last executing test programs: 56.511184857s ago: executing program 2 (id=49): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) truncate(&(0x7f0000000080)='./file0\x00', 0x81) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10b002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r4, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 51.411326443s ago: executing program 2 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 49.990835563s ago: executing program 2 (id=61): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_io_uring_setup(0x4276, 0x0, &(0x7f0000000140)=0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x2, 0x0, 0x1, 0x0) socket(0x8, 0x3, 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) syz_open_dev$sg(&(0x7f0000000180), 0x6, 0x8000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_submit(r2, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 46.360154525s ago: executing program 2 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x19) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) move_pages(0xffffffffffffffff, 0x3, &(0x7f0000000400)=[&(0x7f00005d7000/0x1000)=nil, &(0x7f000057f000/0x2000)=nil, &(0x7f0000110000/0x4000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0], 0x6) read$msr(r0, &(0x7f0000000580)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x40}, 0x20008840) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x8, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x2}, r5, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r5, 0x0, 0x1, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4, 0x10, 0xffffffffffffffff, 0x80000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 43.215208573s ago: executing program 2 (id=77): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES8=r2, @ANYRESOCT=r2], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x73c5, &(0x7f0000000a80)={0x0, 0x64d, 0x1084, 0x3, 0x4c}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x19, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x40086603, &(0x7f0000000040)) 41.58147045s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x0, 0x474, &(0x7f00000000c0)="$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") getdents64(r6, &(0x7f0000000540)=""/201, 0xc9) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close(r7) 26.459163899s ago: executing program 32 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x0, 0x474, &(0x7f00000000c0)="$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") getdents64(r6, &(0x7f0000000540)=""/201, 0xc9) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close(r7) 19.054666036s ago: executing program 3 (id=143): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x4, 0xb) r1 = syz_open_dev$video(0x0, 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x1) 17.481358323s ago: executing program 3 (id=146): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x8, 0x0, 0x0}}, 0x34) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r6 = accept4(r2, 0x0, &(0x7f0000000000), 0x800) setsockopt$inet6_int(r6, 0x29, 0xcf, &(0x7f0000000040)=0x401, 0x4) kexec_load(0x5, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0), 0x0, 0x0, 0x8000}], 0x3e0000) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 14.160490396s ago: executing program 1 (id=150): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="00000000000000000a000100aa"], 0x2c}}, 0x0) 12.681181877s ago: executing program 3 (id=152): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x80) fcntl$setstatus(r3, 0x4, 0x2c00) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0xfffffffffffffffd, {}, 0xfe}, 0x18) sendmmsg(r2, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can, 0x80, 0x0}}], 0x1, 0x8084) 11.630802157s ago: executing program 3 (id=153): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4, 0xd, 0x1}, 0x10) 11.553791958s ago: executing program 4 (id=155): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}]}]}}]}, 0x43c}}, 0x4000) 11.20671236s ago: executing program 0 (id=156): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x7f}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 11.203362769s ago: executing program 1 (id=157): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/115) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 10.367155877s ago: executing program 4 (id=158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0xa, 0xc2d, &(0x7f00000001c0)="$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") r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x60]}}, 0x0, 0x4b, 0x0, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) listen(r9, 0x9) r10 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0xa000000a}) 10.350253195s ago: executing program 3 (id=159): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@struct={0xc, 0x8, 0x0, 0x4, 0x1, 0x8, [{0x10, 0x4, 0x9}, {0x1, 0x0, 0x7c7}, {0x3, 0x0, 0x13a}, {0xf, 0x5, 0xf9}, {0x10, 0x5, 0x27}, {0x3, 0x2, 0x435}, {0xe, 0x1, 0x1}, {0x8, 0x1, 0x9}]}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x100}, {0xa, 0x2, 0xcfb}, {0x9, 0x800}, {0x6, 0x6, 0x81}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5998}}, @float={0x4, 0x0, 0x0, 0x10, 0x8}, @func={0xf1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61]}}, &(0x7f0000000b00)=""/4086, 0xff, 0xff6, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x4, 0x4, 0x2, 0xe002, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value=r0}, 0x50) creat(&(0x7f0000000840)='./mnt\x00', 0x12) r1 = getpgid(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) syz_open_dev$vcsu(&(0x7f00000007c0), 0xd, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r5 = syz_pidfd_open(r1, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) r9 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40e8662e, &(0x7f0000000000)={0x9, 0x4000009, 0x768, 0x3, 0xffffffff, 0xa}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0), 0x2000000}, 0x20) 10.200740897s ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000008000000", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 9.116029055s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000640)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f00"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r10 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x0, 0x474, &(0x7f00000000c0)="$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") getdents64(r10, &(0x7f0000000540)=""/201, 0xc9) r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r11, 0x40045612, &(0x7f0000000080)=0x2) close(r11) 6.12640684s ago: executing program 1 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0xf00, 0x1000) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 4.457608643s ago: executing program 0 (id=163): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$eJzs3c9vHGcdB+DPrNdbb6iC0yZthIqIEqkgRSR2rBTChYAQyqFCVTlwthKnsbJxKttFboXABQQnJA79AwqSb5yQuAeFc7n1anGqhMQl4hBxMZrZWXvtXf+I7dgxPE80ft+Z95133vnOzDs741gb4P/WrctpPkqRW5ffXirnV1emOqsrUy/VxZ0kZb6RNLtJirmkeJzcLMuLvil96YBPZm+8+/mT1S+6c816quo3dlpviCF1l+spF5KM1Omg0b1uYlN7t5O8PFCltde2NlUsg3apTuHYrQ1Y3qH2P05vWfAs1y3wgundnYrufXPAeHIqyVj9OSD16NA4uh4+HzuNcgAAAPC/4rOHx90DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHnq7/8v6qlRp7mQovf9/63esjp/oj067g4AAAAAAAAAwCH42tM8zVJO9+bXiup3/hermbP5z1rypXyQhcxkPleylOksZjHzmUwy3tdQa2l6cXF+cn3N0vA1rw1d89pR7TEAAAAAAAAAnGDtbUt+mVsbv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXQZGMdJOsJTm7XrDcaHYXp1XNJn/v5U+IYtjCR0ffDwAAADiQsX2s8+WneZqlnO7NrxXVM/9r1fPyWD7IXBYzm8V0MpM79TN0+dTfWF2Z6qyuTD0op8F2v/evZ+pG1WK67x6qLa8/rPe2fL6q0c7dzFZLruR2VedOGtWapfO9/gzv18dln4rv1gb60Bzas2Yd1nJjv9/uLcKheNZXEeN1l3sRmaj7VkbjTDcCRfWiJtkaiV2PTnPrltLI6PqWJtNYf/Nz9kAxH+5UnZb785vnGvMdLA9buB6JRqpIXOs7+17bORLJ1//yp5/c68zdv3d34fKx7NJ+jGyzvI5E7wzLVF8kXj/RkRg+DmxvoorEufX5W/lhfpzLuZB3Mp/Z/DTTWcxM9T61NF2fz+XP8Z0jdXPT3Du79aRVH5fuMdtLny7kB1VuOherdU9nNkUe5k5m8lb171om861cz/Xc6DvC57btd7Vv1VXf2HrV9470X4d2/tI36kw7yW/rdCAGteW1ru3OzsPSHfvLuJ7pi2t3JHyyXutM39g40RelV3rRGR3a+H7GxuZX6ky5jV/V6YthvI5EeQH17hK93r3ajUSzuhcNnud/qK6Nhc7c/fl70+9v0/7WAfnNOi1Pq5Wv7rWXww/F4SrPl1cyVo8km8+OsuzV8kCObC2brMrOro9AjYGyc1VZUfSu1B9te6W26s9wgy1dq8peH1o2VZWd7yvb9HkrD9PJnSOIHwAHNJ5TrfY/25+1P23/un2v/fbY91/69ktvtDL6t9HvNCdG3my8Ufw5n+bnG8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/i18+NH96U5nZn54prF90S6Z3VrekinqL/TZ17YOMdNKchjtjG1tZ7RccOS70951d9Z+kRx5nHtfIji8zu/KTDN7afDmbnU+3lcPG0mO9zw8usxIhp8AxzwwAc/d1cUH719d+PCjb84+mH5v5r2ZudHr129M3Lj+1tTVu7OdmYnuz+PuJfA8bNz0j7snAAAAAAAAAAAAwF4N+8OAiy8fxt/AtPzPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ3Lqc5qMUmZy4MlHOr65Mdcqpl9+o2UzSaCTFz5LicXIz3Snjfc0V+ePjrA3ZziezN979/MnqFxttNbv1k0adHsByPeVCkpE6Paz2bh+4veLfvT0sA3apFzg4bv8NAAD//wNS+MQ=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) chdir(&(0x7f0000000240)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) 4.455291964s ago: executing program 4 (id=164): syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r0}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="42cc", 0x2}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa, [0x1000]}}) lsm_get_self_attr(0x8032a77360865b2f, 0x0, 0xffffffffffffffff, 0x1) 4.433090453s ago: executing program 1 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x4051) recvmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) 2.245872542s ago: executing program 1 (id=166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)=ANY=[@ANYRESHEX=r1], 0x48) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007021900f8ffffffb703000008000000b70400000000000085b57aa0000000030000009500000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000040000000b0000000102000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000c200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRESOCT=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090925bd700000000000010000000000000007410000004c00180000000575647000"/83], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$inet(r0, &(0x7f00000013c0)={&(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="846b115df19cca32afb6066ba915fbf4ab9066916c4ab412359950250e2a9bd649e3596d860126ad85b4996d86a0db75e040fe780e19241ed897a682033ba19bbf7d75d98393cf80ea032297ddcf8dce9a69431d7d176b942859f4c64117973068d470287396e4495ec2c7e32553ba9373d03ac1fbcc27238e969f93e4b12d10efbeb638ccc81ed536c6f82f6be5841d8fade7bd404dd15b17bcb2b1513a75836e8ec6f4311d6208df0d609dc22a125c87492c5f41ab917effd0e6ef94469e4d248e0a75bee3b095909bf9958a3c2fab93d4b301c5fce25f7cc1451c2f9faea6096badda259645357f5473457682a24e0398142c890631115ac4e19f799785062c56a86ded1142855006a04edd13d807d2905189278e9d5fd0d3126a86be3e1c8d2cf43cb533681b384a399e6a2a66326827bcfe44c9554c7db19bf401c17d69a6fc34aee9abd7140ce6e4f519255c12f1c23bf52ad3eddc9c86121d839b80e2edcd7bed6dcf63ebb05dbf0eb986fbc54ef2a0d22f3887e801d7ef77f7b93f7f796f170ff31a713dcdc888d49519f3dde9b3b46c08f2df90ee5496a2eabb66eb28d58890bc17bb18fac8914f58ee0c5cd4049af4de925ccd65e700321cd07c004baaa0578aa7cbe9ec6c24d180ef3035449c717832112dc66d7ee34a179fd8a4bc0135e917309e7199683e56620f16a834f454facc807bd601c79e7dfdd38a904e2728317b51b92d34b26694daae221ad8480b22e8bfe847e34c36ce71a55b567ba520844bc0476f703b5a35017e7ffe0295da9a8a99a6da8e341bac22fb0784c5fae481885787760fda6c969b2b4ab4034a50040af554cf0426e8e0506fc7e17d021f2d92f5059c93a2f1bb327e902c73535ee73822e298850183cd38545c44a9a85f27d456e50c9d9a457617d32e1fc077e7262818394ad4744b8b1037b4b25a5f8d3800d872ca9310eb7372788901546cf206a728ace472ee8fd366f01f7430442d0e8ac3dcba8f2cca2686d664f0d0866b9c23b1cb5a7f8cff0882adff20f4fad43e4150e6648c65ad4f309cbc6852a3bf7536e98cb52d4c1a9091d8928437fbe886182e885be3616560a8102f11da7a876adc0cd0b8fd1ba2fada79fb46a9e3bec906985579e3dce1c00aa051ef2b2ea7e6812e20c330b55789d5af24896aaf6f0030cfce252f0179912ec54a0b1dd9266e88ba68e23bf17ae52d2032760bacb83d154c7aa5d5a574c5f429769972cf8c47bb2f54d66fa50d787a719b1d586790141ba13e1be2bea0edf89f87c46c65a7a3f029a362be388e4738953cd51cf425d1d1002d4530b96964b16d49a5759655b80bedb50e50a62e6e0ef35b76cfcf5a5fd60a145c4231fd485962b66d66d1175d4612abdd927fa4c2e0c556dd5fe8955fb794ee982207619521768ae9d4a867dd3020e1d4b82208980a9787e53dda347c8df202867ebf9c727e9d346689d2f0c71974fcee42e394813125107bbc7ad21111a7f6bd2522ec22e90bae3fe31a5bf0da345ec2f7c627f95fe3450df16118bf1620a0ba2c6f0cba99eb58597ebfaa3c80aca5d0edcd7f7765b9559832450aa1c041e79d95a1865493503b0bbf16cea0fdfd945ef10c73e56b4f7ff13f9253d808039fc511cadb0ff7fa6f9db233021aadc17bcc50fe6ac3e9ff244cbf50e630fa78a0b33d2acf297382493f206df830c626d0326c189abad4784fc6a895c3e7ad118a48b1426161ed9f1fceca2eb69282b8a3995dc5ff369db6a65f16c6f8ebb32b1e4977d8f6bc950ee41755470ebd78f0dec30c6e9371ccd528e54861e067b5a3eb75e5a4967a109398dc512fe1dba439d774740e9302639e1265abb7e07b8af52f8c1b0d0a1a589516e1012817f5c2dd01754a242a6fd0e92ca23ab8599d40c198eb28a41657961c4b97b1b1d64fa8a2d6cd0746ff9d922b6f90546645c26a09078931532d278794ca2f13b9b0e7ae90f9e5b9379b61ce8f97e5ee7de0d4395277773ad3cc7e86bc3fab20e678d40628c7cf7b6854b0be1b83da4d213333ea7ce7abcdc9909988330b4126e6be6fea635adba4b710fd4aa5f954ecd8ab0e7d40cca6d7e0dd8ee34a12c19634dd7f1702e7faedbfbadcd288bc77365a42d233c0d38657fdb2f7d6247b12c5bd69e915578edc8206202e51d1e4000c7a18e0bda5360f7d76d245df167b9e7b9e19ec546ab13b1b1413a56d6c0a68abac8fb7e6b89619a67257ed64190b7936c314268d36d2c10bbfcfeadfaf7275c99687ce8ab175247dabba4be55bd2004ba29589be2195510e303c20ee1e018972e52d6441aa28548da3b97e3bc792f962442e5f3767f84a6dc5d55e4d981087aae6cac28ea54e1e07a55a856c7dcf7a004a6dba0998156e3e61cc2c61cbca300c39a68ff5a6e3f33f8722ed9b17750199f75eb4e0904cd5784d41f552decc3d8731877eb0d100ef7c2b0ca34e86b0b86bba79a80b119ebdb24bc648de633c5153e90ce582b7c7f8c4c9ceb1d642266fab3975f093af8c2385c2c19bf6fa713a63abed6461b50acc07522f93b19b11056d04abdf078ed7a2281730a6be2edc24343e86c7fddfb2637d7c7600448d3ad596623e12708a52f4dea5a9f4a30b79223f2faec851ab804a9a027b65f9c4c7c7bdd85400bf69748192111d87210e411b612c094a2ca9967bf5a4ab4db487fa53b953c1d29e191f9d6321a61d1c4e2c3eb042bfb95566f3135877e02ef4637911afc1dc8d9f901b984331142b6e981f0a3259e8ae7ca1833e1355b86348ad627ce1e2884e31cb74ea3a3e25b5190ba7ca68debac9bee7197e29a675c98a1c0ee0f73718360faab7ba27188cdb33e56b9f364b8fb2fb8389d9907fc94c051d0e5c38ccbe130e4987426118798ccd5a1c7391df6c5f6d7b5a5aed155b49cf023b9720221ad8c7bb91af84174f7a39aaeffdde18132820d334af8305a514f1d0ef725911bd9dc9e5d9a0223859488901057130d93472d34410aaf2919c7f191e1e3edfa918c41fe0880250ba30cc36ddc4d342d5b912a5f678f2f86556fc9d9dacbcb97b185db5dee4b28f094a19b9bfefa5ff490ba88b3432c510ba0e0b3627c76201c4684df02727ffd22861bfde66d843a83790663e14b59844fe7dfa8740996bacc8e3a6d012f3916e4f75a7814a36d4620f47caf85a1f028df4bc607cac04090e973ef130b6328744fe05c2619aa3b8c6c2faa6db5ec9be5f829ef95803606beaa406984a11f1c83b5dab2a18d04d1a96de5cb3baf13cc6c9830614a4435cb56aef944cf0ba51d3a82f0bad279c3fc2c8a8a0cbaac8ab0eda90bb9e01e9635bb857c11e3abf91e6fa4a4e83782d21435c66f7405590dd9e69f0ea308baf70b0aaa6cac8226068956cb32d93798b5881eacd0d797a29ac90557f4de26748e332d8edb5c0a07c98a109280c142b7ac1e0fb3f42163d6841622f060a8ea6f49485083e5b7b32dd28116bb9afb116b0490791b08cbaf87172c2014d8d5b84a52e961bfd3750d0b29648aa62859f08c85bfb97b5130f4f678de8361a9d2a2e7c9df02824e1e5e318f883233411d8aea8eab54bce51935724ca8aff242cf925dbac537aa24f9937f7f70df074ad0c92780d92c5d253823ace4f041df4c1f4d77a4c2ffd1e2c8d7f2fdc7704ee381f204b0dc59424b853340a397a791df895ca367c37fae1deb0756182d226666bef836c899aa7470abda1c4982165c49754a1868a5a101b7a0589dcd33eb7e37db88aa8220190170537447cbb56abc7fcfc95b52278a305a5d4350bd830a7a5fa868d5746c14beb16d594d42b1ca6af3dfde41aed1af2b9dd0cfb1609639a884e938fab65c55f3cb02fc043871ba20838c8d034ee29b0aa74ac9a8173c27c321ac4394878706bd50fdc4649a48eae005f233cb4841576af13c8ee33191df2803356e91e229d3933cc6c1a16dd083d323f4800760beb7ab31b42bb7f249cb261e40a60fe1e548a0b098daeed8f3b0b6e6f344d2be3ba5ba87823952d60be54939b433f0e4faf3e45e925e89e326a6cc04fb5cb24551b5cd316e90966917d787ee05a306eee43f9f487ba0e3f20e254c45fc4f2e3d8733fade055cf938cd37f11eeaf25efa120386ccf34f7c6a29cc2bdf821fbe75e8df02463f6f2954f6385b6752498d578eb2144d04f9de019b3c16343fb70f1b2fe190d0a509425bb2666f533b52b065d4a81e9f9329cd9b4735485b8da43005c106b2904d28f28d9f4cecf9bb25329b6d9f6be23eed54711c942ca15810c1c7b515e2096b059deeaaeb7ba158a9efe958055b9c6503130954823fc0fda4a7da42adb95afff49432749c1ede455f94a7d9d9b076d14b32d4125ea3fbc69b08e943a51c25bda4044353a9e910d77fca9267a706eb8c78b221696d8f1bdcabfddfe77d31f2acc3de022559e7d99fd5db6daa0eaad666d0dd4f191a2a5780536ddc169e6488dbfb1064c115702d1f13c00769d4692301b231e98aac84005c62a711e9e3f65fa4e64d43da68bfbdd186d08acf3b2a97798002b0fc9807e4c405b150c72cc00f546b11fb3401a2d52c668fa8b594623caac142c4720eafe4ad43bb5606d66fbef830e6f186b56d13d43836601ec277161484f4a7f84bccbcc316776a25ade9c9358faae78b96e3c51a2d952dec73c74f62a8584fb915df4b8faa48b19873a32c5c2673a9430d1728f9e86b04303678bc46f43d15eca51fab5b48ae7732e4710b3089627efbd580404f5b128ff0010619fa123e5d3e33afdb54a2c81bf9d2a8436a6fba44008170c47a6e8e17a38aba08b45e21be96087ddc6997368a1545406f022ec3170a4f287b0d80454314c74efd63cac4142587fc6361f1d1fbad145beb5c54883dcec3d638344d479215de3288ae2ed963eaa67dab0a83dc22408c6c89281fe91a9884860d97dae4958066754bb0485d102070579f144aa416dca072779993fa100c731d8ad6fc3ddd598da352fe749b10cdb294ef2382ae1f4f2118b6754de9fad043a31f06507df62c39fafeb30391462391cb138c1938c51f7d447c58a5040aa628790a9e30002d69a713465629c1cade8b5894dd39ee2c1ae2d6b5e54981cc52c9aedac09de41c06aec6afe894fa8f031876d8610122d7a5e21a612f8800e938a9e50875348c1021456f1d567d790ed640426e692248c0c55ce5ba0d5880a64ab4d6b33bfe4f1053d5bc21ba3502d575be4aef06067998f830fcfca1680e27be0e98d3d33c9439a2b40fd8641e85f1ab5ddfb2d4321d3f1f47c0ef5c8c30febdc2800d80e5e17630fb62d369f55f0224c2ec1660f5a70b33e4ef5146c0ad1e25a0ad76b2d4421deb35c38429cb8d74bc808379ed7e1e17b14fdd48493bb875798d606676041d6d4a69b8923677fee682e8387714b7a13522fc394f59c50ec547c676e78a1bb1ee6971b9ff3dab797609460d164e59861703c9560b774d2b48703b9f3cdd039a0cfe81f8eb4ad9e17a081f8661f1480809b9f067fc3f938c7615e6ed8105f63f0f4b6d217d0977c7c9ff07f564a2bdf61493c461bb33ca16bc1bed694c56c43679073e192cae3a6e7d4b6a50320bda758204d4d0fcab1ca3febaf5fe8a4a28967999fe5ae71edfb54c6b6dd9fd76ab588e0c4af76a481e5286731c125a116259c0c9c950854d8e3ac7073baee994c76006cb715a64f22d1c69415d3df996b648cbd272e2531c0ae4c29622041f6884dfff3247212fe8b2095c4892c8b7b7351023e5f3d88b6722afa31be7387aea42266df9b6f2d0a22f92977b18f5d042094d219b9", 0x1000}, {&(0x7f0000001240)="7b6e52f35af558b322e229e9edbe9539337bb85e926d0d4027c26ef94a72c5470025df90b052ac2cf7b12d92e17486e2934c4c1cdbb2e8cb26f3e3443a4ef2b0fc0d9a017e0fa79aa3ebb5e8c9fe98a220d727de268128394a2eb5fbbb70ac7e50584f5377472467644f0415bddf3fe763ff6b146ea3520dfefe68c20cb84c981a59ba71721de6f9b6d003c5bb45f7a6f2fc8fde640664f2", 0x98}], 0x2, &(0x7f0000001300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8f8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @multicast1}}}], 0x98}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) unshare(0x2c020400) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001400)=""/66, &(0x7f0000001480)=0x42) 1.514984551s ago: executing program 4 (id=167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000080007000000000008000200050000"], 0x34}}, 0x0) 1.1283801s ago: executing program 4 (id=168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 879.996847ms ago: executing program 0 (id=169): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x6667, &(0x7f0000000000)=0x1) 879.275415ms ago: executing program 1 (id=170): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) syz_io_uring_setup(0x4276, 0x0, &(0x7f0000000140)=0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x2, 0x0, 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) socket(0x8, 0x3, 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) syz_open_dev$sg(&(0x7f0000000180), 0x6, 0x8000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_submit(r2, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 110.113194ms ago: executing program 4 (id=171): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prctl$PR_SCHED_CORE(0x3a, 0x2, 0x0, 0x1, 0x0) socket(0x8, 0x3, 0x4) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) r4 = syz_open_dev$sg(&(0x7f0000000180), 0x6, 0x8000) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_submit(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 94.369361ms ago: executing program 0 (id=172): unshare(0x62040200) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x41810, &(0x7f0000000400)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}]}, 0x4, 0x55ae, &(0x7f000000ac40)="$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") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 0s ago: executing program 3 (id=173): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) truncate(&(0x7f0000000240)='./file1\x00', 0x20fffffffc) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 66.731614][ T5807] cgroup: Unknown subsys name 'net' [ 66.838617][ T5807] cgroup: Unknown subsys name 'cpuset' [ 66.847186][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.243805][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.412773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.419326][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.571374][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.574959][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.579616][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.594013][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.594077][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.602054][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.610529][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.617100][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.630698][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.630803][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.640791][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.646960][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.652095][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.668516][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.669263][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.678102][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.684442][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.690308][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.708377][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.716064][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.723300][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.730976][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.739037][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.739053][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.746672][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.276657][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 73.403328][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 73.568333][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 73.595220][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 73.631982][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.641337][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.649124][ T5817] bridge_slave_0: entered allmulticast mode [ 73.657536][ T5817] bridge_slave_0: entered promiscuous mode [ 73.667804][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.675018][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.683252][ T5817] bridge_slave_1: entered allmulticast mode [ 73.690372][ T5817] bridge_slave_1: entered promiscuous mode [ 73.818301][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 73.831549][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.839106][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.846824][ T5820] bridge_slave_0: entered allmulticast mode [ 73.853867][ T5820] bridge_slave_0: entered promiscuous mode [ 73.873171][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.889331][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.896539][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.903671][ T5820] bridge_slave_1: entered allmulticast mode [ 73.911138][ T5820] bridge_slave_1: entered promiscuous mode [ 73.929513][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.053498][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.062832][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.070237][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.077517][ T5818] bridge_slave_0: entered allmulticast mode [ 74.084537][ T5818] bridge_slave_0: entered promiscuous mode [ 74.105941][ T5817] team0: Port device team_slave_0 added [ 74.118654][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.143901][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.151339][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.158751][ T5818] bridge_slave_1: entered allmulticast mode [ 74.166000][ T5818] bridge_slave_1: entered promiscuous mode [ 74.173118][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.180399][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.187607][ T5821] bridge_slave_0: entered allmulticast mode [ 74.194585][ T5821] bridge_slave_0: entered promiscuous mode [ 74.204829][ T5817] team0: Port device team_slave_1 added [ 74.257644][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.264829][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.272440][ T5821] bridge_slave_1: entered allmulticast mode [ 74.279885][ T5821] bridge_slave_1: entered promiscuous mode [ 74.316897][ T5820] team0: Port device team_slave_0 added [ 74.322838][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.330069][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.337985][ T5819] bridge_slave_0: entered allmulticast mode [ 74.345023][ T5819] bridge_slave_0: entered promiscuous mode [ 74.367302][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.389186][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.396351][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.422304][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.436110][ T5820] team0: Port device team_slave_1 added [ 74.441940][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.449284][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.456524][ T5819] bridge_slave_1: entered allmulticast mode [ 74.463716][ T5819] bridge_slave_1: entered promiscuous mode [ 74.485899][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.505579][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.512543][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.542494][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.603063][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.619610][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.626753][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.653133][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.667175][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.691358][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.736443][ T5821] team0: Port device team_slave_0 added [ 74.742959][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.750200][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.766790][ T5827] Bluetooth: hci4: command tx timeout [ 74.776881][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.799639][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.811064][ T5818] team0: Port device team_slave_0 added [ 74.834766][ T5821] team0: Port device team_slave_1 added [ 74.845590][ T5144] Bluetooth: hci1: command tx timeout [ 74.851339][ T5144] Bluetooth: hci2: command tx timeout [ 74.855915][ T5827] Bluetooth: hci3: command tx timeout [ 74.857243][ T53] Bluetooth: hci0: command tx timeout [ 74.884069][ T5818] team0: Port device team_slave_1 added [ 74.962874][ T5817] hsr_slave_0: entered promiscuous mode [ 74.969737][ T5817] hsr_slave_1: entered promiscuous mode [ 74.977053][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.984009][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.010637][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.036094][ T5819] team0: Port device team_slave_0 added [ 75.054682][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.061763][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.088053][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.100371][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.107695][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.133949][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.148838][ T5820] hsr_slave_0: entered promiscuous mode [ 75.155159][ T5820] hsr_slave_1: entered promiscuous mode [ 75.161671][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 75.167750][ T5820] Cannot create hsr debugfs directory [ 75.175018][ T5819] team0: Port device team_slave_1 added [ 75.193006][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.200177][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.226248][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.290783][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.297795][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.323981][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.338100][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.345057][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.371358][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.488160][ T5821] hsr_slave_0: entered promiscuous mode [ 75.494497][ T5821] hsr_slave_1: entered promiscuous mode [ 75.500937][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 75.506736][ T5821] Cannot create hsr debugfs directory [ 75.589949][ T5818] hsr_slave_0: entered promiscuous mode [ 75.596753][ T5818] hsr_slave_1: entered promiscuous mode [ 75.602827][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 75.609084][ T5818] Cannot create hsr debugfs directory [ 75.631160][ T5819] hsr_slave_0: entered promiscuous mode [ 75.637549][ T5819] hsr_slave_1: entered promiscuous mode [ 75.643600][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 75.649429][ T5819] Cannot create hsr debugfs directory [ 76.104097][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.116810][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.137718][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.148615][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.200437][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.211008][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.224542][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.247119][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.346310][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.360566][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.371972][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.382960][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.487503][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.520100][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.531886][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.542221][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.628195][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.641312][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.677827][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.688615][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.700273][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.732091][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.759935][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.799809][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.807042][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.823758][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.847456][ T53] Bluetooth: hci4: command tx timeout [ 76.860219][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.867346][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.878926][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.886071][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.905339][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.912504][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.925685][ T53] Bluetooth: hci2: command tx timeout [ 76.925887][ T5830] Bluetooth: hci3: command tx timeout [ 76.931102][ T53] Bluetooth: hci1: command tx timeout [ 76.936567][ T5144] Bluetooth: hci0: command tx timeout [ 76.987376][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.044984][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.056811][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.083693][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.114752][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.121991][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.182082][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.189330][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.245065][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.369295][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.385039][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.434973][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.442248][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.487430][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.494633][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.520649][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.556982][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.564181][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.601972][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.611505][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.618761][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.702608][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.866985][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.901120][ T5817] veth0_vlan: entered promiscuous mode [ 77.920339][ T5817] veth1_vlan: entered promiscuous mode [ 77.967869][ T5820] veth0_vlan: entered promiscuous mode [ 78.021602][ T5820] veth1_vlan: entered promiscuous mode [ 78.103401][ T5821] veth0_vlan: entered promiscuous mode [ 78.130904][ T5817] veth0_macvtap: entered promiscuous mode [ 78.154345][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.169990][ T5817] veth1_macvtap: entered promiscuous mode [ 78.188337][ T5821] veth1_vlan: entered promiscuous mode [ 78.232907][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.254644][ T5820] veth0_macvtap: entered promiscuous mode [ 78.270098][ T5820] veth1_macvtap: entered promiscuous mode [ 78.286288][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.301458][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.333827][ T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.359692][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.384878][ T5821] veth0_macvtap: entered promiscuous mode [ 78.397557][ T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.408076][ T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.436266][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.449192][ T5819] veth0_vlan: entered promiscuous mode [ 78.472583][ T5821] veth1_macvtap: entered promiscuous mode [ 78.487197][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.502529][ T5819] veth1_vlan: entered promiscuous mode [ 78.525111][ T4248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.582721][ T4248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.613124][ T4248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.628493][ T4248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647331][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.713285][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.742505][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.750982][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.772563][ T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.782218][ T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.816548][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.827582][ T5819] veth0_macvtap: entered promiscuous mode [ 78.835490][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.861223][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.873476][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.874906][ T5819] veth1_macvtap: entered promiscuous mode [ 78.934490][ T5144] Bluetooth: hci4: command tx timeout [ 78.967109][ T5818] veth0_vlan: entered promiscuous mode [ 78.980868][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.999886][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.005951][ T5144] Bluetooth: hci0: command tx timeout [ 79.010916][ T5830] Bluetooth: hci3: command tx timeout [ 79.012501][ T5827] Bluetooth: hci1: command tx timeout [ 79.018794][ T5830] Bluetooth: hci2: command tx timeout [ 79.038596][ T5818] veth1_vlan: entered promiscuous mode [ 79.049673][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.063091][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.095828][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.147941][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.170290][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.220515][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238794][ T5917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.260516][ T5917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.274454][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.316101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.323944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.423891][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.426797][ T5818] veth0_macvtap: entered promiscuous mode [ 79.443621][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.529851][ T5818] veth1_macvtap: entered promiscuous mode [ 79.539854][ T5946] loop1: detected capacity change from 0 to 256 [ 79.577729][ T5946] ======================================================= [ 79.577729][ T5946] WARNING: The mand mount option has been deprecated and [ 79.577729][ T5946] and is ignored by this kernel. Remove the mand [ 79.577729][ T5946] option from the mount to silence this warning. [ 79.577729][ T5946] ======================================================= [ 79.594431][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.703825][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.722209][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.739670][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.809544][ T5917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.828036][ T5917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.870834][ T5917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.881990][ T5917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.929291][ T5954] mmap: syz.3.8 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.967018][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.985197][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.130532][ T5958] loop2: detected capacity change from 0 to 764 [ 80.154067][ T5958] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 80.167107][ T5958] Symlink component flag not implemented [ 80.185262][ T5958] Symlink component flag not implemented (7) [ 80.242614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.277228][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.366495][ T30] audit: type=1326 audit(1762653532.392:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.0.1" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f536178f6c9 code=0x0 [ 80.429437][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.470780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.538757][ T5964] loop0: detected capacity change from 0 to 128 [ 80.639120][ T5964] vfat: Unknown parameter 'ÿ' [ 80.793176][ T5967] Zero length message leads to an empty skb [ 81.025502][ T5830] Bluetooth: hci4: command tx timeout [ 81.088067][ T5830] Bluetooth: hci2: command tx timeout [ 81.089334][ T5144] Bluetooth: hci1: command tx timeout [ 81.094051][ T5830] Bluetooth: hci3: command tx timeout [ 81.099399][ T53] Bluetooth: hci0: command tx timeout [ 81.273092][ T5981] loop1: detected capacity change from 0 to 512 [ 81.464430][ T5981] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.692815][ T5981] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 81.702011][ T5981] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.734783][ T5981] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm +}[@: corrupted inode contents [ 81.748556][ T5981] EXT4-fs (loop1): Remounting filesystem read-only [ 81.755810][ T5981] EXT4-fs (loop1): 1 truncate cleaned up [ 81.807568][ T5982] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.862780][ T5982] Quota error (device loop1): write_blk: dquota write failed [ 81.875147][ T5982] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 81.901778][ T5982] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 81.947867][ T5982] Quota error (device loop1): write_blk: dquota write failed [ 82.008441][ T5982] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 82.047132][ T5982] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 82.098834][ T5982] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 82.136309][ T5982] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 82.169161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.271529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.371472][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.389702][ T5981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.423581][ T5993] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 83.624575][ T138] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.696928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.706092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 83.745895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.796156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.876141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.886665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.012444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.021689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.775610][ T5989] syz.3.17 (5989): drop_caches: 2 [ 84.795569][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 84.814351][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 86.429486][ T5947] kernel read not supported for file /dsp (pid: 5947 comm: kworker/1:6) [ 86.852814][ T43] cfg80211: failed to load regulatory.db [ 89.836383][ T6052] netlink: 104 bytes leftover after parsing attributes in process `syz.2.32'. [ 89.995933][ T43] IPVS: starting estimator thread 0... [ 90.405506][ T6053] IPVS: using max 29 ests per chain, 69600 per kthread [ 90.871916][ T6059] loop1: detected capacity change from 0 to 512 [ 91.022453][ T6059] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.032711][ T6059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.071863][ T6059] EXT4-fs error (device loop1): ext4_do_update_inode:5636: inode #16: comm +}[@: corrupted inode contents [ 91.104386][ T6059] EXT4-fs (loop1): Remounting filesystem read-only [ 91.113127][ T6059] EXT4-fs (loop1): 1 truncate cleaned up [ 91.220806][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.233035][ T12] Quota error (device loop1): write_blk: dquota write failed [ 91.240812][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 91.252168][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.262866][ T12] Quota error (device loop1): write_blk: dquota write failed [ 91.486276][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 91.515650][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.526084][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 92.172064][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.184635][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.199258][ T6059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.455770][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 94.423331][ T5906] kernel read not supported for file /dsp (pid: 5906 comm: kworker/1:5) [ 94.885899][ T5955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.097322][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 95.119447][ T5955] usb 2-1: config 0 has no interfaces? [ 95.142919][ T5955] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 95.190772][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.252675][ T5955] usb 2-1: config 0 descriptor?? [ 95.364154][ T6097] loop3: detected capacity change from 0 to 32768 [ 95.391578][ T6097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.44 (6097) [ 95.423481][ T6091] loop4: detected capacity change from 0 to 40427 [ 95.448483][ T6091] F2FS-fs (loop4): build fault injection rate: 771 [ 95.479716][ T6091] F2FS-fs (loop4): invalid crc value [ 95.500131][ T6097] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.607347][ T6097] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 95.711167][ T5883] usb 2-1: USB disconnect, device number 2 [ 95.850353][ T6091] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 95.902519][ T6091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.020816][ T6097] BTRFS info (device loop3): rebuilding free space tree [ 96.062931][ T6107] loop0: detected capacity change from 0 to 40427 [ 96.074357][ T6097] BTRFS info (device loop3): disabling free space tree [ 96.083200][ T6097] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.099829][ T6097] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.133164][ T6097] BTRFS info (device loop3): enabling ssd optimizations [ 96.156621][ T6097] BTRFS info (device loop3): turning on async discard [ 96.164897][ T6097] BTRFS info (device loop3): force clearing of disk cache [ 96.173068][ T6097] BTRFS info (device loop3): enabling auto defrag [ 96.180026][ T6097] BTRFS info (device loop3): max_inline set to 4096 [ 96.203359][ T6107] F2FS-fs (loop0): invalid crc value [ 96.226626][ T5818] syz-executor: attempt to access beyond end of device [ 96.226626][ T5818] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.295370][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.295395][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.295413][ T5818] Call Trace: [ 96.295420][ T5818] [ 96.295429][ T5818] dump_stack_lvl+0x189/0x250 [ 96.295454][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.295468][ T5818] ? __pfx_queue_work_on+0x10/0x10 [ 96.295480][ T5818] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 96.295493][ T5818] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.295511][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 96.295530][ T5818] f2fs_write_end_io+0x886/0xb60 [ 96.295554][ T5818] __submit_merged_bio+0x27a/0x6a0 [ 96.295572][ T5818] __submit_merged_write_cond+0x255/0x530 [ 96.295590][ T5818] f2fs_write_data_pages+0x261d/0x3000 [ 96.295624][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.295674][ T5818] ? __lock_acquire+0xab9/0xd20 [ 96.295691][ T5818] ? do_raw_spin_lock+0x121/0x290 [ 96.295707][ T5818] ? do_raw_spin_unlock+0x122/0x240 [ 96.295716][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.295727][ T5818] do_writepages+0x32e/0x550 [ 96.295747][ T5818] ? do_raw_spin_unlock+0x122/0x240 [ 96.295759][ T5818] filemap_fdatawrite+0x199/0x240 [ 96.295773][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 96.295812][ T5818] ? do_raw_spin_unlock+0x122/0x240 [ 96.295824][ T5818] f2fs_sync_dirty_inodes+0x31f/0x830 [ 96.295843][ T5818] f2fs_write_checkpoint+0x93e/0x2440 [ 96.295853][ T5818] ? stack_depot_save_flags+0x41b/0x860 [ 96.295881][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 96.295913][ T5818] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 96.295923][ T5818] ? kfree+0x19a/0x6d0 [ 96.295942][ T5818] kill_f2fs_super+0x2cc/0x6d0 [ 96.295956][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 96.295977][ T5818] ? shrinker_free+0x2ce/0x3e0 [ 96.295990][ T5818] deactivate_locked_super+0xbc/0x130 [ 96.296002][ T5818] cleanup_mnt+0x425/0x4c0 [ 96.296012][ T5818] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.296026][ T5818] task_work_run+0x1d4/0x260 [ 96.296038][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 96.296051][ T5818] ? exit_to_user_mode_loop+0x55/0x4f0 [ 96.296065][ T5818] exit_to_user_mode_loop+0xff/0x4f0 [ 96.296076][ T5818] ? rcu_is_watching+0x15/0xb0 [ 96.296092][ T5818] do_syscall_64+0x2e9/0xfa0 [ 96.296105][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.296115][ T5818] ? clear_bhb_loop+0x60/0xb0 [ 96.296126][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.296135][ T5818] RIP: 0033:0x7f1e4d9909f7 [ 96.296149][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 96.296157][ T5818] RSP: 002b:00007ffe75270a08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.296169][ T5818] RAX: 0000000000000000 RBX: 00007f1e4da11d7d RCX: 00007f1e4d9909f7 [ 96.296175][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe75270ac0 [ 96.296181][ T5818] RBP: 00007ffe75270ac0 R08: 0000000000000000 R09: 0000000000000000 [ 96.296187][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe75271b50 [ 96.296193][ T5818] R13: 00007f1e4da11d7d R14: 0000000000017768 R15: 00007ffe75271b90 [ 96.296210][ T5818] [ 96.303828][ T5818] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 96.790615][ T6107] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 96.876538][ T6107] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.916053][ T6142] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 97.481590][ T5820] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.556701][ T5819] syz-executor: attempt to access beyond end of device [ 97.556701][ T5819] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.651123][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 97.651149][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.651160][ T5819] Call Trace: [ 97.651168][ T5819] [ 97.651176][ T5819] dump_stack_lvl+0x189/0x250 [ 97.651209][ T5819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.651241][ T5819] ? __pfx_queue_work_on+0x10/0x10 [ 97.651263][ T5819] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.651285][ T5819] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.651319][ T5819] f2fs_handle_critical_error+0x37c/0x540 [ 97.651352][ T5819] f2fs_write_end_io+0x886/0xb60 [ 97.651391][ T5819] __submit_merged_bio+0x27a/0x6a0 [ 97.651423][ T5819] __submit_merged_write_cond+0x255/0x530 [ 97.651456][ T5819] f2fs_write_data_pages+0x261d/0x3000 [ 97.651510][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.651542][ T5819] ? finish_task_switch+0x18b/0x960 [ 97.651592][ T5819] ? trace_sched_exit_tp+0x36/0x110 [ 97.651610][ T5819] ? __schedule+0x185e/0x4ec0 [ 97.651655][ T5819] ? __lock_acquire+0xab9/0xd20 [ 97.651686][ T5819] ? do_raw_spin_lock+0x121/0x290 [ 97.651715][ T5819] ? do_raw_spin_unlock+0x122/0x240 [ 97.651733][ T5819] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.651753][ T5819] do_writepages+0x32e/0x550 [ 97.651788][ T5819] ? do_raw_spin_unlock+0x122/0x240 [ 97.651811][ T5819] filemap_fdatawrite+0x199/0x240 [ 97.651835][ T5819] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 97.651908][ T5819] ? do_raw_spin_unlock+0x122/0x240 [ 97.651931][ T5819] f2fs_sync_dirty_inodes+0x31f/0x830 [ 97.651966][ T5819] f2fs_write_checkpoint+0x93e/0x2440 [ 97.651986][ T5819] ? __lock_acquire+0xab9/0xd20 [ 97.652036][ T5819] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 97.652119][ T5819] kill_f2fs_super+0x2cc/0x6d0 [ 97.652146][ T5819] ? __pfx_kill_f2fs_super+0x10/0x10 [ 97.652184][ T5819] ? shrinker_free+0x2ce/0x3e0 [ 97.652207][ T5819] deactivate_locked_super+0xbc/0x130 [ 97.652235][ T5819] cleanup_mnt+0x425/0x4c0 [ 97.652254][ T5819] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.652278][ T5819] task_work_run+0x1d4/0x260 [ 97.652298][ T5819] ? __pfx_task_work_run+0x10/0x10 [ 97.652322][ T5819] ? exit_to_user_mode_loop+0x55/0x4f0 [ 97.652347][ T5819] exit_to_user_mode_loop+0xff/0x4f0 [ 97.652367][ T5819] ? rcu_is_watching+0x15/0xb0 [ 97.652395][ T5819] do_syscall_64+0x2e9/0xfa0 [ 97.652418][ T5819] ? irqentry_exit+0x10f/0x640 [ 97.652438][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652456][ T5819] ? clear_bhb_loop+0x60/0xb0 [ 97.652477][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652494][ T5819] RIP: 0033:0x7f53617909f7 [ 97.652511][ T5819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 97.652524][ T5819] RSP: 002b:00007ffd610e5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.652543][ T5819] RAX: 0000000000000000 RBX: 00007f5361811d7d RCX: 00007f53617909f7 [ 97.652555][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd610e5100 [ 97.652565][ T5819] RBP: 00007ffd610e5100 R08: 0000000000000000 R09: 0000000000000000 [ 97.652576][ T5819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd610e6190 [ 97.652587][ T5819] R13: 00007f5361811d7d R14: 0000000000017ca1 R15: 00007ffd610e61d0 [ 97.652619][ T5819] [ 98.158160][ T5819] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.290720][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 98.321366][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 98.328062][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 99.286315][ T6154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.984652][ T6163] loop4: detected capacity change from 0 to 512 [ 100.569174][ T6163] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 100.580257][ T6163] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.739160][ T6163] EXT4-fs error (device loop4): ext4_do_update_inode:5636: inode #16: comm +}[@: corrupted inode contents [ 100.751467][ T6163] EXT4-fs (loop4): Remounting filesystem read-only [ 100.758666][ T6163] EXT4-fs (loop4): 1 truncate cleaned up [ 100.767027][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.977953][ T36] Quota error (device loop4): write_blk: dquota write failed [ 101.017149][ T36] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 101.046329][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 101.057361][ T36] Quota error (device loop4): write_blk: dquota write failed [ 101.065014][ T36] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 101.075053][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.087402][ T36] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 101.096438][ T36] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.108549][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.133207][ T6163] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.719340][ T6197] loop0: detected capacity change from 0 to 4096 [ 103.785736][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 103.796875][ T6203] netlink: 104 bytes leftover after parsing attributes in process `syz.1.64'. [ 104.341186][ T5947] IPVS: starting estimator thread 0... [ 104.341959][ T6197] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 104.538907][ T6204] IPVS: using max 25 ests per chain, 60000 per kthread [ 106.248685][ T6220] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 106.257271][ T6220] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 106.265968][ T6220] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 109.559524][ T6243] Bluetooth: MGMT ver 1.23 [ 109.598161][ T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0) [ 109.877952][ T6256] loop4: detected capacity change from 0 to 256 [ 110.005536][ T5947] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.335587][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 110.389169][ T6256] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 110.412833][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.436781][ T5947] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 110.562715][ T5947] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 110.581254][ T5947] usb 2-1: config 8 interface 0 has no altsetting 0 [ 110.593500][ T5947] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 110.609199][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.645395][ T5947] usb 2-1: Product: syz [ 110.649605][ T5947] usb 2-1: Manufacturer: syz [ 110.671695][ T5947] usb 2-1: SerialNumber: syz [ 110.919202][ T6234] loop3: detected capacity change from 0 to 40427 [ 110.951126][ T6234] F2FS-fs (loop3): build fault injection rate: 771 [ 111.277752][ T6234] F2FS-fs (loop3): invalid crc value [ 111.458475][ T6234] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 111.618983][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.626207][ T5947] usb 2-1: selecting invalid altsetting 0 [ 111.715634][ T5947] usb 2-1: USB disconnect, device number 3 [ 111.985794][ T6263] loop2: detected capacity change from 0 to 512 [ 112.495347][ T6263] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.675595][ T6263] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.80: inode has both inline data and extents flags [ 112.718330][ T6263] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.80: couldn't read orphan inode 15 (err -117) [ 113.097792][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.465907][ T6284] netlink: 104 bytes leftover after parsing attributes in process `syz.4.85'. [ 113.483727][ T9] IPVS: starting estimator thread 0... [ 113.699072][ T6289] IPVS: using max 27 ests per chain, 64800 per kthread [ 113.746590][ T6283] process 'syz.0.81' launched './file2' with NULL argv: empty string added [ 114.634276][ T6305] loop4: detected capacity change from 0 to 256 [ 114.694610][ T6305] exFAT-fs (loop4): start_clu is invalid cluster(0x400) [ 115.105891][ T6314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.91'. [ 117.765574][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 117.976748][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 117.985651][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 118.102415][ T6325] loop1: detected capacity change from 0 to 512 [ 119.146341][ T6325] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.369845][ T6325] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 119.371249][ T6325] EXT4-fs: failed to create workqueue [ 119.439771][ T6325] EXT4-fs (loop1): mount failed [ 119.689777][ T6330] 8021q: VLANs not supported on ip6tnl0 [ 121.253986][ T6345] loop3: detected capacity change from 0 to 256 [ 121.304944][ T6345] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 121.494269][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 122.049848][ T6360] 8021q: VLANs not supported on ip6tnl0 [ 122.840639][ T6364] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 122.849509][ T6364] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 122.858051][ T6364] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 124.285950][ T6378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.114'. [ 125.598439][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 125.758544][ T6395] loop1: detected capacity change from 0 to 2048 [ 125.899948][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.912304][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.920479][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.928815][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.939196][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.025687][ T6272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.028869][ T6395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.908575][ T6403] 8021q: VLANs not supported on ip6tnl0 [ 127.415735][ T5955] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.863580][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 127.870585][ T5955] usb 4-1: config 0 has no interfaces? [ 127.894471][ T5955] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.912304][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.928620][ T5955] usb 4-1: config 0 descriptor?? [ 128.254263][ T6416] netlink: 104 bytes leftover after parsing attributes in process `syz.0.126'. [ 128.285847][ T5830] Bluetooth: hci5: command tx timeout [ 128.354215][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 129.496699][ T24] usb 4-1: USB disconnect, device number 2 [ 129.992061][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 130.141854][ T6441] 9p: Bad value for 'rfdno' [ 130.181312][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.380696][ T5830] Bluetooth: hci5: command tx timeout [ 130.453654][ T6449] loop3: detected capacity change from 0 to 1024 [ 130.559432][ T6449] hfsplus: failed to load root directory [ 130.596792][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.631793][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.656189][ T6398] bridge_slave_0: entered allmulticast mode [ 130.677553][ T6398] bridge_slave_0: entered promiscuous mode [ 130.714347][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.723567][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.733672][ T6398] bridge_slave_1: entered allmulticast mode [ 130.744542][ T6398] bridge_slave_1: entered promiscuous mode [ 130.801836][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.996801][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.032197][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.089158][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.167973][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.334265][ T6461] 8021q: VLANs not supported on ip6tnl0 [ 131.500100][ T6398] team0: Port device team_slave_0 added [ 131.542284][ T6398] team0: Port device team_slave_1 added [ 131.738572][ T6470] loop0: detected capacity change from 0 to 164 [ 131.750316][ T6470] iso9660: Unknown parameter 'GPL' [ 131.887816][ T6470] loop0: detected capacity change from 0 to 2048 [ 131.903956][ T6470] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 131.957928][ T6470] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.505554][ T5830] Bluetooth: hci5: command tx timeout [ 132.645038][ T9] kernel write not supported for file bpf-map (pid: 9 comm: kworker/0:0) [ 132.877307][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.037044][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.342785][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.398213][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.701404][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.525405][ T5830] Bluetooth: hci5: command tx timeout [ 134.668292][ T6498] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 134.676613][ T6498] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 134.685060][ T6498] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 134.749521][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.774758][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.971715][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 135.002470][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.089907][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 135.289178][ T6509] loop4: detected capacity change from 0 to 512 [ 136.017463][ T6509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.418150][ T6506] 9p: Bad value for 'rfdno' [ 137.445035][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.147: inode has both inline data and extents flags [ 137.462157][ T6509] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.147: couldn't read orphan inode 15 (err -117) [ 137.478409][ T6509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.702457][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 137.711374][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 137.913684][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.148095][ T44] bridge_slave_1: left allmulticast mode [ 138.154036][ T44] bridge_slave_1: left promiscuous mode [ 138.209659][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.400611][ T6526] loop4: detected capacity change from 0 to 1024 [ 139.042338][ T44] bridge_slave_0: left allmulticast mode [ 139.055947][ T6526] hfsplus: failed to load root directory [ 139.077721][ T44] bridge_slave_0: left promiscuous mode [ 139.084939][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.557093][ T24] kernel write not supported for file bpf-map (pid: 24 comm: kworker/1:0) [ 140.660934][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.677945][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.689636][ T44] bond0 (unregistering): Released all slaves [ 140.832359][ T6398] hsr_slave_0: entered promiscuous mode [ 140.840094][ T6398] hsr_slave_1: entered promiscuous mode [ 140.849375][ T6398] debugfs: 'hsr0' already exists in 'hsr' [ 140.855655][ T6398] Cannot create hsr debugfs directory [ 141.268429][ T5859] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.325990][ T44] hsr_slave_0: left promiscuous mode [ 141.397378][ T44] hsr_slave_1: left promiscuous mode [ 141.483747][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.500633][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 141.581363][ T5859] usb 2-1: config 0 has no interfaces? [ 141.613108][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.644572][ T5859] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.720655][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.742307][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.751700][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.791711][ T5859] usb 2-1: config 0 descriptor?? [ 141.838184][ T44] veth1_macvtap: left promiscuous mode [ 141.843971][ T44] veth0_macvtap: left promiscuous mode [ 141.874804][ T44] veth1_vlan: left promiscuous mode [ 141.906379][ T44] veth0_vlan: left promiscuous mode [ 142.096007][ T6563] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 142.446334][ T6569] loop4: detected capacity change from 0 to 2048 [ 142.464781][ T6569] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 142.978348][ T6569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.255603][ T9] usb 2-1: USB disconnect, device number 4 [ 143.354802][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 143.561429][ T6581] loop0: detected capacity change from 0 to 512 [ 144.235483][ T6581] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.280231][ T6581] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.161: inode has both inline data and extents flags [ 145.301497][ T6581] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.161: couldn't read orphan inode 15 (err -117) [ 145.325162][ T6581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.127161][ T44] team0 (unregistering): Port device team_slave_1 removed [ 147.161281][ T44] team0 (unregistering): Port device team_slave_0 removed [ 147.461531][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 147.470892][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 147.564499][ T6594] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 147.574700][ T6594] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 147.583192][ T6594] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 147.747120][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.920818][ T6601] loop0: detected capacity change from 0 to 1024 [ 147.956250][ T6601] hfsplus: failed to load root directory [ 150.942657][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 151.140501][ T6398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.339867][ T6398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.791481][ T6398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.836764][ T6398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.068376][ T6637] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 152.102587][ T6007] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.171684][ T5859] ------------[ cut here ]------------ [ 152.177367][ T5859] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#1: kworker/1:3/5859 [ 152.188361][ T5859] Modules linked in: [ 152.192370][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 152.201761][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.212226][ T5859] Workqueue: events destroy_super_work [ 152.218084][ T5859] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 152.223881][ T5859] Code: d7 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c d7 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 f5 56 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 56 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 152.243626][ T5859] RSP: 0018:ffffc9000442fa48 EFLAGS: 00010293 [ 152.249798][ T5859] RAX: ffffffff823b293b RBX: ffff88807ab50898 RCX: ffff8880335fbd00 [ 152.257801][ T5859] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 152.265831][ T5859] RBP: 0000000000000004 R08: ffff88807c37c193 R09: 1ffff1100f86f832 [ 152.273802][ T5859] R10: dffffc0000000000 R11: ffffed100f86f833 R12: ffff88807c37c190 [ 152.281915][ T5859] R13: dffffc0000000000 R14: ffff88807ab50000 R15: ffff88807c37c000 [ 152.289992][ T5859] FS: 0000000000000000(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000 [ 152.298944][ T5859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.305560][ T5859] CR2: 000020000006a030 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 152.313953][ T5859] Call Trace: [ 152.317549][ T5859] [ 152.320494][ T5859] ? process_one_work+0x868/0x15d0 [ 152.325829][ T5859] process_one_work+0x94a/0x15d0 [ 152.330758][ T5859] ? __lock_acquire+0xab9/0xd20 [ 152.335654][ T5859] ? __pfx_process_one_work+0x10/0x10 [ 152.341032][ T5859] ? assign_work+0x3a1/0x410 [ 152.345639][ T5859] worker_thread+0x9b0/0xee0 [ 152.350231][ T5859] kthread+0x711/0x8a0 [ 152.354301][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 152.359438][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.364008][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.369355][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.374541][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.379138][ T5859] ret_from_fork+0x599/0xb30 [ 152.383713][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 152.388874][ T5859] ? __switch_to_asm+0x39/0x70 [ 152.393638][ T5859] ? __switch_to_asm+0x33/0x70 [ 152.398403][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.402988][ T5859] ret_from_fork_asm+0x1a/0x30 [ 152.407765][ T5859] [ 152.410768][ T5859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.418029][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 152.427376][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.437413][ T5859] Workqueue: events destroy_super_work [ 152.442859][ T5859] Call Trace: [ 152.446121][ T5859] [ 152.449035][ T5859] dump_stack_lvl+0x99/0x250 [ 152.453608][ T5859] ? __asan_memcpy+0x40/0x70 [ 152.458180][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.463361][ T5859] ? __pfx__printk+0x10/0x10 [ 152.467936][ T5859] vpanic+0x237/0x6d0 [ 152.471900][ T5859] ? __pfx_vpanic+0x10/0x10 [ 152.476377][ T5859] ? is_bpf_text_address+0x292/0x2b0 [ 152.481641][ T5859] ? is_bpf_text_address+0x26/0x2b0 [ 152.486822][ T5859] panic+0xb9/0xc0 [ 152.490527][ T5859] ? __pfx_panic+0x10/0x10 [ 152.494923][ T5859] ? ret_from_fork_asm+0x1a/0x30 [ 152.499846][ T5859] __warn+0x334/0x4c0 [ 152.503807][ T5859] ? destroy_super_work+0x15c/0x1a0 [ 152.508984][ T5859] ? destroy_super_work+0x15c/0x1a0 [ 152.514165][ T5859] report_bug+0x2be/0x4f0 [ 152.518483][ T5859] ? destroy_super_work+0x15c/0x1a0 [ 152.523664][ T5859] ? destroy_super_work+0x15c/0x1a0 [ 152.528842][ T5859] ? destroy_super_work+0x15e/0x1a0 [ 152.534016][ T5859] handle_bug+0x84/0x160 [ 152.538235][ T5859] exc_invalid_op+0x1a/0x50 [ 152.542720][ T5859] asm_exc_invalid_op+0x1a/0x20 [ 152.547547][ T5859] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 152.553333][ T5859] Code: d7 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 2c d7 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 6b e1 ff e8 f5 56 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 e7 56 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 152.572920][ T5859] RSP: 0018:ffffc9000442fa48 EFLAGS: 00010293 [ 152.578973][ T5859] RAX: ffffffff823b293b RBX: ffff88807ab50898 RCX: ffff8880335fbd00 [ 152.586924][ T5859] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 152.594874][ T5859] RBP: 0000000000000004 R08: ffff88807c37c193 R09: 1ffff1100f86f832 [ 152.602822][ T5859] R10: dffffc0000000000 R11: ffffed100f86f833 R12: ffff88807c37c190 [ 152.610777][ T5859] R13: dffffc0000000000 R14: ffff88807ab50000 R15: ffff88807c37c000 [ 152.618732][ T5859] ? destroy_super_work+0x15b/0x1a0 [ 152.623927][ T5859] ? destroy_super_work+0x15b/0x1a0 [ 152.629111][ T5859] ? process_one_work+0x868/0x15d0 [ 152.634206][ T5859] process_one_work+0x94a/0x15d0 [ 152.639123][ T5859] ? __lock_acquire+0xab9/0xd20 [ 152.643962][ T5859] ? __pfx_process_one_work+0x10/0x10 [ 152.649317][ T5859] ? assign_work+0x3a1/0x410 [ 152.653889][ T5859] worker_thread+0x9b0/0xee0 [ 152.658474][ T5859] kthread+0x711/0x8a0 [ 152.662524][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 152.667615][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.672188][ T5859] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.677365][ T5859] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.682542][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.687113][ T5859] ret_from_fork+0x599/0xb30 [ 152.691685][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 152.696780][ T5859] ? __switch_to_asm+0x39/0x70 [ 152.701523][ T5859] ? __switch_to_asm+0x33/0x70 [ 152.706263][ T5859] ? __pfx_kthread+0x10/0x10 [ 152.710831][ T5859] ret_from_fork_asm+0x1a/0x30 [ 152.715583][ T5859] [ 152.718856][ T5859] Kernel Offset: disabled [ 152.723168][ T5859] Rebooting in 86400 seconds..