last executing test programs: 21m20.362061084s ago: executing program 2 (id=26): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x8000000000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a001000000000003c89505b6fe87c829487d92e713f57640b65a43a71ccdb19370800000000000000165adbdada0b5d05fe10ed478c44e4775dee0b5a05efe1124edd153aedf6a0e86bffe964b380c65bef40fccdcf497dedf8dd1f244f2d54592f3e3e27ad0fe7dcaded1a5908630d4c8c03f02b4bde60b7eee9e21304478c46f31c1e8b1a872ca10632fdee3dd927462bf322e2c0586cdff6f46770f548f92a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000"], 0xb8}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, &(0x7f0000000200)=""/31, 0x1f}, 0x2243) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r6, &(0x7f0000000440)=""/27, 0x1b) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000005c0)=0xd085) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000300)={0x0, r5, 0x0, 0x80000000, 0x6dfe}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 21m12.570969287s ago: executing program 2 (id=35): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x8000000000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fbff00000000000000002000"/111], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a001000000000003c89505b6fe87c829487d92e713f57640b65a43a71ccdb19370800000000000000165adbdada0b5d05fe10ed478c44e4775dee0b5a05efe1124edd153aedf6a0e86bffe964b380c65bef40fccdcf497dedf8dd1f244f2d54592f3e3e27ad0fe7dcaded1a5908630d4c8c03f02b4bde60b7eee9e21304478c46f31c1e8b1a872ca10632fdee3dd927462bf322e2c0586cdff6f46770f548f92a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000"], 0xb8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, &(0x7f0000000200)=""/31, 0x1f}, 0x2243) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r5, &(0x7f0000000440)=""/27, 0x1b) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f00000005c0)=0xd085) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000300)={0x0, r4, 0x0, 0x80000000, 0x6dfe}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 21m5.560451056s ago: executing program 2 (id=43): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) write$9p(0xffffffffffffffff, &(0x7f0000000380), 0x0) 21m0.519421745s ago: executing program 2 (id=48): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) write$9p(0xffffffffffffffff, &(0x7f0000000380), 0x0) 20m55.563981481s ago: executing program 2 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r6, 0x0, &(0x7f0000000540)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000080), 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 20m52.46898002s ago: executing program 2 (id=56): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x20000000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 20m52.434782787s ago: executing program 32 (id=40): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8ffff) write$9p(0xffffffffffffffff, &(0x7f0000000380), 0x0) 20m37.174728476s ago: executing program 33 (id=56): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x20000000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 19m55.809849695s ago: executing program 3 (id=118): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x20000000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 19m53.273231906s ago: executing program 3 (id=120): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x20000000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 19m50.915796608s ago: executing program 3 (id=123): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x8000000000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fbff00000000000000002000"/111], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a001000000000003c89505b6fe87c829487d92e713f57640b65a43a71ccdb19370800000000000000165adbdada0b5d05fe10ed478c44e4775dee0b5a05efe1124edd153aedf6a0e86bffe964b380c65bef40fccdcf497dedf8dd1f244f2d54592f3e3e27ad0fe7dcaded1a5908630d4c8c03f02b4bde60b7eee9e21304478c46f31c1e8b1a872ca10632fdee3dd927462bf322e2c0586cdff6f46770f548f92a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000"], 0xb8}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) read(r6, &(0x7f0000000440)=""/27, 0x1b) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000005c0)=0xd085) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000300)={0x0, r5, 0x0, 0x80000000, 0x6dfe}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 19m42.752896982s ago: executing program 3 (id=130): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) shmdt(0x0) time(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_create(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r5, 0x20000000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ad56a6c5", 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 19m40.074946425s ago: executing program 3 (id=134): ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x8000000000000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000fbff00000000000000002000"/111], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000006401010200000000000000000000000000000000000000000a001000000000003c89505b6fe87c829487d92e713f57640b65a43a71ccdb19370800000000000000165adbdada0b5d05fe10ed478c44e4775dee0b5a05efe1124edd153aedf6a0e86bffe964b380c65bef40fccdcf497dedf8dd1f244f2d54592f3e3e27ad0fe7dcaded1a5908630d4c8c03f02b4bde60b7eee9e21304478c46f31c1e8b1a872ca10632fdee3dd927462bf322e2c0586cdff6f46770f548f92a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000"], 0xb8}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}) recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/149, 0x95}], 0x1, &(0x7f0000000200)=""/31, 0x1f}, 0x2243) read(0xffffffffffffffff, &(0x7f0000000440)=""/27, 0x1b) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000005c0)=0xd085) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000300)={0x0, r5, 0x0, 0x80000000, 0x6dfe}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 19m35.408594729s ago: executing program 3 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$pppoe(0x18, 0x1, 0x0) 19m19.988295481s ago: executing program 34 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$pppoe(0x18, 0x1, 0x0) 9m2.763370127s ago: executing program 1 (id=787): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad", 0x4e, 0x850, 0x0, 0x0) mprotect(&(0x7f00005ae000/0x1000)=nil, 0x1000, 0x3) timer_create(0x0, 0x0, 0x0) 9m1.292838836s ago: executing program 1 (id=788): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 8m58.377398084s ago: executing program 1 (id=790): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 8m51.044219171s ago: executing program 1 (id=795): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 8m45.404483375s ago: executing program 1 (id=799): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 8m41.354425261s ago: executing program 1 (id=801): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) socket$nl_route(0x10, 0x3, 0x0) 8m24.5167618s ago: executing program 35 (id=801): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) socket$nl_route(0x10, 0x3, 0x0) 4m39.031792403s ago: executing program 0 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) accept$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50) connect$unix(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, 0x0, 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100000a1}, 0x22000000) 4m33.129844106s ago: executing program 0 (id=995): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) 4m27.545483722s ago: executing program 0 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x8, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000340)=@raw=[@generic={0x7, 0x5, 0xe, 0x3, 0x6}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x2, 0x3, 0x8, 0x3, 0x0, 0x8}], &(0x7f0000000280)='GPL\x00', 0x6b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4m26.004100111s ago: executing program 0 (id=1005): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m24.263040559s ago: executing program 0 (id=1008): syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) read(r4, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x100000001, 0x5, 0x100000000000000, 0x6, 0x0, 0x800000, 0x6, 0x0, 0x4, 0x9, 0x0, 0x1e87, 0xfffffffffffffffc, 0x7, 0x0, 0x1000, 0x8, 0x7, 0x3, 0x0, 0x4}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xa, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3266078b089b3b08384409089020878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d07680936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1025}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") socket$nl_generic(0x10, 0x3, 0x10) 4m18.361150992s ago: executing program 0 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 4m16.533810264s ago: executing program 36 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x10) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) 3m42.936877935s ago: executing program 5 (id=1074): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r0 = socket(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x484, @loopback}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000280)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file2\x00', 0x0) 3m40.262344835s ago: executing program 5 (id=1080): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4877, 0x1, 0x100, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1e, 0x805, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, 0x0, 0x82040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x104) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000, 0xa00}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 3m38.844243802s ago: executing program 5 (id=1083): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000002d, 0x20004880) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) 3m31.04741216s ago: executing program 5 (id=1090): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3m30.406530717s ago: executing program 5 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r1, 0x4b3d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x6, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) splice(r4, &(0x7f0000000040)=0x8, r2, &(0x7f0000000180)=0x10001, 0x4, 0x6) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000000000), 0x0) 3m27.622433422s ago: executing program 5 (id=1094): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") fcntl$setlease(r7, 0x400, 0x0) r8 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@loopback}, 0x0, @in6=@private1}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="2000ea080a000100000000000000000005000c0008"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) 3m11.889107848s ago: executing program 37 (id=1094): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZHOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZndk1uyayWXH382n24Xl+33meJxmySZEnH74823+Qx6OnX/wSWZZEbxzjOExiFL1ofBUnjL8JAOD/7LAo4vdiYZ1cEhHZ5pYFAGzQav//+23zp0tZFgCwQffffe/tnd3du+9kkcW92dcHk/KTffl3Mb7zKD6OaTyM12IYRxHV+4T6g3/ZvlcUxbyfl0ZxazY/mJTJ2QfP6uvv/BZR5bdjGKPjWPVuo8q/tXt3u4rng05+Xq7j+Xr+cZm/E8N48Th8In9nkc+7+Zik8eornfXfjmH8/FF8EtN4UC2izX+5nedvFt/+8fn75fLKfDI/mAyqulaxdZnPCwAAAAAAAAAAAAAAAAAAAAAAV9vtvDl8J78Zt2ZlV33+ztZRWtfUJaM2VY4vWknT1TkfqDQv4vvOkYJ5URe25/v046V+92BBAAAAAAAAAAAAAAAAAAAAuL6efPrZ/t50+vDxhTSa0wD6EfHn/Yh/e51xp+dmnF88qOfcm057dfNEzbO02xNbTU0Sce4yyk1c0MPyT43nTq+5afzwY7nBdS6YdXpeX77BG5vfV3N37e8ly+caRNOT1TfJd2lEW5PGinOlZw0Vsc7tly4dGq699/SFqjE/s6Y5B+Os67zx62K87klO7yKtHtWls9+oG534qXtjpec9skX8768VSXVax2BDr0QAAAAAAAAAAAAAAAAAAED77d8lg0/PjfYKXwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ipof/9/jca8Dq9QnMbjJ//xFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgG/goAAP///CFRHg==") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x30}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") fcntl$setlease(r7, 0x400, 0x0) r8 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@loopback}, 0x0, @in6=@private1}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="2000ea080a000100000000000000000005000c0008"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2m11.745098644s ago: executing program 9 (id=1223): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000006111100000000000040000000000000095000000000000008e74b0e7f036a035abcbcd98d3a750f0d95fadb0ed2a7446f042197512afbcedeefe18f6638b6575c874996a3a0e38598d02e9a49930bd29846f2d77951c8762aa196169bf80ab31529470cf69c5af7ccf5e4a41ccf22eb7543b2e938f2c8261a26fb9a90ce79262a946f55b4ef69d10470102f5558f59038b4164c516145a2c8b46f5f114cc5a2fb1bc28e1d892a30887449892b5d935363c65a394a0c7b0709a0431c3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x32, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000640)=ANY=[@ANYBLOB="696f6368617273b15b7065c61e0c5fa7e565743d69736f383835392d332c696f636861727365743d61736369692c756e695f786c6174653d312c756e695f786c6174653d312c696f526861727365743d6d616363656e746575726f2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c757466383d312c726f6469722c696f632861727365743d69736f383835392d342c757466383d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616de53d77696e39352c636865636b3d7374726963742ccf5fa9c2b11008b6cde4b667c70a51cf2f4fc989"], 0x1, 0x36e, &(0x7f0000000240)="$eJzs3U1oY1UbAOA3vWnSDnxfuxMFIboTpExnpxs7SAcGu1EJ/izE4HRUmiq0WOgsJq0LXQsudeVOQRcuxKUIirhz4dYRZFTcOLsBB48kNze5TW47RWml+DwwyZlzznvOe3+apJeb0xdXYuPKbFy9detmzM3Vor7y+ErcrsViZFHYi2mNijoA4Gy4nVL8nnKTbXPVIbVTSAsAOEGD9/+XI6IVi3nNm18d1T959weAM2/4+//8UX0OuQ4Q8fqJpAQAnLCp6/8PHmhuDP7Vi//WS3cFAABn1dPPPf/ExbWIp1qtuYjNt3faO+14dNx+8Wq8Gt1Yj/OxEHci8g8K/Yfa4PHS5bXV861Wqxc/L0Y7ImaGge0sv1MgG8Q3YzkWYnEYP/y0kVLKLn26trrcGoiIvd5g/tis7bRn49xw/h/Oxfr4g0cxyOAp4vLa6oXWcID2ZhHfi9gf36jQz38pFuK7l0bDpFTcwbi2en25SHocv9NuxpXRXjj0CggAAAAAAAAAAAAAAAAAAAAAAPwtS62RxdH6Oan/nK+Us7RU0T5YHyePH64PtJ+vD5SaKdJ+MXZ5faDJ9Xl2LCQIAAAAAAAAAAAAAAAAAAAAI9u7jeh0u+tb27vXNsqF3tb27kxE9Gte++bjL+ejaGoOQ6uiDhTqeb9+/6KpNYy9ttFJWdE5ZRHT4Vl5ig8/G2Vc7tMcbUVlGs3Dm7rd/z3w03vjmvuzYuQ/x32yqN7ArJTGYxMjb/4/T+nw3XJE4UK5pjk9+42UUqnmrXL49RemB4xaRD0q5pqv2OHlwkwcnmrqF76++cq9xd7vfJFyDz288MyNdz/4daPT7c+cnySNre07aaNTKzofY28Mh0uDQzA+N2qRF2rlM6E+FV6q2T/Y1Mm+/+3Z+9759ngHJZVr3uifzxN9snxzPpkMb+SFfpoTTfPj8Nnip2h99i7HoqpQdUzvUrjn/c8/SunHX449xdjM1MtG7Z+/8gAAAAAAAAAAAAAAAAAAAJNK3xUffum6lzfMHhX1yJOnlB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnIrx3/8vFfb3YqLmOIU/ehVRzfWt7YjGv72ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8x/0VAAD//3XiXqU=") syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002000010000210000fddbdf240a0000000000000106000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000040) 2m8.469228157s ago: executing program 9 (id=1226): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00009de000/0x2000)=nil) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) dup3(r0, r6, 0x0) 2m6.146027969s ago: executing program 9 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) process_vm_readv(r0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000240)=""/117, 0x75}, {&(0x7f00000009c0)=""/140, 0xffffffb9}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000c00)=""/202, 0xca}, {&(0x7f00000006c0)=""/66, 0x4e}], 0x9, &(0x7f00000001c0)=[{&(0x7f0000000b40)=""/142, 0x8e}, {&(0x7f0000000e80)=""/245, 0xf5}, {&(0x7f0000000f80)=""/164, 0xa4}, {&(0x7f00000000c0)=""/55, 0x37}], 0x4, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000180)={0x65f5, 0x0, 0xff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) 2m4.592997053s ago: executing program 9 (id=1235): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4877, 0x1, 0x100, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r1 = socket(0x1e, 0x805, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x104) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000, 0xa00}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 1m58.322121733s ago: executing program 9 (id=1240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000008", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x50) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") 1m53.829299752s ago: executing program 9 (id=1245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.108583195s ago: executing program 38 (id=1245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 24.546355546s ago: executing program 4 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) getrlimit(0x4, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0xff, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xffffff00, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x14, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @common=@ipv6header={{0x28}, {0x21, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r6, 0x1, 0x0) 23.189587923s ago: executing program 4 (id=1384): read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000840)={[{@auto_da_alloc_val}, {@noquota}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@dioread_nolock}, {@dax_never}], [{@flag='async'}, {@subj_role={'subj_role', 0x3d, 'noquota'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@fowner_gt={'fowner>', r0}}, {@fowner_gt={'fowner>', r0}}, {@uid_lt={'uid<', r0}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 20.691846583s ago: executing program 4 (id=1386): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mknod$loop(&(0x7f0000000300)='./file0/file0\x00', 0x100000000000600d, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x2, "2cf56944f2"}, 0x6, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000240), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0xffffffea, 0x0) r8 = dup(r7) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@empty, 0x1, 0x0, 0x30, 0x0, [{@initdev}, {@broadcast}, {@private}]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x71, &(0x7f0000000580)=0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000400)=0x40) 16.176946916s ago: executing program 7 (id=1397): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000006111100000000000040000000000000095000000000000008e74b0e7f036a035abcbcd98d3a750f0d95fadb0ed2a7446f042197512afbcedeefe18f6638b6575c874996a3a0e38598d02e9a49930bd29846f2d77951c8762aa196169bf80ab31529470cf69c5af7ccf5e4a41ccf22eb7543b2e938f2c8261a26fb9a90ce79262a946f55b4ef69d10470102f5558f59038b4164c516145a2c8b46f5f114cc5a2fb1bc28e1d892a30887449892b5d935363c65a394a0c7b0709a0431c3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x32, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002000010000210000fddbdf240a0000000000000106000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000040) 15.991182452s ago: executing program 4 (id=1398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xfdfd, &(0x7f0000001540)="09ab"}) 14.121153535s ago: executing program 8 (id=1399): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13.379328177s ago: executing program 6 (id=1401): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e000000835827f1feaebde921b3704abd315194031b058c1e3562cce6a05247756639915d7996a6444185d0d88b5786bbc86ce0329e0179fc96bbd92c5cdfd3b4e46d5d39430faa471d3acd3e767ac80efc155e43894d38e5596346412f103ce70619bdc0bfee"], 0x14}}, 0x4000054) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) sendmmsg$sock(r6, &(0x7f0000002800)=[{{&(0x7f0000000300)=@nl, 0x80, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}], 0x1, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xd1f0}}], 0x60}}, {{&(0x7f00000020c0)=@phonet={0x23, 0x8, 0x4, 0x4}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002140)}, {0x0}, {&(0x7f0000002240)="c32ffe0612e03fb572f0a099f7f6502322152b4a3194a5391c9cc26010d9c1b58f67fbbb0858e8863d074d58bd499e2a1e432ac2fe7f907bd328dacfdae10f3a73d23d3f65eee9f8b92dda682954c5c30d7d73a4249dc298f24c5548e2e1cc7ab3f1412a4ff42cd1269390ca65450de618313328c808b3904a554fbff5946f6e82ce2538", 0x84}, {&(0x7f0000002300)="811b01937dfcaa8192f2c2b3e07059310e90c001b95ea5788906a993c2b8352b982b88c56bbabce03615825bac24c937591ac79aadc3498075bb44f1b6c4845bfcd178f0b86947bd8766ac99065d02475ae3266835eeefbde2848a27566e4249624f9116bd9230db2a6a2152d65504fd061b47c52622e176828cb6a64a6f5dbea4", 0x81}], 0x4}}, {{&(0x7f0000002500)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000002780)=[{&(0x7f00000004c0)="29cdc70ec170061a9d18e7f89c11095636c9c1b9305975ceccdb71e24d00c06c75cb8b8c5b1b5a23baf752b1161e61508be6044ca5a2c81cbe816e0b792bffe410e9154da8baf28eecd59de0f06f3f23fa4eed452bb47dd4a9f69075b3c00b63d8bc57a98039108adbdfa19ca7032cbe63c8ea45497bc62677a6c228de7db18863b78ad664f529bb107878cb2a1f753c9deed30a02f244860c32d73483f8d917342642f944db8d6088e133f787548f55eefeff9782a3b98375b9baec7235d99e1e2db6725f3c0fda3d9e48f9294c5eabffeac74579a1b8a2b3c9320f040493264b08abd2c5bf05d4f7050e7d73a53e5c388f4f6fa0b5a596dc3b", 0xfa}, {&(0x7f0000002700)="644d2f40454a3510031af8e98702c553d0b038b83306bffd8ac5fa879498eef27fb090361e916ad5e8197e89c1db0d4dd01e99b17e0c8d7b40178b88f835e2a47f1e6fe5ce1c3259d6e84289b0c08433209296184723316d", 0x58}], 0x2, &(0x7f00000027c0)=[@timestamping={{0x14, 0x1, 0x25, 0x56}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}], 0x30}}], 0x4, 0x4000080) bind$inet(r0, 0x0, 0x0) 12.26308845s ago: executing program 8 (id=1402): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10001) munlockall() writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 12.123019771s ago: executing program 7 (id=1403): socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) io_submit(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000010540)={0x2020}, 0x2020) 9.657210721s ago: executing program 6 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60280, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002040)={{}, "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"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 9.656631927s ago: executing program 8 (id=1405): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x800455cc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 8.033106923s ago: executing program 6 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020681af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xe9a, 0x0, 0x0, 0x0, 0xf19fe9cea440ae05, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 7.707006554s ago: executing program 4 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) umount2(0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="890c0400000000003c0012800b00010069703667726500002c0002801400060000000000000000000000ffff0000000014000700fc000000000000000000000000000000d86bf0724c2bdccf885e119a2bb4377bd6092e1d19fdbd5df17145c59245330959ee9f2031136ce31e77d678b0ea1c64f435491e869b6e6770dae5f802009e942bd3f95b072dc18b"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000480), 0x10) clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b45c89b60cc724768949ec50040000000000007910480000000000610400000400000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x8, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000300)={&(0x7f0000000000)={[0x5d2]}, 0xffffffffffffff01}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000240)={0xd, [0x762e, 0x2833], 0x5}, 0x10) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 7.573041242s ago: executing program 6 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 7.310588415s ago: executing program 7 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000008", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x50) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32], 0x2, 0x227, &(0x7f0000000580)="$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") 5.560589995s ago: executing program 7 (id=1410): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002064060000000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x1, 0x632, &(0x7f0000001280)="$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") 4.877151534s ago: executing program 4 (id=1411): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000240)='pstore\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 4.517907299s ago: executing program 8 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x300}, 0x8040) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d40)={0x114, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="7a0d26bb729c8d8bb6922f2beefeb6f28f8ab4ebd42b4307120c540336e3990cb5172d4d58e1ad8f6cf2862b57da824d89204783e0ee2336c98eb17bba9f02e77e717a0c9f8b861659f8ba8a94a2e67a0f95195f78310a44d5852c9ae55c0d805482d701052c1454f3ae25f34e3df0f99cd3777c02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480), 0x56}}], 0x56, 0x10) socket(0xa, 0x1, 0x0) 4.517417641s ago: executing program 6 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000006111100000000000040000000000000095000000000000008e74b0e7f036a035abcbcd98d3a750f0d95fadb0ed2a7446f042197512afbcedeefe18f6638b6575c874996a3a0e38598d02e9a49930bd29846f2d77951c8762aa196169bf80ab31529470cf69c5af7ccf5e4a41ccf22eb7543b2e938f2c8261a26fb9a90ce79262a946f55b4ef69d10470102f5558f59038b4164c516145a2c8b46f5f114cc5a2fb1bc28e1d892a30887449892b5d935363c65a394a0c7b0709a0431c3"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x32, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) pread64(0xffffffffffffffff, &(0x7f00000007c0)=""/222, 0xde, 0x18000000000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002000010000210000fddbdf240a0000000000000106000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000040) 2.284290185s ago: executing program 8 (id=1414): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/282], 0x0, 0x68}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0xee00, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d0007010000000000000000017c"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1c8, 0xfdef) 886.031937ms ago: executing program 8 (id=1415): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 828.192757ms ago: executing program 7 (id=1416): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file1\x00', 0x80) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file1\x00', 0x2) 369.557539ms ago: executing program 7 (id=1417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) 0s ago: executing program 6 (id=1418): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): t promiscuous mode [ 1098.357626][T11024] veth0_macvtap: left promiscuous mode [ 1098.413401][T11024] veth1_vlan: left promiscuous mode [ 1098.419445][T11024] veth0_vlan: left promiscuous mode [ 1098.850896][ T5838] Bluetooth: hci1: command tx timeout [ 1099.344495][ T9452] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1099.564236][ T9452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.632847][ T9452] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.659335][ T9452] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.691540][ T9452] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.734780][ T9452] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.760040][ T9452] usb 8-1: config 0 descriptor?? [ 1099.821808][T12106] loop0: detected capacity change from 0 to 512 [ 1099.998933][T12106] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.939: inode has both inline data and extents flags [ 1100.059459][T12106] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.939: couldn't read orphan inode 15 (err -117) [ 1100.104788][T12106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.198548][ T9452] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1100.239992][T11024] team0 (unregistering): Port device team_slave_1 removed [ 1100.788139][ T31] audit: type=1804 audit(1765625989.093:181): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.939" name="/newroot/320/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1100.949988][ T5838] Bluetooth: hci1: command tx timeout [ 1101.077316][T12112] Invalid ELF header magic: != ELF [ 1101.313567][ T31] audit: type=1800 audit(1765625989.093:182): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.939" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1101.341618][T12118] Driver unsupported XDP return value 0 on prog (id 185) dev N/A, expect packet loss! [ 1101.380930][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.596992][T11024] team0 (unregistering): Port device team_slave_0 removed [ 1102.347045][ T89] usb 8-1: USB disconnect, device number 2 [ 1102.848692][T12123] loop7: detected capacity change from 0 to 40427 [ 1102.885938][T12123] F2FS-fs (loop7): invalid crc value [ 1104.078299][T12123] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1104.092753][T12139] Zero length message leads to an empty skb [ 1104.169680][T12123] F2FS-fs (loop7): Start checkpoint disabled! [ 1104.252251][T12123] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1104.288846][T12123] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1105.535746][T12046] hsr_slave_0: entered promiscuous mode [ 1105.584540][T12046] hsr_slave_1: entered promiscuous mode [ 1105.612141][T12046] debugfs: 'hsr0' already exists in 'hsr' [ 1105.617881][T12046] Cannot create hsr debugfs directory [ 1106.587413][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.955'. [ 1106.838748][T12071] chnl_net:caif_netlink_parms(): no params data found [ 1108.120086][T12173] capability: warning: `syz.0.959' uses deprecated v2 capabilities in a way that may be insecure [ 1108.579786][T12179] netlink: 16 bytes leftover after parsing attributes in process `syz.8.958'. [ 1109.673856][T11024] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.948795][T11024] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.020252][T12206] FAT-fs (loop15): unable to read boot sector [ 1111.171092][T11024] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.194431][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.204419][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.217500][T12071] bridge_slave_0: entered allmulticast mode [ 1111.226274][T12210] loop8: detected capacity change from 0 to 512 [ 1111.235934][T12071] bridge_slave_0: entered promiscuous mode [ 1111.416842][T12210] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1111.464425][T12210] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1111.545672][T12210] EXT4-fs (loop8): 1 truncate cleaned up [ 1111.572405][T12208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1112.349500][T12210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.459831][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.519341][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.566666][T12071] bridge_slave_1: entered allmulticast mode [ 1112.603544][T12071] bridge_slave_1: entered promiscuous mode [ 1112.709212][T12215] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1114.039648][T12227] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1114.731006][T12227] loop7: detected capacity change from 0 to 1024 [ 1114.738466][T12227] ext4: Unknown parameter 'measure' [ 1115.103476][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.795833][T11024] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.001779][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.022253][T12237] loop0: detected capacity change from 0 to 512 [ 1116.139695][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.242062][T12237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.361245][T12237] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1116.541721][T12250] loop8: detected capacity change from 0 to 1024 [ 1116.624363][T12250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1116.637926][T12253] loop5: detected capacity change from 0 to 1024 [ 1116.661208][T12253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1116.672160][T12250] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1116.685801][T12071] team0: Port device team_slave_0 added [ 1116.695343][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.734961][T12071] team0: Port device team_slave_1 added [ 1116.768005][T12253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 1116.788298][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.815356][T12253] System zones: 0-1, 3-36 [ 1116.901757][T12253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.003245][ T31] audit: type=1800 audit(1765626005.563:183): pid=12253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.979" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1117.187472][T12263] loop8: detected capacity change from 0 to 8192 [ 1117.194822][T12263] ======================================================= [ 1117.194822][T12263] WARNING: The mand mount option has been deprecated and [ 1117.194822][T12263] and is ignored by this kernel. Remove the mand [ 1117.194822][T12263] option from the mount to silence this warning. [ 1117.194822][T12263] ======================================================= [ 1117.398899][T12263] x_tables: duplicate entry at hook 3 [ 1118.186586][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.340992][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.398674][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.554034][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.625691][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.661332][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.707451][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.687129][ T31] audit: type=1326 audit(1765626008.243:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5838f749 code=0x7ffc0000 [ 1119.937096][ T31] audit: type=1326 audit(1765626008.403:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5838f749 code=0x7ffc0000 [ 1120.053996][ T31] audit: type=1326 audit(1765626008.413:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fba5838f749 code=0x7ffc0000 [ 1120.082475][ T31] audit: type=1326 audit(1765626008.413:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5838f749 code=0x7ffc0000 [ 1120.164462][ T31] audit: type=1326 audit(1765626008.413:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba5838f749 code=0x7ffc0000 [ 1120.428546][ T31] audit: type=1326 audit(1765626008.413:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba58391667 code=0x7ffc0000 [ 1120.452657][ T31] audit: type=1326 audit(1765626008.413:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fba583915dc code=0x7ffc0000 [ 1120.499349][ T31] audit: type=1326 audit(1765626008.413:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fba58391514 code=0x7ffc0000 [ 1120.575950][ T31] audit: type=1326 audit(1765626008.413:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12275 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fba58391514 code=0x7ffc0000 [ 1120.624567][T12071] hsr_slave_0: entered promiscuous mode [ 1120.650313][T12071] hsr_slave_1: entered promiscuous mode [ 1120.656680][T12071] debugfs: 'hsr0' already exists in 'hsr' [ 1120.708541][T12071] Cannot create hsr debugfs directory [ 1122.340279][T12284] loop7: detected capacity change from 0 to 16 [ 1122.584776][T12284] erofs (device loop7): mounted with root inode @ nid 36. [ 1122.796882][T12285] loop8: detected capacity change from 0 to 40427 [ 1122.960343][T12285] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1122.968129][T12285] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1123.075447][T12285] F2FS-fs (loop8): invalid crc value [ 1123.199624][T12285] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1123.212960][T12285] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1123.220067][T12285] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1124.982953][T12296] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1124.996752][T12046] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1125.900631][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.907276][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.126299][T12310] loop5: detected capacity change from 0 to 512 [ 1126.782223][T12310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.989: bg 0: block 393: padding at end of block bitmap is not set [ 1126.808607][T12310] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1126.823156][T12310] EXT4-fs (loop5): 2 truncates cleaned up [ 1126.855244][T12310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.142180][T11024] bridge_slave_1: left allmulticast mode [ 1127.178898][T11024] bridge_slave_1: left promiscuous mode [ 1127.219363][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.294734][T12315] loop0: detected capacity change from 0 to 512 [ 1127.388137][T12315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.461282][T12315] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.966848][T11024] bridge_slave_0: left allmulticast mode [ 1128.012922][T11024] bridge_slave_0: left promiscuous mode [ 1128.025592][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.071517][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.839447][T11024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.900041][T11024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.917116][T11024] bond0 (unregistering): Released all slaves [ 1132.954013][T12046] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1132.965706][T12046] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1133.182570][T12046] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1133.223162][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.326424][T12338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1134.037512][T12353] loop0: detected capacity change from 0 to 16 [ 1134.108450][T12353] erofs (device loop0): mounted with root inode @ nid 36. [ 1134.452795][T12359] loop5: detected capacity change from 0 to 16 [ 1135.283068][T12359] erofs (device loop5): mounted with root inode @ nid 36. [ 1135.396244][T12359] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 1135.438675][ T5838] erofs (device loop5): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 4868 [ 1135.451726][T12359] erofs (device loop5): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 4096 [ 1135.462328][T12359] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1135.474605][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1135.474651][ T31] audit: type=1800 audit(1765626024.033:205): pid=12359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.994" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1136.658130][T12381] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1137.158099][T12386] loop8: detected capacity change from 0 to 512 [ 1137.296590][T12386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1137.309934][T12386] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 1137.991116][T11024] hsr_slave_0: left promiscuous mode [ 1138.003142][T11024] hsr_slave_1: left promiscuous mode [ 1138.665357][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.713299][T11024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.890263][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.950024][T11024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.160971][T11024] veth1_macvtap: left promiscuous mode [ 1139.189234][T11024] veth0_macvtap: left promiscuous mode [ 1139.194910][T11024] veth1_vlan: left promiscuous mode [ 1140.287104][T11024] veth0_vlan: left promiscuous mode [ 1140.783976][T12405] loop0: detected capacity change from 0 to 512 [ 1140.840458][T12405] EXT4-fs: Ignoring removed bh option [ 1140.886520][T12405] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1141.070921][T12406] loop5: detected capacity change from 0 to 128 [ 1141.142724][T12405] EXT4-fs (loop0): 1 truncate cleaned up [ 1141.222153][T12405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.269480][T12406] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1141.510652][T12417] loop8: detected capacity change from 0 to 256 [ 1141.530309][T12417] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1142.294136][T12418] overlayfs: upper fs needs to support d_type. [ 1142.369475][T12406] ext4 filesystem being mounted at /348/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.702245][T12406] xt_hashlimit: max too large, truncated to 1048576 [ 1143.483731][ T5830] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1143.541179][ T5830] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1143.716987][T11888] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.063363][T11024] team0 (unregistering): Port device team_slave_1 removed [ 1144.159003][T11024] team0 (unregistering): Port device team_slave_0 removed [ 1146.425593][T12435] loop7: detected capacity change from 0 to 256 [ 1147.309193][T12435] exFAT-fs (loop7): failed to test first cluster bit of root dir(5) [ 1147.657808][T12434] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 1148.321267][ T5831] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1148.463822][T11204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1148.480267][T11204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1148.496873][T11204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.520307][T11204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1148.553210][T11204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1150.754668][T11204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1150.763929][T11204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1150.773187][T11204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1150.785041][T11204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1150.793331][T11204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1151.434507][T11204] Bluetooth: hci2: command tx timeout [ 1152.983721][T12437] chnl_net:caif_netlink_parms(): no params data found [ 1153.494667][ T5143] Bluetooth: hci2: command tx timeout [ 1153.664515][ T5143] Bluetooth: hci4: command tx timeout [ 1153.711641][T12501] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1153.824236][T12458] chnl_net:caif_netlink_parms(): no params data found [ 1154.083893][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1154.098011][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1154.107578][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1154.116716][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1154.124574][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1154.216264][T12437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.232048][T12437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.244551][T12437] bridge_slave_0: entered allmulticast mode [ 1154.262170][T12437] bridge_slave_0: entered promiscuous mode [ 1154.281408][T12437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.288557][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.320904][T12437] bridge_slave_1: entered allmulticast mode [ 1154.344007][T12437] bridge_slave_1: entered promiscuous mode [ 1155.755750][ T5143] Bluetooth: hci2: command tx timeout [ 1155.761216][ T5143] Bluetooth: hci4: command tx timeout [ 1155.794279][T12437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.136278][T12437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.209359][ T5838] Bluetooth: hci1: command tx timeout [ 1156.594887][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.616107][T12504] loop7: detected capacity change from 0 to 40427 [ 1156.629322][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.657733][T12504] F2FS-fs: heap/no_heap options were deprecated [ 1156.666769][T12458] bridge_slave_0: entered allmulticast mode [ 1156.731917][T12504] F2FS-fs (loop7): Unable to read 1th superblock [ 1156.761752][T12458] bridge_slave_0: entered promiscuous mode [ 1156.775097][T12504] F2FS-fs (loop7): build fault injection rate: 19 [ 1156.829147][T12504] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1156.896501][T12504] F2FS-fs (loop7): invalid crc value [ 1157.034520][T12504] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 1157.067017][T12437] team0: Port device team_slave_0 added [ 1157.242856][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.282427][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.330361][T12458] bridge_slave_1: entered allmulticast mode [ 1157.351243][T12458] bridge_slave_1: entered promiscuous mode [ 1157.458043][T12437] team0: Port device team_slave_1 added [ 1157.619696][ T6154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.836040][ T5143] Bluetooth: hci2: command tx timeout [ 1157.841503][ T5838] Bluetooth: hci4: command tx timeout [ 1158.310399][ T5143] Bluetooth: hci1: command tx timeout [ 1158.913669][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.006284][T12437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.033186][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.101650][T12437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.214309][ T6154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.298004][T12570] loop5: detected capacity change from 0 to 1024 [ 1159.312238][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.324514][T12570] EXT4-fs: Ignoring removed mblk_io_submit option [ 1159.356018][T12437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.388297][T12437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.460685][T12437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.464008][T12570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.511417][T12570] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1159.776668][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.789589][ T6154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.059386][ T5143] Bluetooth: hci4: command tx timeout [ 1160.530252][T12581] block device autoloading is deprecated and will be removed. [ 1160.555032][ T5143] Bluetooth: hci1: command tx timeout [ 1161.150785][T12458] team0: Port device team_slave_0 added [ 1161.255670][ T6154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.377495][T12437] hsr_slave_0: entered promiscuous mode [ 1161.403465][T12437] hsr_slave_1: entered promiscuous mode [ 1161.424669][T12437] debugfs: 'hsr0' already exists in 'hsr' [ 1161.437330][T12437] Cannot create hsr debugfs directory [ 1161.471816][T12458] team0: Port device team_slave_1 added [ 1161.632700][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.653800][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.731985][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.838503][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.873677][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.920248][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.207897][T12618] loop7: detected capacity change from 0 to 16 [ 1162.258094][T12618] erofs: Unknown parameter '0xffffffffffffffff' [ 1162.609453][ T5838] Bluetooth: hci1: command tx timeout [ 1163.333516][ T5838] Bluetooth: hci6: command 0x1003 tx timeout [ 1163.333639][ T5143] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1163.820144][T12458] hsr_slave_0: entered promiscuous mode [ 1163.837044][T12458] hsr_slave_1: entered promiscuous mode [ 1163.870294][T12458] debugfs: 'hsr0' already exists in 'hsr' [ 1163.876064][T12458] Cannot create hsr debugfs directory [ 1163.897964][T12509] chnl_net:caif_netlink_parms(): no params data found [ 1164.500860][ T6262] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1164.853753][ T6154] bridge_slave_1: left allmulticast mode [ 1164.865226][ T6154] bridge_slave_1: left promiscuous mode [ 1164.873987][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.884550][ T6154] bridge_slave_0: left allmulticast mode [ 1164.890424][ T6154] bridge_slave_0: left promiscuous mode [ 1164.896407][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.909020][ T6154] bridge_slave_1: left allmulticast mode [ 1164.918262][ T6154] bridge_slave_1: left promiscuous mode [ 1164.925415][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.947885][ T6262] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1164.969127][ T6262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.632744][ T6262] usb 9-1: config 0 descriptor?? [ 1165.634300][ T6154] bridge_slave_0: left allmulticast mode [ 1165.681508][ T6154] bridge_slave_0: left promiscuous mode [ 1165.696246][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.859123][ T6262] usb 9-1: can't set config #0, error -71 [ 1165.872550][ T6262] usb 9-1: USB disconnect, device number 2 [ 1166.344132][T12674] loop8: detected capacity change from 0 to 256 [ 1166.394898][T12674] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1166.480862][ T31] audit: type=1800 audit(1765626055.043:206): pid=12674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1049" name="file2" dev="loop8" ino=1048627 res=0 errno=0 [ 1166.998774][T12677] loop5: detected capacity change from 0 to 256 [ 1167.165950][T12677] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1167.176894][T12677] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1167.304740][T12677] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1167.329538][T12677] exFAT-fs (loop5): failed to load alloc-bitmap [ 1167.335891][T12677] exFAT-fs (loop5): failed to recognize exfat type [ 1168.589292][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 1169.207979][T12668] loop7: detected capacity change from 0 to 128 [ 1169.640341][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.700785][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.722296][ T6154] bond0 (unregistering): Released all slaves [ 1170.563153][T12696] netlink: 'syz.7.1051': attribute type 16 has an invalid length. [ 1170.600673][T12696] netlink: 'syz.7.1051': attribute type 17 has an invalid length. [ 1170.847651][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.866859][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.878742][ T6154] bond0 (unregistering): Released all slaves [ 1170.976262][T12680] bridge0: port 3(gretap0) entered blocking state [ 1170.983837][T12680] bridge0: port 3(gretap0) entered disabled state [ 1170.990737][T12680] gretap0: entered allmulticast mode [ 1170.998062][T12680] gretap0: entered promiscuous mode [ 1171.006396][T12680] bridge0: port 3(gretap0) entered blocking state [ 1171.013268][T12680] bridge0: port 3(gretap0) entered forwarding state [ 1171.039763][T12692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1173.569185][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 1174.568623][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.588439][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.604587][T12509] bridge_slave_0: entered allmulticast mode [ 1174.625334][T12509] bridge_slave_0: entered promiscuous mode [ 1174.842366][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.857895][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.883826][T12509] bridge_slave_1: entered allmulticast mode [ 1174.904306][T12509] bridge_slave_1: entered promiscuous mode [ 1175.803944][ T6154] hsr_slave_0: left promiscuous mode [ 1175.830924][ T6154] hsr_slave_1: left promiscuous mode [ 1175.846087][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.901268][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.020808][ T6154] hsr_slave_0: left promiscuous mode [ 1176.043464][ T6154] hsr_slave_1: left promiscuous mode [ 1176.057852][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.081562][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.114075][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.139107][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.212995][ T6154] veth1_macvtap: left promiscuous mode [ 1176.261107][ T6154] veth0_macvtap: left promiscuous mode [ 1176.266797][ T6154] veth1_vlan: left promiscuous mode [ 1176.278496][ T6154] veth0_vlan: left promiscuous mode [ 1178.279015][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1178.369026][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1178.869344][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1178.898316][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1179.230888][T12757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1179.272297][T12774] bridge0: entered promiscuous mode [ 1179.288192][T12774] bridge0: port 4(vlan2) entered blocking state [ 1179.298703][T12774] bridge0: port 4(vlan2) entered disabled state [ 1179.305570][T12774] vlan2: entered allmulticast mode [ 1179.311203][T12774] bridge0: entered allmulticast mode [ 1179.326726][T12774] vlan2: left allmulticast mode [ 1179.333445][T12774] bridge0: left allmulticast mode [ 1179.342884][T12774] bridge0: left promiscuous mode [ 1179.378361][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.423252][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.600507][T12509] team0: Port device team_slave_0 added [ 1179.616832][T12509] team0: Port device team_slave_1 added [ 1179.699442][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.708522][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.735951][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.752943][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.767314][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.802013][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.914977][T12509] hsr_slave_0: entered promiscuous mode [ 1179.923283][T12509] hsr_slave_1: entered promiscuous mode [ 1179.930099][T12509] debugfs: 'hsr0' already exists in 'hsr' [ 1179.935942][T12509] Cannot create hsr debugfs directory [ 1180.123787][T12437] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1180.141054][T12437] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1182.329256][T12437] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1183.515080][T12437] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1184.192725][ T6154] IPVS: stop unused estimator thread 0... [ 1184.389437][ T6154] bridge_slave_1: left allmulticast mode [ 1184.395129][ T6154] bridge_slave_1: left promiscuous mode [ 1184.574526][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.608277][ T6154] bridge_slave_0: left allmulticast mode [ 1184.627218][ T6154] bridge_slave_0: left promiscuous mode [ 1184.640610][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.631936][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.652474][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.670990][ T6154] bond0 (unregistering): Released all slaves [ 1185.876099][ T6154] hsr_slave_0: left promiscuous mode [ 1185.899525][ T6154] hsr_slave_1: left promiscuous mode [ 1185.918384][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.952858][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.134136][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1078'. [ 1186.349305][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 1186.357532][T12830] loop7: detected capacity change from 0 to 1024 [ 1186.390493][T12830] EXT4-fs: Ignoring removed nobh option [ 1186.398997][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 1186.436981][T12830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.513561][T12830] EXT4-fs error (device loop7): mb_free_blocks:2034: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 1186.763543][T12509] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1186.855025][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.865612][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.573260][T12437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.592040][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.617869][T12509] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1187.790405][T12509] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1187.961198][T12509] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1188.996507][T12437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.098012][T12437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1189.139391][T12437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1189.191499][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.198696][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.229835][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.236975][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.327128][T12458] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1189.377209][T12458] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1189.452272][T12458] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1189.540120][T12458] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1190.684156][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.858499][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.567689][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.574882][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.593249][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.600431][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.690611][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.852421][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.916144][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.923316][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.053616][T12437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.089020][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.096247][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.444008][T12888] loop7: detected capacity change from 0 to 256 [ 1192.608812][T12888] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1192.686804][T12888] exFAT-fs (loop7): valid_size(150994954) is greater than size(10) [ 1192.884555][ T31] audit: type=1800 audit(1765626081.423:207): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1086" name="file1" dev="loop7" ino=1048628 res=0 errno=0 [ 1193.398953][T12899] loop7: detected capacity change from 0 to 512 [ 1193.460359][T12899] ext4: Unknown parameter 'subj_role' [ 1193.806553][ T31] audit: type=1326 audit(1765626082.343:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.7.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ba58f749 code=0x7ffc0000 [ 1193.877414][ T31] audit: type=1326 audit(1765626082.343:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.7.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ba58f749 code=0x7ffc0000 [ 1193.953407][T12912] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1194.729269][ T31] audit: type=1326 audit(1765626082.463:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12897 comm="syz.7.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f80ba58f749 code=0x7ffc0000 [ 1195.064033][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.915706][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.540644][T12437] veth0_vlan: entered promiscuous mode [ 1196.634314][T12437] veth1_vlan: entered promiscuous mode [ 1198.767010][T12437] veth0_macvtap: entered promiscuous mode [ 1198.899297][T12437] veth1_macvtap: entered promiscuous mode [ 1198.975201][T12437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.053197][T12437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.116703][ T6077] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.204296][ T6077] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.449228][ T6077] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.478231][ T6077] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.604360][T12969] loop7: detected capacity change from 0 to 512 [ 1199.775764][T12969] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.1095: bg 0: block 393: padding at end of block bitmap is not set [ 1199.807912][T12969] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1199.828460][T12969] EXT4-fs (loop7): 2 truncates cleaned up [ 1199.855529][T12969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.951251][T12509] veth0_vlan: entered promiscuous mode [ 1201.023797][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.044507][T12509] veth1_vlan: entered promiscuous mode [ 1201.087931][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.227672][T12458] veth0_vlan: entered promiscuous mode [ 1201.260022][ T9965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.267854][ T9965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.368861][T12458] veth1_vlan: entered promiscuous mode [ 1201.477738][T12509] veth0_macvtap: entered promiscuous mode [ 1201.557105][T12509] veth1_macvtap: entered promiscuous mode [ 1201.687069][T12458] veth0_macvtap: entered promiscuous mode [ 1201.787410][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.838101][T12458] veth1_macvtap: entered promiscuous mode [ 1201.868096][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.894272][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.976618][T10240] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.057850][T10240] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.132597][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.163647][T10240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.227862][T10240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.267028][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.384229][ T6039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.419604][ T6039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.428357][ T6039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.497443][ T6039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.615372][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.668130][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.812892][ T9965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.869067][ T9965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.102509][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.182383][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.493440][ T6077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1207.558707][ T6077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.336361][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.6.57'. [ 1208.780941][T13025] loop7: detected capacity change from 0 to 512 [ 1208.957653][T13025] EXT4-fs error (device loop7): ext4_iget_extra_inode:5072: inode #15: comm syz.7.1106: corrupted in-inode xattr: invalid ea_ino [ 1209.003230][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1209.083211][T10240] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1209.121730][T13025] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1106: couldn't read orphan inode 15 (err -117) [ 1209.228485][T13025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.472466][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.009183][ T5838] Bluetooth: hci6: command 0x1003 tx timeout [ 1211.016797][ T5143] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1213.610941][T13066] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1113'. [ 1213.639375][T13066] netlink: 'syz.7.1113': attribute type 6 has an invalid length. [ 1213.647249][T13066] netlink: 'syz.7.1113': attribute type 5 has an invalid length. [ 1213.707503][T13066] netlink: 'syz.7.1113': attribute type 4 has an invalid length. [ 1218.448021][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1218.483387][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1218.491055][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1218.500151][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1218.507704][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1220.509242][T13016] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1220.530969][ T5143] Bluetooth: hci6: command tx timeout [ 1220.609725][T13107] loop8: detected capacity change from 0 to 40427 [ 1220.679179][T13107] F2FS-fs (loop8): invalid crc value [ 1220.691526][T13016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.778884][T13016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.839581][T13016] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1220.931934][ T6191] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.973184][T13016] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1221.008892][T13016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.028097][T13095] chnl_net:caif_netlink_parms(): no params data found [ 1221.070532][T13016] usb 8-1: config 0 descriptor?? [ 1221.195115][T13107] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1221.230686][T13107] F2FS-fs (loop8): Start checkpoint disabled! [ 1221.259441][T13107] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1221.277544][T13107] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1222.210282][T13016] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1222.242304][T13016] usb 8-1: USB disconnect, device number 3 [ 1222.307838][ T6191] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.578074][T13133] fido_id[13133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1222.612927][ T5143] Bluetooth: hci6: command tx timeout [ 1222.632542][T11024] kworker/u8:20: attempt to access beyond end of device [ 1222.632542][T11024] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1222.762584][T11024] CPU: 0 UID: 0 PID: 11024 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 1222.762632][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1222.762663][T11024] Workqueue: writeback wb_workfn (flush-7:8) [ 1222.762713][T11024] Call Trace: [ 1222.762724][T11024] [ 1222.762737][T11024] dump_stack_lvl+0x16c/0x1f0 [ 1222.762787][T11024] f2fs_handle_critical_error+0x624/0x9f0 [ 1222.762829][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.762874][T11024] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1222.762942][T11024] f2fs_write_end_io+0x958/0xcf0 [ 1222.762993][T11024] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1222.763042][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763096][T11024] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1222.763138][T11024] bio_endio+0x751/0x8a0 [ 1222.763189][T11024] submit_bio_noacct+0x306/0x1f40 [ 1222.763260][T11024] __submit_merged_bio+0x33c/0x710 [ 1222.763309][T11024] __submit_merged_write_cond+0x315/0x3f0 [ 1222.763364][T11024] f2fs_write_cache_pages+0x2075/0x2570 [ 1222.763443][T11024] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1222.763497][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763543][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763586][T11024] ? do_raw_spin_lock+0x12c/0x2b0 [ 1222.763636][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763690][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763738][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763781][T11024] ? do_raw_spin_unlock+0x172/0x230 [ 1222.763845][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763890][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.763933][T11024] ? f2fs_available_free_memory+0x279/0xa30 [ 1222.764056][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764100][T11024] ? lock_acquire+0x179/0x330 [ 1222.764143][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764194][T11024] f2fs_write_data_pages+0x5ac/0x1080 [ 1222.764243][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764300][T11024] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1222.764365][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764410][T11024] ? __lock_acquire+0x436/0x2890 [ 1222.764452][T11024] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1222.764507][T11024] do_writepages+0x27a/0x600 [ 1222.764554][T11024] ? __pfx_do_writepages+0x10/0x10 [ 1222.764596][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764641][T11024] ? reacquire_held_locks+0xcd/0x1f0 [ 1222.764695][T11024] __writeback_single_inode+0x168/0x14a0 [ 1222.764738][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764786][T11024] ? __pfx___writeback_single_inode+0x10/0x10 [ 1222.764825][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764869][T11024] ? do_raw_spin_unlock+0x172/0x230 [ 1222.764923][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.764975][T11024] writeback_sb_inodes+0x72e/0x1ce0 [ 1222.765035][T11024] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1222.765077][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765121][T11024] ? lock_acquire+0x179/0x330 [ 1222.765223][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765267][T11024] ? rcu_is_watching+0x12/0xc0 [ 1222.765302][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765346][T11024] ? queue_io+0x3f6/0x4f0 [ 1222.765410][T11024] wb_writeback+0x419/0xae0 [ 1222.765458][T11024] ? __pfx_wb_writeback+0x10/0x10 [ 1222.765494][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765551][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765596][T11024] ? mark_held_locks+0x49/0x80 [ 1222.765651][T11024] wb_workfn+0x14d/0xbb0 [ 1222.765698][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765743][T11024] ? try_to_wake_up+0x160/0x1860 [ 1222.765803][T11024] ? __pfx_wb_workfn+0x10/0x10 [ 1222.765848][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765897][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765947][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.765991][T11024] ? rcu_is_watching+0x12/0xc0 [ 1222.766032][T11024] process_one_work+0x9ba/0x1b20 [ 1222.766095][T11024] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1222.766154][T11024] ? __pfx_process_one_work+0x10/0x10 [ 1222.766204][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766259][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766303][T11024] ? assign_work+0x1a0/0x250 [ 1222.766354][T11024] worker_thread+0x6c8/0xf10 [ 1222.766413][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766460][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766503][T11024] ? __kthread_parkme+0x19e/0x250 [ 1222.766537][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766585][T11024] ? __pfx_worker_thread+0x10/0x10 [ 1222.766634][T11024] kthread+0x3c5/0x780 [ 1222.766684][T11024] ? __pfx_kthread+0x10/0x10 [ 1222.766731][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766775][T11024] ? rcu_is_watching+0x12/0xc0 [ 1222.766810][T11024] ? __pfx_kthread+0x10/0x10 [ 1222.766857][T11024] ret_from_fork+0x983/0xb10 [ 1222.766901][T11024] ? __pfx_ret_from_fork+0x10/0x10 [ 1222.766945][T11024] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.766988][T11024] ? __switch_to+0x7af/0x10d0 [ 1222.767037][T11024] ? __pfx_kthread+0x10/0x10 [ 1222.767084][T11024] ret_from_fork_asm+0x1a/0x30 [ 1222.767165][T11024] [ 1223.398277][T13141] FAT-fs (loop13): unable to read boot sector [ 1224.078805][T11024] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1224.343405][T13149] loop7: detected capacity change from 0 to 512 [ 1224.473165][T13149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.492113][ T6191] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.691690][ T5143] Bluetooth: hci6: command tx timeout [ 1225.780289][T13165] syz.9.1134 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1225.862260][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.948007][ T6191] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.345499][T13171] loop7: detected capacity change from 0 to 2048 [ 1226.462554][T13171] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 1226.551280][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.551451][T13171] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.558504][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.588564][T13095] bridge_slave_0: entered allmulticast mode [ 1226.864004][T13180] loop9: detected capacity change from 0 to 128 [ 1226.887281][ T5143] Bluetooth: hci6: command tx timeout [ 1227.545287][ T5933] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1227.660500][T13171] EXT4-fs error (device loop7): ext4_ext_precache:647: inode #2: comm syz.7.1135: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1227.741372][T13171] EXT4-fs (loop7): Remounting filesystem read-only [ 1227.773005][T13182] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1135: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1229.091696][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.235540][T13095] bridge_slave_0: entered promiscuous mode [ 1229.280615][ T5933] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.314628][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.370961][ T5933] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1229.420700][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.489629][T13095] bridge_slave_1: entered allmulticast mode [ 1229.513721][ T5933] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1229.557163][T13095] bridge_slave_1: entered promiscuous mode [ 1229.624361][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.641639][T13192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1229.686932][ T5933] usb 9-1: config 0 descriptor?? [ 1229.705184][ T5933] usb 9-1: can't set config #0, error -71 [ 1229.722265][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.750477][ T5933] usb 9-1: USB disconnect, device number 3 [ 1231.035113][T13206] loop6: detected capacity change from 0 to 2048 [ 1231.188025][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.226681][T12363] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 1231.251320][T12363] loop6: partition table partially beyond EOD, truncated [ 1231.277077][T12363] loop6: p1 size 83886080 extends beyond EOD, truncated [ 1231.311840][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.330286][T12363] loop6: p2 start 4278190080 is beyond EOD, truncated [ 1231.368970][T12363] loop6: p4 size 8192 extends beyond EOD, truncated [ 1231.399615][T12363] loop6: p5 size 83886080 extends beyond EOD, truncated [ 1231.446390][T12363] loop6: p6 size 8192 extends beyond EOD, truncated [ 1231.509604][T12340] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1231.550265][T13206] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 1231.555505][T13206] loop6: partition table partially beyond EOD, truncated [ 1231.602379][T13206] loop6: p1 size 83886080 extends beyond EOD, truncated [ 1231.642162][T13206] loop6: p2 start 4278190080 is beyond EOD, truncated [ 1231.642738][T13218] loop4: detected capacity change from 0 to 2048 [ 1231.655565][T13095] team0: Port device team_slave_0 added [ 1231.677844][ T6191] bridge_slave_1: left allmulticast mode [ 1231.693641][T13206] loop6: p4 size 8192 extends beyond EOD, truncated [ 1231.720526][ T6191] bridge_slave_1: left promiscuous mode [ 1231.721726][T12340] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.740960][T13206] loop6: p5 size 83886080 extends beyond EOD, truncated [ 1231.741115][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.769678][T13206] loop6: p6 size 8192 extends beyond EOD, truncated [ 1231.776820][T12340] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.797433][ T6191] bridge_slave_0: left allmulticast mode [ 1231.804582][ T6191] bridge_slave_0: left promiscuous mode [ 1231.812615][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.843276][T13218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1231.875931][T12340] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1231.972078][T12340] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1232.034721][T12340] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.169695][T12340] usb 9-1: config 0 descriptor?? [ 1232.778060][T13202] loop9: detected capacity change from 0 to 16 [ 1232.842014][T13202] erofs (device loop9): mounted with root inode @ nid 36. [ 1232.943623][T13202] syz.9.1139: attempt to access beyond end of device [ 1232.943623][T13202] loop9: rw=8388608, sector=576, nr_sectors = 8 limit=16 [ 1232.994828][T12458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.032250][T13230] syz.9.1139: attempt to access beyond end of device [ 1233.032250][T13230] loop9: rw=8388608, sector=576, nr_sectors = 8 limit=16 [ 1233.046462][T13202] syz.9.1139: attempt to access beyond end of device [ 1233.046462][T13202] loop9: rw=8388608, sector=576, nr_sectors = 8 limit=16 [ 1233.067282][T13234] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1233.294690][T12340] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1233.317598][T12666] udevd[12666]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1233.338957][T12350] udevd[12350]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1233.359592][T13228] udevd[13228]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1233.380259][T13240] loop4: detected capacity change from 0 to 16 [ 1233.388501][T13240] erofs (device loop4): mounted with root inode @ nid 36. [ 1233.461792][T13241] udevd[13241]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1233.464072][T13242] udevd[13242]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 1233.700530][T13240] overlayfs: failed to get metacopy (-117) [ 1234.010862][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1151'. [ 1234.925806][ T6034] usb 9-1: USB disconnect, device number 4 [ 1235.275548][ T6191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.327074][ T6191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.347633][ T6191] bond0 (unregistering): Released all slaves [ 1235.372229][T13095] team0: Port device team_slave_1 added [ 1235.599197][T13264] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.1154' resets device [ 1236.519583][T13268] loop7: detected capacity change from 0 to 256 [ 1236.681056][T13268] FAT-fs (loop7): Directory bread(block 64) failed [ 1236.711366][T13268] FAT-fs (loop7): Directory bread(block 65) failed [ 1236.728265][T13268] FAT-fs (loop7): Directory bread(block 66) failed [ 1236.740097][T13268] FAT-fs (loop7): Directory bread(block 67) failed [ 1236.782099][T13268] FAT-fs (loop7): Directory bread(block 68) failed [ 1236.789487][T13268] FAT-fs (loop7): Directory bread(block 69) failed [ 1237.396467][T13268] FAT-fs (loop7): Directory bread(block 70) failed [ 1237.439165][T13268] FAT-fs (loop7): Directory bread(block 71) failed [ 1237.445804][T13268] FAT-fs (loop7): Directory bread(block 72) failed [ 1237.509383][T13268] FAT-fs (loop7): Directory bread(block 73) failed [ 1237.957631][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.020987][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.263690][T13287] loop8: detected capacity change from 0 to 128 [ 1238.433310][T13287] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1238.455584][T13287] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1239.113362][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.276551][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.339875][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.578054][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.547017][T11842] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1241.729425][ T5933] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1241.920096][ T6191] hsr_slave_0: left promiscuous mode [ 1241.927051][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.977331][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.997457][ T6191] hsr_slave_1: left promiscuous mode [ 1242.009157][ T5933] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1242.025648][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.053437][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.073686][ T5933] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1242.105822][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.125334][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.139158][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.168202][ T5933] usb 7-1: config 0 descriptor?? [ 1242.286539][ T6191] veth1_macvtap: left promiscuous mode [ 1242.302582][ T6191] veth0_macvtap: left promiscuous mode [ 1242.308350][ T6191] veth1_vlan: left promiscuous mode [ 1242.344475][ T6191] veth0_vlan: left promiscuous mode [ 1242.676107][ T5933] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1242.873400][T13312] loop8: detected capacity change from 0 to 512 [ 1242.929719][T13312] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1243.012602][T13312] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1134: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1243.119225][T13312] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm syz.8.1166: bg 0: block 248: padding at end of block bitmap is not set [ 1243.176742][T13312] Quota error (device loop8): write_blk: dquota write failed [ 1243.216645][T13312] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1243.250778][T13312] EXT4-fs error (device loop8): ext4_acquire_dquot:6984: comm syz.8.1166: Failed to acquire dquot type 1 [ 1243.287963][T13312] EXT4-fs (loop8): 1 truncate cleaned up [ 1243.310644][T13312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1243.509738][T13312] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1243.552380][T13312] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1243.570352][T13312] EXT4-fs error (device loop8): ext4_acquire_dquot:6984: comm syz.8.1166: Failed to acquire dquot type 1 [ 1243.785931][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1243.804800][ T9699] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 1243.841884][ T9699] EXT4-fs error (device loop8): ext4_release_dquot:7020: comm kworker/u8:9: Failed to release dquot type 1 [ 1244.289143][ T5933] usb 7-1: USB disconnect, device number 2 [ 1244.409578][T13016] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1244.571788][T13016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.624768][T13016] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.679098][T13016] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1244.752439][T13016] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1244.777221][T13016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.807334][T13016] usb 8-1: config 0 descriptor?? [ 1246.811097][T13016] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1246.918939][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 1246.948832][T13016] usb 8-1: USB disconnect, device number 4 [ 1247.224600][T13361] fido_id[13361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1247.716706][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 1248.719501][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.727476][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.246931][T13378] loop7: detected capacity change from 0 to 128 [ 1249.266485][T13378] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1249.278515][T13378] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1249.298338][T13378] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1249.367263][T13378] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1249.367922][T13378] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm syz.7.1179: bg 0: bad block bitmap checksum [ 1249.584812][T11781] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1251.483288][T13402] loop8: detected capacity change from 0 to 16 [ 1251.527776][T13402] erofs: Unknown parameter '0xffffffffffffffff' [ 1252.824052][T13095] hsr_slave_0: entered promiscuous mode [ 1252.831552][T13095] hsr_slave_1: entered promiscuous mode [ 1252.837921][T13095] debugfs: 'hsr0' already exists in 'hsr' [ 1252.862929][T13095] Cannot create hsr debugfs directory [ 1253.008275][T13416] loop8: detected capacity change from 0 to 512 [ 1253.130863][T13416] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1184: inode has both inline data and extents flags [ 1253.184739][T13416] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1184: couldn't read orphan inode 15 (err -117) [ 1253.297414][T13416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.201011][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1187'. [ 1257.179584][T12340] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1257.621933][T13451] loop9: detected capacity change from 0 to 256 [ 1257.642165][T13451] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1257.907417][T12340] usb 8-1: Using ep0 maxpacket: 16 [ 1257.992158][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.675909][T12340] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1258.696661][T12340] usb 8-1: can't read configurations, error -71 [ 1260.467942][T13491] loop6: detected capacity change from 0 to 256 [ 1260.655101][T13491] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1261.219673][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1261.391203][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1261.408908][ T9] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1261.442958][ T9] usb 10-1: config 0 has no interface number 0 [ 1261.467375][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1261.498855][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.545287][ T9] usb 10-1: Product: syz [ 1261.575624][ T9] usb 10-1: Manufacturer: syz [ 1261.600585][ T9] usb 10-1: SerialNumber: syz [ 1261.700394][ T9] usb 10-1: config 0 descriptor?? [ 1262.525385][ T9] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1262.538310][ T9] uvcvideo 10-1:0.31: No valid video chain found. [ 1262.555891][ T9] usb 10-1: USB disconnect, device number 2 [ 1262.951406][T13511] loop6: detected capacity change from 0 to 512 [ 1262.970263][T13095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1262.991251][T13095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1263.036885][T13511] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1263.042027][T13095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1263.115454][T13095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1263.156789][T13511] EXT4-fs (loop6): 1 truncate cleaned up [ 1263.261216][T13511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1264.948600][T12509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.981360][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.955411][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.305047][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.312302][ T6191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.468746][T13549] loop4: detected capacity change from 0 to 256 [ 1266.485178][T13549] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1267.283579][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.290785][ T6191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.028182][T13095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1268.519611][T13553] loop8: detected capacity change from 0 to 16 [ 1268.915719][T13553] erofs (device loop8): mounted with root inode @ nid 36. [ 1269.738452][T13566] loop8: detected capacity change from 0 to 2048 [ 1270.531410][T13566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1273.499475][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.882167][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.004282][T13095] veth0_vlan: entered promiscuous mode [ 1275.596273][T13095] veth1_vlan: entered promiscuous mode [ 1276.225327][T13631] loop9: detected capacity change from 0 to 256 [ 1276.233973][T13631] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1276.317821][T13599] Bluetooth: hci2: command 0x0406 tx timeout [ 1276.325012][T13599] Bluetooth: hci4: command 0x0406 tx timeout [ 1278.304651][T13642] loop4: detected capacity change from 0 to 16 [ 1278.476587][T13642] erofs (device loop4): mounted with root inode @ nid 36. [ 1279.490920][T13599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1279.930763][T13599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1279.946833][T13599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1279.956071][T13599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1279.964013][T13599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1280.382303][T13661] loop4: detected capacity change from 0 to 128 [ 1281.094690][T13599] Bluetooth: hci1: command 0x0406 tx timeout [ 1281.892975][T11024] kworker/u8:20: attempt to access beyond end of device [ 1281.892975][T11024] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1281.990570][T11024] kworker/u8:20: attempt to access beyond end of device [ 1281.990570][T11024] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1282.059260][ T5838] Bluetooth: hci5: command tx timeout [ 1282.059344][T11024] kworker/u8:20: attempt to access beyond end of device [ 1282.059344][T11024] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1282.180586][T11024] kworker/u8:20: attempt to access beyond end of device [ 1282.180586][T11024] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1282.731991][T11024] kworker/u8:20: attempt to access beyond end of device [ 1282.731991][T11024] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1282.849563][T11024] kworker/u8:20: attempt to access beyond end of device [ 1282.849563][T11024] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1282.944603][T11024] kworker/u8:20: attempt to access beyond end of device [ 1282.944603][T11024] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1283.048334][T11024] kworker/u8:20: attempt to access beyond end of device [ 1283.048334][T11024] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1283.069114][ T6061] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1283.099350][T11024] kworker/u8:20: attempt to access beyond end of device [ 1283.099350][T11024] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1283.113664][T11024] kworker/u8:20: attempt to access beyond end of device [ 1283.113664][T11024] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1284.025503][T13695] loop6: detected capacity change from 0 to 256 [ 1284.042708][T13695] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1284.139791][ T5838] Bluetooth: hci5: command tx timeout [ 1284.269067][ T6061] usb 9-1: Using ep0 maxpacket: 8 [ 1284.277229][ T6061] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.288295][ T6061] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.607549][T13700] loop4: detected capacity change from 0 to 128 [ 1284.740106][T13700] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1285.064823][T13700] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.138628][ T6061] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1285.157358][ T6061] usb 9-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 1285.169386][ T6061] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.139408][ T6061] usb 9-1: config 0 descriptor?? [ 1286.399279][T13708] loop7: detected capacity change from 0 to 512 [ 1286.489127][ T5838] Bluetooth: hci5: command tx timeout [ 1288.187810][T13708] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.1238: bg 0: block 393: padding at end of block bitmap is not set [ 1288.389859][T13708] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1288.399636][T13708] EXT4-fs (loop7): 2 truncates cleaned up [ 1288.407242][T13708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.531279][ T5838] Bluetooth: hci5: command tx timeout [ 1288.586736][T13715] loop6: detected capacity change from 0 to 1024 [ 1288.779244][ T6061] usb 9-1: can't set config #0, error -71 [ 1288.799413][ T6061] usb 9-1: USB disconnect, device number 5 [ 1289.334242][T13719] loop6: detected capacity change from 0 to 256 [ 1291.172306][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.206108][T13645] chnl_net:caif_netlink_parms(): no params data found [ 1291.401049][T13721] loop9: detected capacity change from 0 to 16 [ 1292.082997][T13721] erofs (device loop9): mounted with root inode @ nid 36. [ 1292.465054][T13719] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1292.477602][T13719] exFAT-fs (loop6): failed to load alloc-bitmap [ 1292.483940][T13719] exFAT-fs (loop6): failed to recognize exfat type [ 1292.850488][T12458] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1294.667701][T13740] loop6: detected capacity change from 0 to 512 [ 1295.375436][T13740] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.1244: bg 0: block 393: padding at end of block bitmap is not set [ 1295.400445][T13740] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1295.416238][T13740] EXT4-fs (loop6): 2 truncates cleaned up [ 1295.439719][T13740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.890780][T13746] loop8: detected capacity change from 0 to 512 [ 1297.915299][T13746] ext4: Unknown parameter 'subj_role' [ 1298.217999][ T31] audit: type=1326 audit(1765626448.779:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.8.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1298.279070][ T31] audit: type=1326 audit(1765626448.779:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.8.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1298.472911][T13751] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1299.253454][ T31] audit: type=1326 audit(1765626448.869:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13745 comm="syz.8.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1300.273058][T12509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.050546][T13769] loop4: detected capacity change from 0 to 256 [ 1302.061036][T13769] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1306.236858][T13796] loop7: detected capacity change from 0 to 16 [ 1306.266724][T13796] erofs (device loop7): mounted with root inode @ nid 36. [ 1309.789695][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.803515][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.808668][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1262'. [ 1311.353513][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.400812][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1261'. [ 1311.447201][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.506716][T13645] bridge_slave_0: entered allmulticast mode [ 1311.583256][T13645] bridge_slave_0: entered promiscuous mode [ 1311.723901][T13818] bridge0: entered promiscuous mode [ 1311.761950][T13818] bridge0: port 4(macsec1) entered blocking state [ 1311.795762][T13818] bridge0: port 4(macsec1) entered disabled state [ 1312.080387][T13818] macsec1: entered allmulticast mode [ 1312.085720][T13818] bridge0: entered allmulticast mode [ 1312.960515][T13818] macsec1: left allmulticast mode [ 1312.965602][T13818] bridge0: left allmulticast mode [ 1313.082384][T13818] bridge0: left promiscuous mode [ 1313.682944][T13837] loop7: detected capacity change from 0 to 256 [ 1313.699563][T13837] vfat: Unknown parameter 'iocharsħ[peĈ _§ċet' [ 1314.142221][T13839] loop4: detected capacity change from 0 to 2048 [ 1314.367033][T13846] loop6: detected capacity change from 0 to 256 [ 1314.388580][T13846] exfat: Deprecated parameter 'namecase' [ 1314.408473][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.526552][T13599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1314.541060][T13599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1314.548799][T13599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1314.560253][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.570105][T13599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1314.578112][T13599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1314.578209][T13645] bridge_slave_1: entered allmulticast mode [ 1314.617906][T13645] bridge_slave_1: entered promiscuous mode [ 1314.646844][T13846] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1315.678392][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1268'. [ 1315.704126][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1268'. [ 1315.778668][T13839] Dev loop4: unable to read RDB block 8 [ 1316.174823][T13839] loop4: unable to read partition table [ 1316.195586][T13839] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1316.424151][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.566375][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.587730][T13861] loop4: detected capacity change from 0 to 512 [ 1316.667505][T13861] ext4: Unknown parameter 'subj_role' [ 1316.739119][ T6034] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1316.994880][T13866] loop8: detected capacity change from 0 to 16 [ 1317.090509][T13866] erofs (device loop8): mounted with root inode @ nid 36. [ 1317.121769][T13599] Bluetooth: hci6: command tx timeout [ 1317.635350][ T6034] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.652373][ T6034] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.672413][ T6034] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1317.679106][ T6034] usb 8-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 1317.689172][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.726731][ T6034] usb 8-1: config 0 descriptor?? [ 1317.921406][T13645] team0: Port device team_slave_0 added [ 1318.002552][T13645] team0: Port device team_slave_1 added [ 1318.203134][ T6034] wacom 0003:056A:005B.0006: unknown main item tag 0x0 [ 1318.244970][ T6034] wacom 0003:056A:005B.0006: unknown main item tag 0x0 [ 1318.276174][ T6034] wacom 0003:056A:005B.0006: unknown main item tag 0x0 [ 1318.366323][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.384725][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.457437][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.464337][T12221] usb 8-1: USB disconnect, device number 7 [ 1318.477890][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.484941][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.551657][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.572528][ T31] audit: type=1326 audit(1765626469.139:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1318.596443][ T2993] bridge_slave_1: left allmulticast mode [ 1318.602577][ T2993] bridge_slave_1: left promiscuous mode [ 1318.608363][ T31] audit: type=1326 audit(1765626469.139:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1318.651787][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.864079][T13873] loop6: detected capacity change from 0 to 16 [ 1319.424463][T13599] Bluetooth: hci6: command tx timeout [ 1319.483379][ T2993] bridge_slave_0: left allmulticast mode [ 1319.654144][ T31] audit: type=1326 audit(1765626469.259:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.4.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1319.749549][T13861] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1320.399987][T13873] erofs (device loop6): mounted with root inode @ nid 36. [ 1320.418239][ T2993] bridge_slave_0: left promiscuous mode [ 1320.424166][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.489508][T13599] Bluetooth: hci6: command tx timeout [ 1323.589147][T13599] Bluetooth: hci6: command tx timeout [ 1324.224193][T13898] loop6: detected capacity change from 0 to 16 [ 1324.540429][T13898] erofs (device loop6): mounted with root inode @ nid 36. [ 1326.157587][T13905] loop7: detected capacity change from 0 to 16 [ 1326.171222][T13905] erofs (device loop7): mounted with root inode @ nid 36. [ 1327.372097][T13918] loop4: detected capacity change from 0 to 4096 [ 1327.386878][T13918] EXT4-fs: Ignoring removed nobh option [ 1327.415331][T13918] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1327.658763][T13918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.129204][T13188] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1328.174363][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.213386][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.231549][ T2993] bond0 (unregistering): Released all slaves [ 1328.295259][T13188] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.343031][T13188] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1328.462243][T13914] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1328.471625][T13914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1328.481234][T13914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1328.676015][ T31] audit: type=1800 audit(1765626479.029:217): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1282" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1328.913500][T13929] loop8: detected capacity change from 0 to 512 [ 1328.953342][T13929] ext4: Unknown parameter 'subj_role' [ 1328.980217][ T2993] hsr_slave_0: left promiscuous mode [ 1329.017526][T13188] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1329.027477][T13188] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1329.040512][T13188] usb 8-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 1329.049601][T13188] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.067316][T13188] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1329.365370][ T31] audit: type=1326 audit(1765626479.899:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1329.763927][T13933] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1329.856762][T13188] usb 8-1: invalid MIDI out EP 0 [ 1329.964162][ T2993] hsr_slave_1: left promiscuous mode [ 1329.983743][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.038265][ T31] audit: type=1326 audit(1765626479.899:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.169586][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.229284][ T31] audit: type=1326 audit(1765626479.899:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.325562][T13188] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1330.355813][ T2993] veth1_vlan: left promiscuous mode [ 1330.419109][ T31] audit: type=1326 audit(1765626479.899:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.444719][ T2993] veth0_vlan: left promiscuous mode [ 1330.466619][T13188] usb 8-1: USB disconnect, device number 8 [ 1330.572187][ T31] audit: type=1326 audit(1765626479.899:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.700965][ T31] audit: type=1326 audit(1765626479.899:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.825076][ T31] audit: type=1326 audit(1765626479.899:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1330.956148][ T31] audit: type=1326 audit(1765626479.899:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1331.016474][T12458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.049060][T12351] udevd[12351]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.118664][ T31] audit: type=1326 audit(1765626479.899:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13928 comm="syz.8.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9b7518f749 code=0x7ffc0000 [ 1333.322264][T13948] hub 6-0:1.0: USB hub found [ 1333.338703][T13948] hub 6-0:1.0: 1 port detected [ 1333.396462][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 1333.498699][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 1335.092602][T13981] loop4: detected capacity change from 0 to 16 [ 1335.111622][T13981] erofs (device loop4): mounted with root inode @ nid 36. [ 1335.184436][T13981] overlayfs: missing 'lowerdir' [ 1335.509367][T13645] hsr_slave_0: entered promiscuous mode [ 1335.516188][T13645] hsr_slave_1: entered promiscuous mode [ 1335.529931][T13645] debugfs: 'hsr0' already exists in 'hsr' [ 1335.535665][T13645] Cannot create hsr debugfs directory [ 1336.148184][ T3522] Bluetooth: hci2: Frame reassembly failed (-84) [ 1336.352267][T14001] binder: 13994:14001 ioctl c0306201 200000000680 returned -14 [ 1337.502020][T13848] chnl_net:caif_netlink_parms(): no params data found [ 1337.582086][ T5143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1337.592406][ T5143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1337.604247][ T5143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1337.613971][ T5143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1337.620159][T14012] loop6: detected capacity change from 0 to 512 [ 1337.628009][ T5143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1337.638110][T14012] ext4: Unknown parameter 'subj_role' [ 1337.954918][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 1337.954939][ T31] audit: type=1326 audit(1765626488.519:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14011 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1337.984802][ T31] audit: type=1326 audit(1765626488.519:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14011 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1338.035318][ T31] audit: type=1326 audit(1765626488.599:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14011 comm="syz.6.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1338.127312][T14020] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1338.209102][ T5838] Bluetooth: hci2: command 0x1003 tx timeout [ 1338.229154][T13599] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1338.451222][T14003] loop4: detected capacity change from 0 to 40427 [ 1338.520029][T14003] F2FS-fs (loop4): invalid crc value [ 1339.773590][T13599] Bluetooth: hci7: command tx timeout [ 1340.137782][T14003] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1341.243150][T14003] F2FS-fs (loop4): Start checkpoint disabled! [ 1341.316531][ T2993] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.361133][T14003] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1341.829125][T13599] Bluetooth: hci7: command tx timeout [ 1342.271566][ T2993] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.731090][ T2993] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.698034][T14055] loop8: detected capacity change from 0 to 512 [ 1343.889251][T13599] Bluetooth: hci7: command tx timeout [ 1344.244966][T13848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.259259][T13848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.268848][T13848] bridge_slave_0: entered allmulticast mode [ 1344.280144][T13848] bridge_slave_0: entered promiscuous mode [ 1344.289718][T14052] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1344.636239][ T2993] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.784144][T13848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.834031][T13848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.884071][T13848] bridge_slave_1: entered allmulticast mode [ 1344.933571][T13848] bridge_slave_1: entered promiscuous mode [ 1345.190983][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1309'. [ 1345.451568][T13848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.761564][T13848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.029726][T14074] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1311'. [ 1346.089475][T13599] Bluetooth: hci7: command tx timeout [ 1349.618484][T13848] team0: Port device team_slave_0 added [ 1350.891903][T13848] team0: Port device team_slave_1 added [ 1351.150753][T14107] loop4: detected capacity change from 0 to 1024 [ 1351.189489][T14107] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1351.230439][T14107] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1351.249418][T14107] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1351.257590][T14107] EXT4-fs error (device loop4): ext4_free_blocks:6727: comm syz.4.1319: Freeing blocks not in datazone - block = 0, count = 4096 [ 1351.313694][T14107] EXT4-fs (loop4): 1 orphan inode deleted [ 1351.381092][T14107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1351.441560][T13848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.448518][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.529206][T13848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.623631][T13848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.663206][T13848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.726852][T12458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.778778][T13848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.494209][ T2993] bridge_slave_1: left allmulticast mode [ 1352.500213][ T2993] bridge_slave_1: left promiscuous mode [ 1352.506046][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.598060][ T2993] bridge_slave_0: left allmulticast mode [ 1352.659260][ T2993] bridge_slave_0: left promiscuous mode [ 1352.675608][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.369147][T14148] overlayfs: missing 'lowerdir' [ 1355.475692][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1355.497750][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1355.519459][ T2993] bond0 (unregistering): Released all slaves [ 1357.069622][T14150] loop6: detected capacity change from 0 to 40427 [ 1357.389615][T14150] F2FS-fs (loop6): build fault injection rate: 174 [ 1357.396161][T14150] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 1357.490132][T14150] F2FS-fs (loop6): invalid crc value [ 1357.890209][T14150] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1357.984612][T14150] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1358.190512][T13848] hsr_slave_0: entered promiscuous mode [ 1358.197333][T13848] hsr_slave_1: entered promiscuous mode [ 1358.246071][T13848] debugfs: 'hsr0' already exists in 'hsr' [ 1358.271884][T13848] Cannot create hsr debugfs directory [ 1358.362952][T14013] chnl_net:caif_netlink_parms(): no params data found [ 1359.523588][ T2993] hsr_slave_0: left promiscuous mode [ 1359.529947][ T2993] hsr_slave_1: left promiscuous mode [ 1359.549142][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.556614][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.566368][ T2993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.579022][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.626102][ T2993] veth1_macvtap: left promiscuous mode [ 1359.643656][ T2993] veth0_macvtap: left promiscuous mode [ 1359.657975][ T2993] veth1_vlan: left promiscuous mode [ 1359.670841][ T2993] veth0_vlan: left promiscuous mode [ 1360.251886][T14195] loop4: detected capacity change from 0 to 512 [ 1360.303280][T14195] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1336: inode has both inline data and extents flags [ 1360.335768][T14195] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1336: couldn't read orphan inode 15 (err -117) [ 1360.424318][T14195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.126482][T12458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.164418][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1337'. [ 1362.456527][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 1363.119760][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 1363.469031][T14214] netlink: 'syz.6.1340': attribute type 13 has an invalid length. [ 1365.196903][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.204605][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.214890][T14013] bridge_slave_0: entered allmulticast mode [ 1365.227280][T14013] bridge_slave_0: entered promiscuous mode [ 1365.321602][T14214] gretap0: refused to change device tx_queue_len [ 1365.328411][T14214] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1365.416071][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.443342][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.464146][T14013] bridge_slave_1: entered allmulticast mode [ 1365.491786][T14013] bridge_slave_1: entered promiscuous mode [ 1365.939858][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.984373][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.336057][T14246] process 'syz.6.1349' launched '/dev/fd/6' with NULL argv: empty string added [ 1370.219596][T13016] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1370.273806][T14013] team0: Port device team_slave_0 added [ 1371.187614][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.199110][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.321004][T14013] team0: Port device team_slave_1 added [ 1371.396649][T13016] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.420932][T13016] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1371.439322][T13016] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1371.448382][T13016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.503002][T13016] usb 9-1: config 0 descriptor?? [ 1371.553868][T13016] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1372.176867][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.219107][T13094] usb 9-1: USB disconnect, device number 6 [ 1372.249607][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.005037][T14281] loop4: detected capacity change from 0 to 512 [ 1373.202971][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.249572][T14281] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.1356: bg 0: block 393: padding at end of block bitmap is not set [ 1373.969406][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1373.993789][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1374.018208][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1374.061746][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1374.109964][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1374.217541][T14281] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1374.227299][T14281] EXT4-fs (loop4): 2 truncates cleaned up [ 1374.247246][T14281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1374.889764][T14291] serio: Serial port ttyS3 [ 1375.034406][T14294] loop8: detected capacity change from 0 to 256 [ 1375.068531][T14294] exfat: Deprecated parameter 'utf8' [ 1375.095343][T14294] exfat: Deprecated parameter 'namecase' [ 1375.181484][T12458] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.230351][T14294] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d) [ 1375.230700][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.307954][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.389050][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.519656][ T2993] bridge_slave_1: left allmulticast mode [ 1375.527083][ T2993] bridge_slave_1: left promiscuous mode [ 1375.546035][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.640287][ T2993] bridge_slave_0: left allmulticast mode [ 1375.680255][T14304] loop6: detected capacity change from 0 to 1024 [ 1375.687834][ T2993] bridge_slave_0: left promiscuous mode [ 1375.811424][T14304] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1375.826841][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.954337][T14304] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1375.989867][T14304] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1375.996399][T14304] EXT4-fs error (device loop6): ext4_free_blocks:6727: comm syz.6.1362: Freeing blocks not in datazone - block = 0, count = 4096 [ 1376.020396][T14304] EXT4-fs (loop6): 1 orphan inode deleted [ 1376.040878][T14304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1376.184128][T12509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.201365][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.219448][ T5838] Bluetooth: hci2: command tx timeout [ 1376.279623][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.346028][ T2993] bond0 (unregistering): Released all slaves [ 1376.452549][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1363'. [ 1376.509407][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1363'. [ 1376.949219][ T2993] hsr_slave_0: left promiscuous mode [ 1376.979241][ T2993] hsr_slave_1: left promiscuous mode [ 1377.009455][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.060830][T12180] kernel read not supported for file [fscontext] (pid: 12180 comm: kworker/0:6) [ 1377.070903][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.289539][ T5838] Bluetooth: hci2: command tx timeout [ 1378.384953][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 1378.472897][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 1378.943699][T14013] hsr_slave_0: entered promiscuous mode [ 1378.963955][T14013] hsr_slave_1: entered promiscuous mode [ 1378.997853][T14013] debugfs: 'hsr0' already exists in 'hsr' [ 1379.010698][T14013] Cannot create hsr debugfs directory [ 1379.443127][T14366] loop8: detected capacity change from 0 to 512 [ 1379.513048][T14366] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1376: inode has both inline data and extents flags [ 1379.604124][T14366] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1376: couldn't read orphan inode 15 (err -117) [ 1379.646832][T14366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.789033][ T31] audit: type=1800 audit(1765626536.253:236): pid=14366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1376" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 1380.369709][ T5838] Bluetooth: hci2: command tx timeout [ 1380.558473][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.797220][T14377] loop6: detected capacity change from 0 to 1024 [ 1380.839512][T14377] EXT4-fs: Ignoring removed orlov option [ 1380.939696][T14377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.181352][ T31] audit: type=1804 audit(1765626793.747:237): pid=14377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1378" name="/newroot/69/bus/bus" dev="loop6" ino=18 res=1 errno=0 [ 1381.491324][T14381] loop8: detected capacity change from 0 to 1024 [ 1381.552795][T14381] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1381.654531][T14381] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1381.704007][T14381] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1381.760222][T14381] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.1377: Freeing blocks not in datazone - block = 0, count = 4096 [ 1381.845663][T14381] EXT4-fs (loop8): 1 orphan inode deleted [ 1381.897039][T14381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1381.948515][T12509] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.293051][T11842] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.416715][T14286] chnl_net:caif_netlink_parms(): no params data found [ 1382.459394][ T5838] Bluetooth: hci2: command tx timeout [ 1382.470017][ T2993] bridge_slave_1: left allmulticast mode [ 1382.475670][ T2993] bridge_slave_1: left promiscuous mode [ 1382.486532][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.497868][ T2993] bridge_slave_0: left allmulticast mode [ 1382.511827][ T2993] bridge_slave_0: left promiscuous mode [ 1382.532885][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.748145][T14403] xt_policy: output policy not valid in PREROUTING and INPUT [ 1383.574606][T14408] loop4: detected capacity change from 0 to 512 [ 1383.601133][T14408] ext4: Unknown parameter 'subj_role' [ 1383.784767][ T2993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.798698][T14409] loop8: detected capacity change from 0 to 16 [ 1383.808935][T14409] erofs (device loop8): mounted with root inode @ nid 36. [ 1383.837508][ T31] audit: type=1326 audit(1765626796.387:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1383.943223][ T2993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.023071][ T31] audit: type=1326 audit(1765626796.387:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1384.054287][T14408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1384.172897][ T2993] bond0 (unregistering): Released all slaves [ 1384.998421][ T31] audit: type=1326 audit(1765626796.387:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1385.063978][ T31] audit: type=1326 audit(1765626796.397:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.038365][ T31] audit: type=1326 audit(1765626796.397:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.062310][ T31] audit: type=1326 audit(1765626796.427:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.085420][ T31] audit: type=1326 audit(1765626796.427:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.356957][ T31] audit: type=1326 audit(1765626796.427:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.397376][ T31] audit: type=1326 audit(1765626796.427:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.455384][ T31] audit: type=1326 audit(1765626796.437:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f358098f749 code=0x7ffc0000 [ 1386.574453][ T2993] hsr_slave_0: left promiscuous mode [ 1386.619317][ T2993] hsr_slave_1: left promiscuous mode [ 1386.627700][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.657510][ T2993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.175534][ T2993] team0 (unregistering): Port device team_slave_1 removed [ 1388.344818][T14424] cgroup: Unknown subsys name 'cpuset' [ 1388.354500][ T2993] team0 (unregistering): Port device team_slave_0 removed [ 1389.414349][T14453] loop8: detected capacity change from 0 to 256 [ 1389.578778][T14453] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1389.646107][T14453] exFAT-fs (loop8): valid_size(150994954) is greater than size(10) [ 1389.665739][ T31] audit: type=1800 audit(1765626802.217:248): pid=14453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1392" name="file1" dev="loop8" ino=1048660 res=0 errno=0 [ 1390.028902][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.083666][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.120178][T14286] bridge_slave_0: entered allmulticast mode [ 1390.150056][T14286] bridge_slave_0: entered promiscuous mode [ 1390.456655][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.465970][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.474346][T14286] bridge_slave_1: entered allmulticast mode [ 1390.482635][T14286] bridge_slave_1: entered promiscuous mode [ 1390.545194][T14461] loop8: detected capacity change from 0 to 16 [ 1390.555139][T14461] erofs (device loop8): mounted with root inode @ nid 36. [ 1394.283715][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.372887][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.405835][ T31] audit: type=1326 audit(1765626806.927:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1394.469752][ T31] audit: type=1326 audit(1765626806.947:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1394.513403][T14013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1394.764008][T14013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1395.102955][ T31] audit: type=1326 audit(1765626806.957:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1395.171431][T14495] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1402'. [ 1396.085477][ T31] audit: type=1326 audit(1765626806.957:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1396.112818][ T31] audit: type=1326 audit(1765626806.957:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1396.771985][T14497] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1396.782514][T14497] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1396.792214][T14497] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1396.968218][T14286] team0: Port device team_slave_0 added [ 1397.087322][ T31] audit: type=1326 audit(1765626806.967:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1397.111548][ T31] audit: type=1326 audit(1765626806.967:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1397.134053][ T31] audit: type=1326 audit(1765626806.967:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1397.155958][T14013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1397.272307][ T31] audit: type=1326 audit(1765626806.967:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1397.332560][T14286] team0: Port device team_slave_1 added [ 1397.420991][ T31] audit: type=1326 audit(1765626806.967:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14481 comm="syz.6.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0118f749 code=0x7ffc0000 [ 1400.131180][T14512] loop4: detected capacity change from 0 to 40427 [ 1400.325336][T14512] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1400.332035][T14512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1400.449718][T14524] loop7: detected capacity change from 0 to 16 [ 1400.454709][T14512] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1400.468990][T14524] erofs (device loop7): mounted with root inode @ nid 36. [ 1400.566662][T14512] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1400.573863][T14512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1400.596540][T14512] bio_check_eod: 22 callbacks suppressed [ 1400.596565][T14512] syz.4.1407: attempt to access beyond end of device [ 1400.596565][T14512] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 1401.233019][T13599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1401.249328][T13599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1401.258395][T13599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1401.280437][T13599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1401.300854][T13599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1401.549331][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.600181][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.732059][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.741019][T14531] loop7: detected capacity change from 0 to 1024 [ 1401.745021][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.758745][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.774901][T12458] syz-executor: attempt to access beyond end of device [ 1401.774901][T12458] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1401.784815][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.883350][T12458] CPU: 1 UID: 0 PID: 12458 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1401.883399][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1401.883422][T12458] Call Trace: [ 1401.883435][T12458] [ 1401.883449][T12458] dump_stack_lvl+0x16c/0x1f0 [ 1401.883504][T12458] f2fs_handle_critical_error+0x624/0x9f0 [ 1401.883549][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.883595][T12458] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1401.883667][T12458] f2fs_write_end_io+0x958/0xcf0 [ 1401.883718][T12458] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1401.883775][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.883831][T12458] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1401.883874][T12458] bio_endio+0x751/0x8a0 [ 1401.883927][T12458] submit_bio_noacct+0x306/0x1f40 [ 1401.884001][T12458] __submit_merged_bio+0x33c/0x710 [ 1401.884052][T12458] __submit_merged_write_cond+0x315/0x3f0 [ 1401.884111][T12458] f2fs_write_cache_pages+0x2075/0x2570 [ 1401.884194][T12458] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1401.884255][T12458] ? __lock_acquire+0x436/0x2890 [ 1401.884312][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.884356][T12458] ? __lock_acquire+0x436/0x2890 [ 1401.884443][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.884488][T12458] ? check_irq_usage+0xe8/0xbc0 [ 1401.884526][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.884614][T12458] ? __bfs+0x148/0x290 [ 1401.884655][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.884708][T12458] f2fs_write_data_pages+0x5ac/0x1080 [ 1401.884777][T12458] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1401.884850][T12458] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1401.884906][T12458] do_writepages+0x27a/0x600 [ 1401.884956][T12458] ? __pfx_do_writepages+0x10/0x10 [ 1401.884994][T12458] ? do_raw_spin_unlock+0x172/0x230 [ 1401.885047][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885092][T12458] ? _raw_spin_unlock+0x28/0x50 [ 1401.885140][T12458] filemap_writeback+0x225/0x2d0 [ 1401.885187][T12458] ? __pfx_filemap_writeback+0x10/0x10 [ 1401.885291][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885336][T12458] ? find_held_lock+0x2b/0x80 [ 1401.885396][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885455][T12458] f2fs_sync_dirty_inodes+0x2a9/0x960 [ 1401.885534][T12458] block_operations+0x2b0/0xff0 [ 1401.885584][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885628][T12458] ? __bfs+0x148/0x290 [ 1401.885672][T12458] ? __pfx_block_operations+0x10/0x10 [ 1401.885789][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885837][T12458] ? ktime_get+0x200/0x310 [ 1401.885878][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.885922][T12458] ? lockdep_hardirqs_on+0x7c/0x110 [ 1401.885971][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.886014][T12458] ? rcu_is_watching+0x12/0xc0 [ 1401.886057][T12458] f2fs_write_checkpoint+0x326/0x52f0 [ 1401.886146][T12458] kill_f2fs_super+0x3d0/0x480 [ 1401.886201][T12458] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1401.886276][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.886340][T12458] deactivate_locked_super+0xc1/0x1a0 [ 1401.886381][T12458] deactivate_super+0xde/0x100 [ 1401.886421][T12458] cleanup_mnt+0x225/0x450 [ 1401.886471][T12458] task_work_run+0x150/0x240 [ 1401.886523][T12458] ? __pfx_task_work_run+0x10/0x10 [ 1401.886590][T12458] exit_to_user_mode_loop+0xfb/0x540 [ 1401.886643][T12458] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.886695][T12458] do_syscall_64+0x4ee/0xf80 [ 1401.886752][T12458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.886790][T12458] RIP: 0033:0x7f3580990a77 [ 1401.886819][T12458] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1401.886855][T12458] RSP: 002b:00007fff8bf0f458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1401.886890][T12458] RAX: 0000000000000000 RBX: 00007f3580a13d7d RCX: 00007f3580990a77 [ 1401.886915][T12458] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8bf0f510 [ 1401.886939][T12458] RBP: 00007fff8bf0f510 R08: 0000000000000000 R09: 0000000000000000 [ 1401.886963][T12458] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8bf105a0 [ 1401.886987][T12458] R13: 00007f3580a13d7d R14: 0000000000155f86 R15: 00007fff8bf105e0 [ 1401.887042][T12458] [ 1401.887056][T12458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1402.184188][T14531] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1402.595201][T14531] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1402.899927][T14531] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1403.582281][T13599] Bluetooth: hci5: command tx timeout [ 1403.604920][T14531] EXT4-fs error (device loop7): ext4_free_blocks:6727: comm syz.7.1410: Freeing blocks not in datazone - block = 0, count = 4096 [ 1404.411399][T14531] EXT4-fs (loop7): 1 orphan inode deleted [ 1404.432146][T14531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1404.492782][T14286] hsr_slave_0: entered promiscuous mode [ 1404.519930][T14286] hsr_slave_1: entered promiscuous mode [ 1404.841088][T14286] debugfs: 'hsr0' already exists in 'hsr' [ 1404.846848][T14286] Cannot create hsr debugfs directory [ 1405.696370][T13599] Bluetooth: hci5: command tx timeout [ 1405.841403][T11781] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.869218][T14561] [ 1406.871762][T14561] ============================= [ 1406.876955][T14561] WARNING: suspicious RCU usage [ 1406.881960][T14561] syzkaller #0 Not tainted [ 1406.886386][T14561] ----------------------------- [ 1406.891289][T14561] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1406.899834][T14561] [ 1406.899834][T14561] other info that might help us debug this: [ 1406.899834][T14561] [ 1406.910140][T14561] [ 1406.910140][T14561] rcu_scheduler_active = 2, debug_locks = 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1406.918217][T14561] 1 lock held by syz.6.1418/14561: [ 1406.923589][T14561] #0: ffffffff8e3c8c80 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xb20 [ 1406.935198][T14561] [ 1406.935198][T14561] stack backtrace: [ 1406.941662][T14561] CPU: 0 UID: 0 PID: 14561 Comm: syz.6.1418 Not tainted syzkaller #0 PREEMPT(full) [ 1406.941709][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1406.941733][T14561] Call Trace: [ 1406.941745][T14561] [ 1406.941760][T14561] dump_stack_lvl+0x16c/0x1f0 [ 1406.941813][T14561] lockdep_rcu_suspicious+0x166/0x260 [ 1406.941864][T14561] get_callchain_entry+0x278/0x3f0 [ 1406.941915][T14561] get_perf_callchain+0x2d6/0x980 [ 1406.941958][T14561] ? __entry_text_end+0x1020b5/0x1020b9 [ 1406.942009][T14561] ? finish_task_switch.isra.0+0x131/0xbd0 [ 1406.942076][T14561] ? __pfx_get_perf_callchain+0x10/0x10 [ 1406.942121][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942167][T14561] ? trace_sched_exit_tp+0xd1/0x110 [ 1406.942206][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942258][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942303][T14561] ? __lock_acquire+0x436/0x2890 [ 1406.942355][T14561] __bpf_get_stack+0x74b/0x950 [ 1406.942407][T14561] ? __pfx___bpf_get_stack+0x10/0x10 [ 1406.942454][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942510][T14561] bpf_get_stack+0x32/0x40 [ 1406.942554][T14561] bpf_get_stack_raw_tp+0x1dd/0x280 [ 1406.942608][T14561] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 1406.942644][T14561] bpf_prog_test_run_syscall+0x6df/0xb20 [ 1406.942698][T14561] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1406.942748][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942795][T14561] ? fput+0x70/0xf0 [ 1406.942846][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.942892][T14561] ? __bpf_prog_get+0x97/0x2a0 [ 1406.942955][T14561] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1406.943011][T14561] __sys_bpf+0x1035/0x4980 [ 1406.943058][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943105][T14561] ? futex_private_hash_put+0x160/0x1b0 [ 1406.943162][T14561] ? __pfx___sys_bpf+0x10/0x10 [ 1406.943211][T14561] ? __pfx_futex_wait+0x10/0x10 [ 1406.943246][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943306][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943352][T14561] ? rcu_is_watching+0x12/0xc0 [ 1406.943389][T14561] ? __schedule+0x10b9/0x6150 [ 1406.943431][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943478][T14561] ? __schedule+0x114c/0x6150 [ 1406.943527][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943573][T14561] ? do_futex+0x122/0x350 [ 1406.943660][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943706][T14561] ? xfd_validate_state+0x61/0x180 [ 1406.943745][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943802][T14561] __x64_sys_bpf+0x78/0xc0 [ 1406.943850][T14561] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1406.943896][T14561] ? lockdep_hardirqs_on+0x7c/0x110 [ 1406.943947][T14561] do_syscall_64+0xcd/0xf80 [ 1406.944008][T14561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.944048][T14561] RIP: 0033:0x7eff0118f749 [ 1406.944077][T14561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.944114][T14561] RSP: 002b:00007eff02094038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1406.944149][T14561] RAX: ffffffffffffffda RBX: 00007eff013e5fa0 RCX: 00007eff0118f749 [ 1406.944176][T14561] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1406.944201][T14561] RBP: 00007eff01213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1406.944226][T14561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1406.944250][T14561] R13: 00007eff013e6038 R14: 00007eff013e5fa0 R15: 00007fff764d3d48 [ 1406.944302][T14561] [ 1407.352192][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1417'. [ 1407.748988][T13599] Bluetooth: hci5: command tx timeout [ 1409.299436][ T6006] bridge_slave_1: left allmulticast mode [ 1409.305119][ T6006] bridge_slave_1: left promiscuous mode [ 1409.320252][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.332806][ T6006] bridge_slave_0: left allmulticast mode [ 1409.338452][ T6006] bridge_slave_0: left promiscuous mode [ 1409.350627][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.606100][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.620922][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.635913][ T6006] bond0 (unregistering): Released all slaves [ 1409.815859][ T6006] hsr_slave_0: left promiscuous mode [ 1409.822277][ T6006] hsr_slave_1: left promiscuous mode [ 1409.828395][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.836937][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.189830][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 1410.245405][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 1410.819809][ T6006] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.892832][ T6006] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.954379][ T6006] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.038372][ T6006] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.267405][ T6006] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.344381][ T6006] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.401246][ T6006] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.471985][ T6006] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.681890][ T6006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.783755][ T6006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.872910][ T6006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.982530][ T6006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.216494][ T6006] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.307605][ T6006] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.367601][ T6006] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.436121][ T6006] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.581419][ T6006] bridge_slave_1: left allmulticast mode [ 1412.587109][ T6006] bridge_slave_1: left promiscuous mode [ 1412.594281][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.604390][ T6006] bridge_slave_0: left allmulticast mode [ 1412.611289][ T6006] bridge_slave_0: left promiscuous mode [ 1412.618068][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.635769][ T6006] bridge_slave_1: left allmulticast mode [ 1412.641625][ T6006] bridge_slave_1: left promiscuous mode [ 1412.647364][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.657521][ T6006] bridge_slave_0: left allmulticast mode [ 1412.667351][ T6006] bridge_slave_0: left promiscuous mode [ 1412.674548][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.687078][ T6006] bridge_slave_1: left allmulticast mode [ 1412.693748][ T6006] bridge_slave_1: left promiscuous mode [ 1412.699908][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.712503][ T6006] bridge_slave_0: left allmulticast mode [ 1412.718151][ T6006] bridge_slave_0: left promiscuous mode [ 1412.724532][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.739788][ T6006] bridge_slave_1: left allmulticast mode [ 1412.745478][ T6006] bridge_slave_1: left promiscuous mode [ 1412.751707][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.772638][ T6006] bridge_slave_0: left allmulticast mode [ 1412.778288][ T6006] bridge_slave_0: left promiscuous mode [ 1412.784531][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.810312][ T6006] gretap0: left allmulticast mode [ 1412.815364][ T6006] gretap0: left promiscuous mode [ 1412.825772][ T6006] bridge0: port 3(gretap0) entered disabled state [ 1412.834964][ T6006] bridge_slave_1: left allmulticast mode [ 1412.841290][ T6006] bridge_slave_1: left promiscuous mode [ 1412.847029][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.856754][ T6006] bridge_slave_0: left allmulticast mode [ 1412.862617][ T6006] bridge_slave_0: left promiscuous mode [ 1412.868352][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.344226][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.356035][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.366392][ T6006] bond0 (unregistering): Released all slaves [ 1413.457677][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.469290][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.479621][ T6006] bond0 (unregistering): Released all slaves [ 1413.673963][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.685354][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.696826][ T6006] bond0 (unregistering): Released all slaves [ 1414.041023][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.057701][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.067913][ T6006] bond0 (unregistering): Released all slaves [ 1414.320974][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.331853][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.342131][ T6006] bond0 (unregistering): Released all slaves [ 1415.304412][ T6006] hsr_slave_0: left promiscuous mode [ 1415.313445][ T6006] hsr_slave_1: left promiscuous mode [ 1415.320555][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.327944][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.336824][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.344485][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.356354][ T6006] hsr_slave_0: left promiscuous mode [ 1415.366025][ T6006] hsr_slave_1: left promiscuous mode [ 1415.372466][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.381503][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.394409][ T6006] hsr_slave_0: left promiscuous mode [ 1415.400940][ T6006] hsr_slave_1: left promiscuous mode [ 1415.407002][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.415527][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.424428][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.432258][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.445165][ T6006] hsr_slave_0: left promiscuous mode [ 1415.451546][ T6006] hsr_slave_1: left promiscuous mode [ 1415.457606][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.465478][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.473767][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.482337][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.497701][ T6006] hsr_slave_0: left promiscuous mode [ 1415.505018][ T6006] hsr_slave_1: left promiscuous mode [ 1415.511522][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.519412][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.527605][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.535974][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.618553][ T6006] veth1_macvtap: left promiscuous mode [ 1415.624164][ T6006] veth0_macvtap: left promiscuous mode [ 1415.630554][ T6006] veth1_vlan: left promiscuous mode [ 1415.635885][ T6006] veth0_vlan: left promiscuous mode [ 1415.643040][ T6006] veth1_macvtap: left promiscuous mode [ 1415.648577][ T6006] veth0_macvtap: left promiscuous mode [ 1415.654986][ T6006] veth1_vlan: left promiscuous mode [ 1415.660408][ T6006] veth0_vlan: left promiscuous mode [ 1415.667116][ T6006] veth1_macvtap: left promiscuous mode [ 1415.673163][ T6006] veth0_macvtap: left promiscuous mode [ 1415.678822][ T6006] veth1_vlan: left promiscuous mode [ 1415.684551][ T6006] veth0_vlan: left promiscuous mode [ 1415.691787][ T6006] veth1_macvtap: left promiscuous mode [ 1415.697324][ T6006] veth0_macvtap: left promiscuous mode [ 1415.704963][ T6006] veth1_vlan: left promiscuous mode [ 1415.710634][ T6006] veth0_vlan: left promiscuous mode [ 1416.485634][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 1416.525374][ T6006] team0 (unregistering): Port device team_slave_0 removed