb->s_type->i_mutex_key#27); [ 506.971394][ T9115] lock(&p->frag_sem); [ 506.978060][ T9115] lock(gadget_subsys.su_mutex); [ 506.983066][ T9115] [ 506.983066][ T9115] *** DEADLOCK *** [ 506.983066][ T9115] [ 506.991178][ T9115] 3 locks held by syz.9.535/9115: [ 506.996172][ T9115] #0: ffff88807ddab480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 507.007227][ T9115] #1: ffff88801f7dd080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x70/0x620 [ 507.016983][ T9115] #2: ffff88803207b570 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x1cc/0x620 [ 507.026648][ T9115] [ 507.026648][ T9115] stack backtrace: [ 507.032521][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.9.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.032546][ T9115] Tainted: [L]=SOFTLOCKUP [ 507.032553][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 507.032564][ T9115] Call Trace: [ 507.032573][ T9115] [ 507.032581][ T9115] dump_stack_lvl+0xe8/0x150 [ 507.032610][ T9115] print_circular_bug+0x2e1/0x300 [ 507.032643][ T9115] check_noncircular+0x12e/0x150 [ 507.032693][ T9115] __lock_acquire+0x1520/0x2cf0 [ 507.032720][ T9115] ? __pfx_stack_trace_save+0x10/0x10 [ 507.032743][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.032765][ T9115] ? stack_depot_save_flags+0x33/0x800 [ 507.032792][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.032813][ T9115] ? kasan_save_track+0x4f/0x80 [ 507.032836][ T9115] ? kasan_save_track+0x3e/0x80 [ 507.032858][ T9115] ? __kasan_kmalloc+0x93/0xb0 [ 507.032882][ T9115] ? __kmalloc_cache_noprof+0x32d/0x660 [ 507.032907][ T9115] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 507.032933][ T9115] lock_acquire+0x106/0x350 [ 507.032957][ T9115] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 507.032985][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033010][ T9115] __mutex_lock+0x19d/0x1550 [ 507.033033][ T9115] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 507.033063][ T9115] ? uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 507.033089][ T9115] ? __pfx___mutex_lock+0x10/0x10 [ 507.033112][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033136][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033161][ T9115] uvcg_mjpeg_bma_controls_show+0x4d/0x140 [ 507.033187][ T9115] ? __pfx_uvcg_mjpeg_bma_controls_show+0x10/0x10 [ 507.033214][ T9115] configfs_read_iter+0x2b7/0x620 [ 507.033245][ T9115] __kernel_read+0x4ca/0x960 [ 507.033275][ T9115] ? __pfx___kernel_read+0x10/0x10 [ 507.033313][ T9115] integrity_kernel_read+0x89/0xd0 [ 507.033333][ T9115] ? __pfx_integrity_kernel_read+0x10/0x10 [ 507.033353][ T9115] ? ima_calc_file_hash+0x40f/0x890 [ 507.033377][ T9115] ? ima_calc_file_hash+0x40f/0x890 [ 507.033405][ T9115] ima_calc_file_hash+0x451/0x890 [ 507.033433][ T9115] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 507.033473][ T9115] ? __entry_text_end+0x102035/0x102039 [ 507.033495][ T9115] ? generic_fillattr+0x575/0x840 [ 507.033521][ T9115] ima_collect_measurement+0x51b/0xa00 [ 507.033551][ T9115] ? __pfx_ima_collect_measurement+0x10/0x10 [ 507.033582][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033603][ T9115] ? trace_contention_end+0x3d/0x140 [ 507.033633][ T9115] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 507.033663][ T9115] process_measurement+0x1272/0x1c10 [ 507.033695][ T9115] ? __pfx_process_measurement+0x10/0x10 [ 507.033735][ T9115] ? __pfx___up_read+0x10/0x10 [ 507.033751][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033778][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033802][ T9115] ima_file_check+0xe1/0x130 [ 507.033826][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.033847][ T9115] ? do_dentry_open+0xd21/0x1380 [ 507.033869][ T9115] ? __pfx_ima_file_check+0x10/0x10 [ 507.033897][ T9115] security_file_post_open+0xb3/0x260 [ 507.033925][ T9115] path_openat+0x2e90/0x3830 [ 507.033969][ T9115] do_file_open+0x23e/0x4a0 [ 507.033999][ T9115] ? __pfx_do_file_open+0x10/0x10 [ 507.034036][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.034058][ T9115] ? _raw_spin_unlock+0x28/0x50 [ 507.034074][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.034096][ T9115] ? alloc_fd+0x651/0x6c0 [ 507.034122][ T9115] do_sys_openat2+0x115/0x200 [ 507.034145][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.034167][ T9115] ? __se_sys_futex+0x3a8/0x450 [ 507.034196][ T9115] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.034222][ T9115] ? rcu_is_watching+0x15/0xb0 [ 507.034250][ T9115] ? srso_alias_return_thunk+0x5/0xfbef5 [ 507.034273][ T9115] __x64_sys_openat+0x138/0x170 [ 507.034298][ T9115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.034317][ T9115] do_syscall_64+0x174/0x580 [ 507.034341][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.034361][ T9115] RIP: 0033:0x7fc9faf9e0d9 [ 507.034378][ T9115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.034394][ T9115] RSP: 002b:00007fc9fbdd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 507.034413][ T9115] RAX: ffffffffffffffda RBX: 00007fc9fb226180 RCX: 00007fc9faf9e0d9 [ 507.034427][ T9115] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 507.034440][ T9115] RBP: 00007fc9fb035024 R08: 0000000000000000 R09: 0000000000000000 [ 507.034452][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.034463][ T9115] R13: 00007fc9fb226218 R14: 00007fc9fb226180 R15: 00007ffe7532db78 [ 507.034484][ T9115] [ 507.666785][ T31] audit: type=1326 audit(1786980697.264:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.9.535" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9faf9e0d9 code=0x7fc00000 [ 508.637304][ T31] audit: type=1800 audit(1786980698.204:194): pid=9115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.535" name="bmaControls" dev="configfs" ino=24282 res=0 errno=0 [ 508.867367][ T31] audit: type=1326 audit(1786980698.444:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9109 comm="syz.9.535" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9faf3f459 code=0x7fc00000 [ 509.395717][ T1018] hsr_slave_0: left promiscuous mode [ 509.403129][ T1018] hsr_slave_1: left promiscuous mode [ 509.408972][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.416618][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.428257][ T1018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.436531][ T1018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.448043][ T1018] veth1_macvtap: left promiscuous mode [ 509.454745][ T1018] veth0_macvtap: left promiscuous mode [ 509.460320][ T1018] veth1_vlan: left promiscuous mode [ 509.467950][ T1018] veth0_vlan: left promiscuous mode [ 509.630185][ T1018] team0 (unregistering): Port device team_slave_1 removed [ 509.642710][ T1018] team0 (unregistering): Port device team_slave_0 removed [ 509.743258][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.750915][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.758937][ T8934] bridge_slave_0: entered allmulticast mode [ 509.766509][ T8934] bridge_slave_0: entered promiscuous mode [ 509.775263][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.796238][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.811985][ T8934] bridge_slave_1: entered allmulticast mode [ 509.825768][ T8934] bridge_slave_1: entered promiscuous mode [ 509.852447][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.864786][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.912223][ T8934] team0: Port device team_slave_0 added [ 509.932566][ T8934] team0: Port device team_slave_1 added [ 509.968049][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.976929][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.003707][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.018706][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.026421][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.059084][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.116965][ T8934] hsr_slave_0: entered promiscuous mode [ 510.124980][ T8934] hsr_slave_1: entered promiscuous mode [ 510.131186][ T8934] debugfs: 'hsr0' already exists in 'hsr' [ 510.138267][ T8934] Cannot create hsr debugfs directory [ 510.494512][ T8934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.522435][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.530398][ T8934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.539726][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.547808][ T8934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.557984][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.566085][ T8934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.576005][ T8934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.654253][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.680998][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.703120][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.710290][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.744816][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.752015][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.184409][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.255882][ T8934] veth0_vlan: entered promiscuous mode [ 511.270489][ T8934] veth1_vlan: entered promiscuous mode [ 511.307852][ T8934] veth0_macvtap: entered promiscuous mode [ 511.320234][ T8934] veth1_macvtap: entered promiscuous mode [ 511.340091][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.356693][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.410403][ T8934] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 511.441196][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.452566][ T8934] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 511.464318][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.491955][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.508902][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.519443][ T1002] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.521125][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.536497][ T8736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.561632][ T6437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.364032][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17