last executing test programs: 1m22.324916807s ago: executing program 0 (id=268): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x60) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) utime(&(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m20.72040424s ago: executing program 1 (id=269): epoll_create(0xb24c) socket(0x2, 0xa, 0x6) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x8000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m20.426444808s ago: executing program 0 (id=271): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000000)=ANY=[], 0x82, 0x229, &(0x7f00000007c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1m17.222111686s ago: executing program 0 (id=275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x30}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 1m16.138078843s ago: executing program 0 (id=277): socketpair(0x18, 0x3, 0x1, &(0x7f0000000000)) r0 = io_uring_setup(0x1a8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x0, 0x22e}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000090000000000000000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 1m16.077504437s ago: executing program 1 (id=278): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2000019, 0x0, 0xfc, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000480)=0xc) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000dde61b3b7304000001000000060000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000000)="a5", 0x1}], 0x1}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) dup(0xffffffffffffffff) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) 1m12.879355547s ago: executing program 1 (id=280): openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000004c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x1e4224, 0x1598cc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1002, &(0x7f0000000880)=""/4121, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 1m12.786749991s ago: executing program 0 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m11.700520604s ago: executing program 1 (id=284): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getpid() r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c6179626163"], 0xa8) close(r2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) syz_io_uring_setup(0x867, 0x0, 0x0, &(0x7f0000ff4000)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) 1m9.708041746s ago: executing program 1 (id=287): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) 1m7.071122626s ago: executing program 0 (id=292): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) 1m4.376890704s ago: executing program 1 (id=295): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x20044084) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c) 51.425242788s ago: executing program 32 (id=292): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) 49.139363678s ago: executing program 33 (id=295): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x20044084) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1, 0x62, 0xfd4c) 13.029942941s ago: executing program 2 (id=366): r0 = syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000340)={[{@shortad}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid_forget}, {@uid}, {@nostrict}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@gid_forget}]}, 0x1, 0xc32, &(0x7f000001fd40)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000a40)="d702d59f4724b7ff8d8539f4e2edf5394a8d433b785b854eddc457ee9c7360ae5ef117021c9db8eb4a7cf8ea06a92037e872e57822d9576021e0d674372da7e62e9833617b613bcc5a75d7c15a6da472938b7757c499ccc603dc172c1aaa26e8ea1a19e29802b35be7d510b168736f5bde9868c641d457ab75f618284bf7eca24153e16f70d9750ab65c258e73584f00f5c9d576a4c78b59de6c9af77938d73f6392776ffd8736483c2406566e78c7bdcd2fd0c0f20f558c41bd4b611f18602c5613980276cd4717adada4070d55ce199627add5b50ccbc1d0f226feea71b3d42a", 0xe1}], 0x1) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x9, 0x4, 0x5, 0x88d7, 0x8f, 0x100a, 0x28012, 0x1002, 0xfffffffc, 0x200, 0x7, 0x10000009, 0x55461b48, 0x5, 0x4, 0x8, 0x2, 0x9, 0x4, 0x108, 0x3, 0x3, 0xa, 0x5, 0x800001, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) poll(0x0, 0x0, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) semctl$SETVAL(0x0, 0x7, 0x10, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x1f}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, 0x0, 0x4040) write$UHID_CREATE2(r2, 0x0, 0x118) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) write$UHID_CREATE2(r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.728803326s ago: executing program 2 (id=369): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000440)=ANY=[], 0xfd, 0x251, &(0x7f0000000780)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f000000a400)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nombcache}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(r2, 0x2, 0x0, &(0x7f0000000100)) 10.501833843s ago: executing program 3 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0), &(0x7f0000000380)=0x8) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'ovf\x00', 0x20, 0x80005, 0x6f}, 0x2c) getpeername(r5, &(0x7f0000000440)=@ethernet={0x0, @random}, &(0x7f0000000240)=0x80) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.193004229s ago: executing program 2 (id=372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.011763635s ago: executing program 4 (id=373): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 8.842173298s ago: executing program 4 (id=374): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000000)=ANY=[], 0x82, 0x229, &(0x7f00000007c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) 8.561361498s ago: executing program 3 (id=375): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c6e6f626172726965722c63726561746f723d154a38a42c6e6c733d6370313235352c666f7263652c008eb5fa1722dda5fbe9235a8df701619f85980541d7a0e26fe2fac5ae1352e7d2dcfe4a0500cee529e80e5c14103ca36a955d425c9805101fdd1490dd9d4a10a38755de8712ca45d8e7b68652a8ca9863b9ddee9f99f84ea007795e09d6373c14fa0fbe9074"], 0x1, 0x6e8, &(0x7f0000001f80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x28060400) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0x14, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300)='./bus\x00') 7.516141401s ago: executing program 4 (id=376): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0xa02) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 7.032459319s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.004971141s ago: executing program 2 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0xffffffff, 0x0, 0x0, 0x1) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 4.514806776s ago: executing program 2 (id=379): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x5e2, &(0x7f0000000080)={0x0, 0x7935, 0x1}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000001780), 0x13}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0xf0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.513431833s ago: executing program 3 (id=380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x32315241, 0x3, 0x9, [{0x7ca9, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x80000000}, {0x5, 0x400}, {0xc}], 0xd, 0x3, 0x3, 0x0, 0x7}}) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000380)=0x14) poll(0x0, 0x0, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.511977719s ago: executing program 4 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.480261656s ago: executing program 4 (id=382): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.450473832s ago: executing program 3 (id=383): socket(0x1000000000000010, 0x80802, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4, 0x5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x0, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 86.150503ms ago: executing program 4 (id=384): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 84.877135ms ago: executing program 2 (id=392): syz_open_dev$media(0x0, 0x3, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x9, 0x2, 0x9}, &(0x7f0000000040)=0x14) 0s ago: executing program 3 (id=385): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x210c11, &(0x7f0000000000)=ANY=[], 0x82, 0x229, &(0x7f00000007c0)="$eJzsmb9rFEEUx78zu7e3iaJYaGFzFgEjmL3dPZU0IrGxigiJiOVh1pC4ycndIbmAkPwB/gGCf4dFKgs7OwsrCxWEFF5pIUJGZnfmdm7XzeVcsMn7QGa/8+vNe7OzbyAHgiBOLd++/vzy6u7i6nUAZzGHumo/tPQIG9wY//m1VVPy/fa5lwd5ewyAEFndnrC+A+DdkgXspWaFyGb/EsCcsrkKnmjJQ3BcU/oRGDztq8hmR2B4rJo3Dd2ZUSKO2JNOvPZ0I458WQSyCGXRAsSY/8N9hjUArlqCGf73BrvP2jHQTUUcaVETep1CV0645V2pwGb5/iX+LXHcNraAA+d1v6eevrF/ATgCpVtgWFF6EXV4ntdQ1Sgw4r9sZ/at9LUZ8U8OMhXuNIOriwsLVe3cmTLAv4ojUejaQ/UAnX96BdMK+fklwjlusPRj+iV4ozjLmWTHrbx1LN8iP+hRy6XhwYfirO9jLZ+Wy5Zg+K8n/EQiSVwACl0fZ+N4OWvRea3bG1wcs3Ml3Z/7+cOmT2DpkcDhPTXkqpGfbONWaPa3njd7g92Fja32erQebYdh65Z/w/dvhk157/jNJEMfk//cJD/NGvZrJWMd5mCn3e93gx2g3w1G9TAtjYy78rbzY5Tmh/sc87+F0NdLEra6KFluDab++Bv5lGreKnWeIAiCIAiCIAiCIAiCIAjihNSBM0ADDOp/lUf61ypRwA4f4MUM8CcAAP//HG1b4Q==") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 84.226070][ T5810] cgroup: Unknown subsys name 'net' [ 84.358862][ T5810] cgroup: Unknown subsys name 'cpuset' [ 84.367745][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.023811][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.309861][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.329128][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.337263][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.344937][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.350177][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.352800][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.367980][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.371311][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.375322][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.382640][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.392335][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.397676][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.405229][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.411189][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.418207][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.430738][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.432970][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.438191][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.445938][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.470852][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.474336][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.480406][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.495215][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.507935][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.515779][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.179202][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 89.275155][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 89.308356][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.385576][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.448387][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 89.593089][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.601464][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.609319][ T5824] bridge_slave_0: entered allmulticast mode [ 89.616787][ T5824] bridge_slave_0: entered promiscuous mode [ 89.664591][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.671890][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.680082][ T5824] bridge_slave_1: entered allmulticast mode [ 89.687984][ T5824] bridge_slave_1: entered promiscuous mode [ 89.708458][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.715674][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.722830][ T5821] bridge_slave_0: entered allmulticast mode [ 89.730368][ T5821] bridge_slave_0: entered promiscuous mode [ 89.781554][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.788876][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.796510][ T5829] bridge_slave_0: entered allmulticast mode [ 89.803716][ T5829] bridge_slave_0: entered promiscuous mode [ 89.811038][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.818263][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.826422][ T5821] bridge_slave_1: entered allmulticast mode [ 89.833704][ T5821] bridge_slave_1: entered promiscuous mode [ 89.846145][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.853308][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.860609][ T5832] bridge_slave_0: entered allmulticast mode [ 89.868099][ T5832] bridge_slave_0: entered promiscuous mode [ 89.890053][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.897417][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.904833][ T5829] bridge_slave_1: entered allmulticast mode [ 89.913396][ T5829] bridge_slave_1: entered promiscuous mode [ 89.951193][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.958892][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.967103][ T5832] bridge_slave_1: entered allmulticast mode [ 89.975717][ T5832] bridge_slave_1: entered promiscuous mode [ 90.002268][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.069703][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.081382][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.107354][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.119770][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.129368][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.137452][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.144777][ T5822] bridge_slave_0: entered allmulticast mode [ 90.152244][ T5822] bridge_slave_0: entered promiscuous mode [ 90.162047][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.185749][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.226119][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.233378][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.241010][ T5822] bridge_slave_1: entered allmulticast mode [ 90.250086][ T5822] bridge_slave_1: entered promiscuous mode [ 90.284674][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.310230][ T5821] team0: Port device team_slave_0 added [ 90.318612][ T5821] team0: Port device team_slave_1 added [ 90.376463][ T5824] team0: Port device team_slave_0 added [ 90.397134][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.404110][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.430722][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.457970][ T5832] team0: Port device team_slave_0 added [ 90.466223][ T5824] team0: Port device team_slave_1 added [ 90.473859][ T5829] team0: Port device team_slave_0 added [ 90.481081][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.488134][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.514084][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.528742][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.537704][ T5836] Bluetooth: hci1: command tx timeout [ 90.538714][ T5838] Bluetooth: hci4: command tx timeout [ 90.548899][ T5836] Bluetooth: hci2: command tx timeout [ 90.549047][ T5836] Bluetooth: hci0: command tx timeout [ 90.558113][ T5832] team0: Port device team_slave_1 added [ 90.593387][ T5829] team0: Port device team_slave_1 added [ 90.610375][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.625161][ T5836] Bluetooth: hci3: command tx timeout [ 90.687483][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.694451][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.720794][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.732695][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.740325][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.766285][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.791684][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.798850][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.824817][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.850061][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.857536][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.884207][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.903327][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.910387][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.936678][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.962250][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.969298][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.996132][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.018634][ T5822] team0: Port device team_slave_0 added [ 91.029526][ T5822] team0: Port device team_slave_1 added [ 91.075919][ T5821] hsr_slave_0: entered promiscuous mode [ 91.082587][ T5821] hsr_slave_1: entered promiscuous mode [ 91.136104][ T5829] hsr_slave_0: entered promiscuous mode [ 91.142589][ T5829] hsr_slave_1: entered promiscuous mode [ 91.149359][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.155525][ T5829] Cannot create hsr debugfs directory [ 91.161931][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.169074][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.195653][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.262444][ T5832] hsr_slave_0: entered promiscuous mode [ 91.268938][ T5832] hsr_slave_1: entered promiscuous mode [ 91.275447][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 91.281193][ T5832] Cannot create hsr debugfs directory [ 91.287630][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.294591][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.321171][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.470784][ T5824] hsr_slave_0: entered promiscuous mode [ 91.477357][ T5824] hsr_slave_1: entered promiscuous mode [ 91.483489][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 91.489306][ T5824] Cannot create hsr debugfs directory [ 91.534780][ T5822] hsr_slave_0: entered promiscuous mode [ 91.541365][ T5822] hsr_slave_1: entered promiscuous mode [ 91.547806][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 91.553557][ T5822] Cannot create hsr debugfs directory [ 91.834742][ T24] cfg80211: failed to load regulatory.db [ 92.073040][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.086277][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.098836][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.118115][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.181014][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.191613][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.203229][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.231318][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.317977][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.337387][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.359717][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.385640][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.472582][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.491947][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.504311][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.519841][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.549398][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.616160][ T5836] Bluetooth: hci4: command tx timeout [ 92.620857][ T5838] Bluetooth: hci2: command tx timeout [ 92.621617][ T5836] Bluetooth: hci1: command tx timeout [ 92.631739][ T5827] Bluetooth: hci0: command tx timeout [ 92.644181][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.678575][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.689500][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.700718][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.707576][ T5838] Bluetooth: hci3: command tx timeout [ 92.722138][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.768924][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.787163][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.794393][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.822390][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.829562][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.870888][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.899748][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.906984][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.923996][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.978281][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.985509][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.004020][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.061204][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.068415][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.082627][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.089895][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.167538][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.249137][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.314256][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.343892][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.351155][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.390031][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.397386][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.484721][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.513872][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.556461][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.563673][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.619442][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.659959][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.667238][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.769016][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.973814][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.057646][ T5832] veth0_vlan: entered promiscuous mode [ 94.082963][ T5832] veth1_vlan: entered promiscuous mode [ 94.214269][ T5822] veth0_vlan: entered promiscuous mode [ 94.249414][ T5822] veth1_vlan: entered promiscuous mode [ 94.263652][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.312483][ T5832] veth0_macvtap: entered promiscuous mode [ 94.325001][ T5832] veth1_macvtap: entered promiscuous mode [ 94.354027][ T5821] veth0_vlan: entered promiscuous mode [ 94.371209][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.391243][ T5822] veth0_macvtap: entered promiscuous mode [ 94.404355][ T5822] veth1_macvtap: entered promiscuous mode [ 94.422813][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.441095][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.470822][ T5821] veth1_vlan: entered promiscuous mode [ 94.508560][ T5824] veth0_vlan: entered promiscuous mode [ 94.514540][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.524760][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.546172][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.557255][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570843][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.593254][ T5824] veth1_vlan: entered promiscuous mode [ 94.602880][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.668584][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.678153][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.696052][ T5838] Bluetooth: hci1: command tx timeout [ 94.696664][ T5827] Bluetooth: hci2: command tx timeout [ 94.701485][ T5838] Bluetooth: hci0: command tx timeout [ 94.707043][ T5827] Bluetooth: hci4: command tx timeout [ 94.724801][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.733879][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.769304][ T5821] veth0_macvtap: entered promiscuous mode [ 94.775299][ T5827] Bluetooth: hci3: command tx timeout [ 94.781236][ T5821] veth1_macvtap: entered promiscuous mode [ 94.804851][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.813784][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.843416][ T5829] veth0_vlan: entered promiscuous mode [ 94.900760][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.935034][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.943766][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.950741][ T5829] veth1_vlan: entered promiscuous mode [ 94.957407][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.971105][ T5824] veth0_macvtap: entered promiscuous mode [ 94.975581][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.984691][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.007344][ T5824] veth1_macvtap: entered promiscuous mode [ 95.054582][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.061369][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.067013][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.115786][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.153944][ T5829] veth0_macvtap: entered promiscuous mode [ 95.165996][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.173963][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.193186][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.212359][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.232030][ T5829] veth1_macvtap: entered promiscuous mode [ 95.292143][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.358514][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.403988][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.492022][ T5946] loop0: detected capacity change from 0 to 512 [ 95.496698][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.869504][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.954650][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.012526][ T5946] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.043833][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131945][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.168524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.221230][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.294158][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.356179][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.397668][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.412807][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.422290][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.440858][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.475292][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.511939][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.554303][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.665444][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.705861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.719980][ T5957] loop0: detected capacity change from 0 to 4096 [ 96.780595][ T5827] Bluetooth: hci4: command tx timeout [ 96.789785][ T5827] Bluetooth: hci0: command tx timeout [ 96.795647][ T5827] Bluetooth: hci2: command tx timeout [ 96.801170][ T5827] Bluetooth: hci1: command tx timeout [ 96.859297][ T5827] Bluetooth: hci3: command tx timeout [ 96.942965][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.249886][ T5963] overlayfs: missing 'lowerdir' [ 97.369672][ T5965] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 97.820787][ T5966] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 98.640938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.721847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.876362][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.982652][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9'. [ 99.318123][ T30] audit: type=1804 audit(1762525150.105:2): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7" name="/newroot/1/file0/file1" dev="loop0" ino=30 res=1 errno=0 [ 99.875363][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.894465][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.164186][ T5993] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET) [ 100.381330][ T5999] loop1: detected capacity change from 0 to 128 [ 100.747059][ T5999] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 101.038961][ T5999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.315869][ T6011] Bluetooth: MGMT ver 1.23 [ 102.646230][ T6013] loop0: detected capacity change from 0 to 4096 [ 102.691538][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.533612][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.895321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.903559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.304638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.314163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.215498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.229327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.205229][ T6046] loop3: detected capacity change from 0 to 512 [ 108.325514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.359930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.163115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 110.179602][ T6046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.192392][ T6046] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.219868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.494791][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.045860][ T6064] netlink: 'syz.2.24': attribute type 79 has an invalid length. [ 114.506519][ T6075] loop4: detected capacity change from 0 to 4096 [ 114.557511][ T6075] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 115.401417][ T6075] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 115.433319][ T6075] ntfs3(loop4): ino=1a, mi_enum_attr [ 115.466771][ T6075] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 115.903565][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 115.952301][ T24] IPVS: starting estimator thread 0... [ 116.075200][ T6109] IPVS: using max 26 ests per chain, 62400 per kthread [ 116.896296][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 118.367608][ T6125] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.534061][ T6125] loop0: detected capacity change from 0 to 2048 [ 119.028914][ T6125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.389950][ T6127] loop4: detected capacity change from 0 to 32768 [ 119.428021][ T6127] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.40 (6127) [ 119.465587][ T6127] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.477515][ T6127] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 119.561577][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.632117][ T6127] BTRFS info (device loop4): enabling ssd optimizations [ 119.639519][ T6127] BTRFS info (device loop4): turning on async discard [ 119.647589][ T6127] BTRFS info (device loop4): enabling free space tree [ 119.671475][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.923480][ T6105] bond0 (unregistering): Released all slaves [ 120.846351][ T5821] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.452433][ T6161] loop2: detected capacity change from 0 to 512 [ 123.550519][ T6161] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 123.594068][ T6161] EXT4-fs (loop2): invalid journal inode [ 123.621793][ T6161] EXT4-fs (loop2): can't get journal size [ 123.631121][ T6172] loop3: detected capacity change from 0 to 128 [ 124.686053][ T6172] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4636: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 124.699856][ T6172] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 124.721302][ T6161] EXT4-fs (loop2): 1 truncate cleaned up [ 124.747179][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.192126][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.205390][ T5978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.017004][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 127.728105][ T6205] nvme_fabrics: unknown parameter or missing value '{$nhF zt*h~ yexR#[Y_jAF' in ctrl creation request [ 128.872014][ T6208] loop3: detected capacity change from 0 to 40427 [ 128.909620][ T6208] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 128.917627][ T6208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 128.929448][ T6208] F2FS-fs (loop3): invalid crc value [ 129.265910][ T6208] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 129.746222][ T6208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.753545][ T6208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.309571][ T5838] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 132.098599][ T5978] usb 2-1: device descriptor read/all, error -110 [ 132.896530][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915109][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.072692][ T5978] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.621154][ T5978] usb 2-1: device descriptor read/64, error -32 [ 133.773273][ T5978] usb usb2-port1: attempt power cycle [ 134.138029][ T6240] netlink: 830 bytes leftover after parsing attributes in process `syz.4.62'. [ 134.371611][ T6246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.625512][ T5978] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.600444][ T5978] usb 2-1: device not accepting address 4, error -71 [ 138.227679][ T6271] loop1: detected capacity change from 0 to 64 [ 138.256443][ T6271] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 138.925439][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 142.257599][ T5838] Bluetooth: Wrong link type (-71) [ 144.432605][ T6323] loop1: detected capacity change from 0 to 256 [ 147.905574][ T6328] binder: 6326:6328 ioctl 4018620d 0 returned -22 [ 149.328462][ T6330] Process accounting resumed [ 153.374430][ T6349] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 158.442121][ T6383] syzkaller1: entered promiscuous mode [ 158.476033][ T6383] syzkaller1: entered allmulticast mode [ 158.836486][ T6394] mmap: syz.4.94 (6394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 162.447976][ T6421] ======================================================= [ 162.447976][ T6421] WARNING: The mand mount option has been deprecated and [ 162.447976][ T6421] and is ignored by this kernel. Remove the mand [ 162.447976][ T6421] option from the mount to silence this warning. [ 162.447976][ T6421] ======================================================= [ 162.531631][ T6421] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.163942][ T6422] loop1: detected capacity change from 0 to 1024 [ 164.152608][ T12] hfsplus: b-tree write err: -5, ino 4 [ 166.487616][ T6445] loop0: detected capacity change from 0 to 64 [ 166.516321][ T6445] hfs: unable to locate alternate MDB [ 166.522305][ T6445] hfs: continuing without an alternate MDB [ 167.209709][ T6448] loop1: detected capacity change from 0 to 1024 [ 169.940149][ T36] hfsplus: b-tree write err: -5, ino 4 [ 170.376984][ T6469] loop4: detected capacity change from 0 to 1024 [ 170.416871][ T6471] loop2: detected capacity change from 0 to 128 [ 171.584842][ T6471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 171.637042][ T6471] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.508576][ T50] hfsplus: b-tree write err: -5, ino 4 [ 176.150170][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.582800][ T6510] loop4: detected capacity change from 0 to 1024 [ 177.717670][ T6510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.765422][ T6510] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.720811][ T6519] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.400225][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.464205][ T6539] loop1: detected capacity change from 0 to 64 [ 181.196018][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'. [ 181.465982][ T6546] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 186.194773][ T6578] loop1: detected capacity change from 0 to 4096 [ 186.207860][ T6578] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 186.218506][ T6578] ntfs3(loop1): ino=2, mi_enum_attr [ 186.223764][ T6578] ntfs3(loop1): Failed to load $LogFile (-22). [ 190.468516][ T6610] loop1: detected capacity change from 0 to 512 [ 190.612939][ T6610] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.147: inode has both inline data and extents flags [ 190.941526][ T6618] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.148'. [ 191.756054][ T6610] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 192.590277][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.941702][ T6627] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 193.757361][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.221523][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234795][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.723241][ T6647] warning: `syz.4.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.581983][ T6650] loop3: detected capacity change from 0 to 1024 [ 197.712562][ T6650] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.774031][ T6650] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 197.803728][ T6650] EXT4-fs (loop3): orphan cleanup on readonly fs [ 197.818285][ T6656] loop2: detected capacity change from 0 to 256 [ 197.832748][ T6650] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.156: Freeing blocks not in datazone - block = 0, count = 4096 [ 197.852769][ T6650] EXT4-fs (loop3): 1 orphan inode deleted [ 197.891723][ T6650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.464850][ T6665] loop4: detected capacity change from 0 to 16 [ 199.166560][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.845465][ T6680] loop3: detected capacity change from 0 to 2048 [ 201.997212][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.016818][ T6687] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 205.737051][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.105622][ T6709] syz_tun: entered allmulticast mode [ 206.127333][ T6709] syz_tun: left allmulticast mode [ 206.524939][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 210.418293][ T6738] Process accounting resumed [ 211.120292][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.129141][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.678175][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.684821][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 211.708713][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.715049][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.722407][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 213.475990][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.564327][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.497052][ T6773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 216.981126][ T6774] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.188'. [ 216.991152][ T6774] openvswitch: netlink: Flow key attr not present in new flow. [ 217.629999][ T6060] IPVS: starting estimator thread 0... [ 217.726141][ T6779] IPVS: using max 24 ests per chain, 57600 per kthread [ 219.131168][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.471271][ T1155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.704601][ T4322] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.774078][ T4322] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.074508][ T6802] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.194'. [ 222.753432][ T6803] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.193'. [ 222.763297][ T6803] openvswitch: netlink: Flow key attr not present in new flow. [ 226.318082][ T6823] loop4: detected capacity change from 0 to 4096 [ 226.742629][ T6836] xt_socket: unknown flags 0x50 [ 227.275314][ T6835] loop1: detected capacity change from 0 to 4096 [ 227.295102][ T6835] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 227.424836][ T6833] loop3: detected capacity change from 0 to 1764 [ 227.801179][ T6838] loop0: detected capacity change from 0 to 32768 [ 227.836381][ T6838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.204 (6838) [ 227.951584][ T6838] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.951728][ T6838] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 228.455108][ T30] audit: type=1804 audit(1762525278.745:3): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.200" name="/newroot/36/file0/file1" dev="loop4" ino=30 res=1 errno=0 [ 228.628515][ T6833] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 228.638294][ T6841] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.205'. [ 228.638328][ T6841] openvswitch: netlink: Flow actions attr not present in new flow. [ 228.779124][ T6835] ntfs3(loop1): ino=1a, mi_enum_attr [ 228.850471][ T6835] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 228.894178][ T6835] ntfs3(loop1): ino=1a, mi_enum_attr [ 228.895331][ T6838] BTRFS info (device loop0): enabling ssd optimizations [ 228.907167][ T6835] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 228.914359][ T6838] BTRFS info (device loop0): turning on async discard [ 228.921222][ T6838] BTRFS info (device loop0): enabling free space tree [ 231.498234][ T30] audit: type=1800 audit(1762525281.865:4): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.204" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 233.071900][ T5822] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.737724][ T6891] loop3: detected capacity change from 0 to 512 [ 233.837553][ T6891] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 234.384399][ T6891] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.366696][ T6891] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.214: bad orphan inode 131083 [ 235.472392][ T6891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.387841][ T6917] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.219'. [ 237.397030][ T6917] openvswitch: netlink: Flow actions attr not present in new flow. [ 238.108270][ T6925] loop1: detected capacity change from 0 to 1024 [ 238.223270][ T6926] loop2: detected capacity change from 0 to 512 [ 238.485976][ T6932] autofs: Unknown parameter '0x0000000000000000' [ 239.281316][ T6926] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 239.289661][ T6926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 239.351611][ T6926] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 239.363331][ T6926] EXT4-fs warning (device loop2): ext4_enable_quotas:7181: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.386087][ T6926] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 239.399482][ T6926] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.220: bg 0: block 40: padding at end of block bitmap is not set [ 239.426349][ T6926] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 239.800283][ T6926] EXT4-fs (loop2): 1 truncate cleaned up [ 239.808146][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.828692][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.904745][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.120697][ T6949] loop2: detected capacity change from 0 to 256 [ 240.146592][ T6951] loop0: detected capacity change from 0 to 1024 [ 240.428065][ T6953] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.225'. [ 240.437310][ T6953] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.139456][ T74] hfsplus: b-tree write err: -5, ino 4 [ 241.169763][ T6949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 247.068631][ T6979] loop2: detected capacity change from 0 to 1024 [ 247.077112][ T6979] EXT4-fs: Ignoring removed i_version option [ 247.083340][ T6979] EXT4-fs: inline encryption not supported [ 247.265171][ T6979] EXT4-fs (loop2): Test dummy encryption mode enabled [ 247.404179][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.811689][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.890001][ T7020] Cannot find set identified by id 0 to match [ 255.711986][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720465][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.841865][ T7025] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.239'. [ 255.858932][ T7025] openvswitch: netlink: Flow key attr not present in new flow. [ 255.859667][ T7023] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.241'. [ 255.875714][ T7023] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.324343][ T7027] loop1: detected capacity change from 0 to 2048 [ 257.320123][ T7027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.199066][ T7031] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.593257][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.753892][ T7069] team_slave_0: entered promiscuous mode [ 262.759974][ T7069] team_slave_1: entered promiscuous mode [ 262.767318][ T7069] macsec1: entered promiscuous mode [ 262.772966][ T7069] team0: entered promiscuous mode [ 262.794455][ T7069] macsec1: entered allmulticast mode [ 262.804998][ T7069] team0: entered allmulticast mode [ 262.811105][ T7069] team_slave_0: entered allmulticast mode [ 262.819351][ T7069] team_slave_1: entered allmulticast mode [ 264.488581][ T7069] team0: left allmulticast mode [ 264.529483][ T7069] team_slave_0: left allmulticast mode [ 264.583406][ T7069] team_slave_1: left allmulticast mode [ 264.598119][ T7085] loop0: detected capacity change from 0 to 1024 [ 264.723982][ T7069] team0: left promiscuous mode [ 264.780618][ T7095] Invalid ELF header magic: != ELF [ 265.092928][ T7069] team_slave_0: left promiscuous mode [ 265.098494][ T7069] team_slave_1: left promiscuous mode [ 266.995915][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.107620][ T7085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.520222][ T7095] bridge1: entered promiscuous mode [ 267.741875][ T7095] bridge1: entered allmulticast mode [ 268.037767][ T7104] binder: 7100:7104 ioctl c0306201 0 returned -14 [ 269.559186][ T7103] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.259'. [ 269.568437][ T7103] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.937925][ T7114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 269.945274][ T7114] overlayfs: failed to set xattr on upper [ 269.951091][ T7114] overlayfs: ...falling back to redirect_dir=nofollow. [ 269.958108][ T7114] overlayfs: ...falling back to index=off. [ 269.964530][ T7114] overlayfs: ...falling back to uuid=null. [ 270.042569][ T7115] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 270.374555][ T7117] tipc: Started in network mode [ 270.380869][ T7117] tipc: Node identity e28c7e00df23, cluster identity 4711 [ 270.390506][ T7117] tipc: Enabled bearer , priority 0 [ 270.398912][ T7117] syzkaller0: entered promiscuous mode [ 270.404608][ T7117] syzkaller0: entered allmulticast mode [ 270.817967][ T7125] loop3: detected capacity change from 0 to 8 [ 271.399766][ T7122] SQUASHFS error: zstd decompression error: 10 [ 271.406519][ T7122] SQUASHFS error: zstd decompression failed, data probably corrupt [ 271.414487][ T7122] SQUASHFS error: Failed to read block 0x60: -5 [ 271.421881][ T7122] SQUASHFS error: zstd decompression error: 10 [ 271.428096][ T7122] SQUASHFS error: zstd decompression failed, data probably corrupt [ 271.436077][ T7122] SQUASHFS error: Failed to read block 0x60: -5 [ 271.825475][ T7127] loop4: detected capacity change from 0 to 32768 [ 272.353966][ T5978] tipc: Node number set to 1034911232 [ 272.514666][ T7127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.266 (7127) [ 272.555165][ T7127] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.565428][ T7127] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 272.612398][ T7116] tipc: Resetting bearer [ 273.746138][ T7116] tipc: Disabling bearer [ 274.355885][ T7127] BTRFS info (device loop4): enabling ssd optimizations [ 274.363022][ T7127] BTRFS info (device loop4): turning on async discard [ 274.371382][ T7127] BTRFS info (device loop4): enabling free space tree [ 274.708543][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.384832][ T7171] loop0: detected capacity change from 0 to 16 [ 276.941573][ T7171] erofs (device loop0): mounted with root inode @ nid 36. [ 279.214296][ T7188] loop4: detected capacity change from 0 to 4096 [ 282.084526][ T7188] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 282.088026][ T7188] EXT4-fs: failed to create workqueue [ 282.104647][ T7188] EXT4-fs (loop4): mount failed [ 283.146947][ T7214] tipc: Started in network mode [ 283.151879][ T7214] tipc: Node identity 2edfc1fc6cba, cluster identity 4711 [ 283.162555][ T7214] tipc: Enabled bearer , priority 0 [ 283.418839][ T7216] syzkaller0: entered promiscuous mode [ 283.485143][ T7216] syzkaller0: entered allmulticast mode [ 283.685952][ T7214] tipc: Resetting bearer [ 284.433836][ T6269] tipc: Node number set to 1113965052 [ 284.514482][ T7213] tipc: Resetting bearer [ 284.758641][ T7228] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 285.312830][ T7213] tipc: Disabling bearer [ 286.847463][ T7243] loop4: detected capacity change from 0 to 8 [ 286.991194][ T795] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 287.960928][ T795] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 287.982124][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.001640][ T795] usb 2-1: Product: syz [ 288.006300][ T795] usb 2-1: Manufacturer: syz [ 288.011017][ T795] usb 2-1: SerialNumber: syz [ 288.074175][ T795] usb 2-1: config 0 descriptor?? [ 288.146861][ T795] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 290.322762][ T795] gspca_sunplus: reg_r err -110 [ 290.327853][ T795] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 290.352661][ T7255] loop3: detected capacity change from 0 to 8 [ 290.950830][ T795] usb 2-1: USB disconnect, device number 6 [ 292.293178][ T7271] loop3: detected capacity change from 0 to 128 [ 292.305330][ T7271] vxfs: Unknown parameter ' sg' [ 294.098048][ T7263] syz.4.294 (7263): drop_caches: 2 [ 296.529793][ T7284] syz.2.298 (7284) used greatest stack depth: 16440 bytes left [ 304.438743][ T7323] comedi comedi0: pcmda12: I/O port conflict (0x4f28,16) [ 305.901272][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.919476][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.927441][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.936115][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.943918][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.989872][ T7331] loop2: detected capacity change from 0 to 256 [ 306.031472][ T7332] loop4: detected capacity change from 0 to 512 [ 306.085773][ T7331] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.272309][ T7332] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 306.291853][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.141830][ T7331] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 307.147976][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.158695][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.168774][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.176449][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.192730][ T7332] EXT4-fs (loop4): invalid journal inode [ 307.249356][ T7332] EXT4-fs (loop4): can't get journal size [ 307.311035][ T7331] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 307.585929][ T7332] EXT4-fs (loop4): 1 truncate cleaned up [ 307.588332][ T7331] exFAT-fs (loop2): failed to load alloc-bitmap [ 307.593612][ T7332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.608318][ T7331] exFAT-fs (loop2): failed to recognize exfat type [ 307.735205][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.075203][ T5836] Bluetooth: hci5: command tx timeout [ 308.236195][ T30] audit: type=1800 audit(1762525359.075:5): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.312" name="file1" dev="loop4" ino=19 res=0 errno=0 [ 308.994758][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.353345][ T5836] Bluetooth: hci6: command tx timeout [ 310.136915][ T5836] Bluetooth: hci5: command tx timeout [ 310.295321][ T7368] hub 2-0:1.0: USB hub found [ 310.516092][ T7368] hub 2-0:1.0: 1 port detected [ 311.515295][ T5836] Bluetooth: hci6: command tx timeout [ 312.216167][ T5838] Bluetooth: hci5: command tx timeout [ 312.796028][ T7326] chnl_net:caif_netlink_parms(): no params data found [ 313.253913][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.357987][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.575282][ T5838] Bluetooth: hci6: command tx timeout [ 313.736108][ T5838] Bluetooth: hci1: command 0x1003 tx timeout [ 313.785136][ T5836] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 314.237420][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.248072][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.272295][ T7326] bridge_slave_0: entered allmulticast mode [ 314.291710][ T7326] bridge_slave_0: entered promiscuous mode [ 314.297843][ T5836] Bluetooth: hci5: command tx timeout [ 314.451197][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.469942][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.478484][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.497815][ T7326] bridge_slave_1: entered allmulticast mode [ 315.451910][ T7326] bridge_slave_1: entered promiscuous mode [ 315.904698][ T5836] Bluetooth: hci6: command tx timeout [ 317.186381][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.195029][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.655706][ T7423] loop4: detected capacity change from 0 to 512 [ 318.764039][ T7423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.787591][ T7432] overlayfs: missing 'lowerdir' [ 318.854787][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.794598][ T7326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.811149][ T7335] chnl_net:caif_netlink_parms(): no params data found [ 320.952162][ T7326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.510069][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.764485][ T7449] loop3: detected capacity change from 0 to 1024 [ 321.772551][ T7326] team0: Port device team_slave_0 added [ 322.491058][ T7326] team0: Port device team_slave_1 added [ 323.547452][ T7461] evm: overlay not supported [ 324.506763][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.564866][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.616885][ T7335] bridge_slave_0: entered allmulticast mode [ 324.676948][ T7335] bridge_slave_0: entered promiscuous mode [ 324.717431][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.726344][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.943181][ T7326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.758462][ T7326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.787232][ T7326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.025693][ T7326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.245385][ T50] bridge_slave_1: left allmulticast mode [ 326.251523][ T50] bridge_slave_1: left promiscuous mode [ 326.261603][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.377741][ T50] bridge_slave_0: left allmulticast mode [ 326.408872][ T50] bridge_slave_0: left promiscuous mode [ 326.754319][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.482827][ T7483] syz.3.339 (7483): drop_caches: 2 [ 329.449030][ T7499] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 330.731495][ T30] audit: type=1326 audit(1762525381.535:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 331.712091][ T30] audit: type=1326 audit(1762525381.535:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 331.765627][ T7512] 9pnet_virtio: no channels available for device syz [ 331.777191][ T30] audit: type=1326 audit(1762525381.545:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 331.860443][ T30] audit: type=1326 audit(1762525381.545:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 332.725119][ T30] audit: type=1326 audit(1762525381.545:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 332.785835][ T30] audit: type=1326 audit(1762525381.545:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 332.819058][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.835114][ T30] audit: type=1326 audit(1762525381.615:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 332.884212][ T30] audit: type=1326 audit(1762525381.615:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 332.922652][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.947793][ T50] bond0 (unregistering): Released all slaves [ 332.959605][ T30] audit: type=1326 audit(1762525381.615:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1ba18f6c9 code=0x7ffc0000 [ 333.322751][ T7520] loop2: detected capacity change from 0 to 8 [ 333.338996][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.630614][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.689384][ T7335] bridge_slave_1: entered allmulticast mode [ 333.815583][ T7518] SQUASHFS error: zstd decompression error: 10 [ 333.821802][ T7518] SQUASHFS error: zstd decompression failed, data probably corrupt [ 333.830191][ T7518] SQUASHFS error: Failed to read block 0x60: -5 [ 333.836660][ T7518] SQUASHFS error: zstd decompression error: 10 [ 333.842827][ T7518] SQUASHFS error: zstd decompression failed, data probably corrupt [ 333.851960][ T7518] SQUASHFS error: Failed to read block 0x60: -5 [ 333.853497][ T7335] bridge_slave_1: entered promiscuous mode [ 334.185388][ T50] tipc: Left network mode [ 334.638503][ T7528] loop2: detected capacity change from 0 to 16 [ 334.676473][ T7528] erofs (device loop2): mounted with root inode @ nid 36. [ 334.716297][ T7335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.738388][ T7335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.797244][ T7542] loop3: detected capacity change from 0 to 128 [ 335.907373][ T7542] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 335.945137][ T7542] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 336.024026][ T7335] team0: Port device team_slave_0 added [ 336.034169][ T7335] team0: Port device team_slave_1 added [ 336.826497][ T7326] hsr_slave_0: entered promiscuous mode [ 336.840056][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.871586][ T7326] hsr_slave_1: entered promiscuous mode [ 336.912915][ T7326] debugfs: 'hsr0' already exists in 'hsr' [ 336.926019][ T7553] input: syz1 as /devices/virtual/input/input5 [ 336.944487][ T7326] Cannot create hsr debugfs directory [ 337.085276][ T7553] netlink: 'syz.2.356': attribute type 2 has an invalid length. [ 337.093077][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'. [ 337.847057][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.854464][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.954682][ T7335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.976664][ T7335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.001912][ T7335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.073916][ T7335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.125088][ T7571] loop2: detected capacity change from 0 to 4096 [ 338.166229][ T50] hsr_slave_0: left promiscuous mode [ 338.195718][ T50] hsr_slave_1: left promiscuous mode [ 338.210861][ T7571] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 338.218977][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.228135][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.235531][ T7571] ntfs3(loop2): Failed to load $Extend (-22). [ 338.241635][ T7571] ntfs3(loop2): Failed to initialize $Extend. [ 338.515216][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.532825][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.612145][ T7579] Cannot find add_set index 0 as target [ 339.558981][ T7570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.608022][ T50] veth1_macvtap: left promiscuous mode [ 339.618794][ T50] veth0_macvtap: left promiscuous mode [ 339.624631][ T50] veth1_vlan: left promiscuous mode [ 339.633337][ T50] veth0_vlan: left promiscuous mode [ 340.205373][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 342.003675][ T7601] loop2: detected capacity change from 0 to 2048 [ 342.048401][ T7601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.142118][ T50] team0 (unregistering): Port device team_slave_1 removed [ 342.179485][ T50] team0 (unregistering): Port device team_slave_0 removed [ 343.367613][ T7613] loop2: detected capacity change from 0 to 512 [ 343.393692][ T7613] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 343.628670][ T7611] loop3: detected capacity change from 0 to 32768 [ 344.479200][ T7335] hsr_slave_0: entered promiscuous mode [ 344.500915][ T7335] hsr_slave_1: entered promiscuous mode [ 344.518053][ T7335] debugfs: 'hsr0' already exists in 'hsr' [ 344.533223][ T7335] Cannot create hsr debugfs directory [ 344.780278][ T74] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 345.316829][ T7632] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 346.085328][ T795] IPVS: starting estimator thread 0... [ 346.185082][ T7643] IPVS: using max 24 ests per chain, 57600 per kthread [ 346.289060][ T7654] loop4: detected capacity change from 0 to 16 [ 346.338095][ T7654] erofs (device loop4): mounted with root inode @ nid 36. [ 347.455957][ T7662] loop3: detected capacity change from 0 to 1024 [ 347.495166][ T7646] tipc: Enabled bearer , priority 0 [ 347.647437][ T7633] tipc: Disabling bearer [ 347.973028][ T7607] hfsplus: b-tree write err: -5, ino 4 [ 348.005206][ T50] IPVS: stop unused estimator thread 0... [ 352.532640][ T7702] trusted_key: syz.2.379 sent an empty control message without MSG_MORE. [ 352.828454][ T7326] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.173302][ T7705] loop3: detected capacity change from 0 to 512 [ 353.606212][ T7711] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.673622][ T7705] EXT4-fs warning (device loop3): ext4_enable_quotas:7181: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 353.689685][ T7705] EXT4-fs (loop3): mount failed [ 354.977639][ T7326] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 355.108631][ T7326] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.351839][ T7722] ------------[ cut here ]------------ [ 355.357851][ T7722] WARNING: arch/x86/kvm/x86.c:13965 at kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0, CPU#0: syz.2.392/7722 [ 355.370608][ T7722] Modules linked in: [ 355.374714][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) [ 355.375376][ T7729] loop3: detected capacity change from 0 to 16 [ 355.385083][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.400357][ T7722] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.408233][ T7722] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 355.428110][ T7722] RSP: 0018:ffffc900042f7460 EFLAGS: 00010287 [ 355.434263][ T7722] RAX: ffffffff81479ee8 RBX: ffff888069045280 RCX: 0000000000080000 [ 355.442330][ T7722] RDX: ffffc9000bb13000 RSI: 0000000000001d68 RDI: 0000000000001d69 [ 355.450370][ T7722] RBP: ffffc900042f74e8 R08: ffff8880690452bf R09: 1ffff1100d208a57 [ 355.458515][ T7722] R10: dffffc0000000000 R11: ffffed100d208a58 R12: 1ffff9200085ee8c [ 355.466555][ T7722] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 355.475350][ T7722] FS: 00007f6c551c36c0(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 355.484296][ T7722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.491734][ T7722] CR2: 000000110c2c20db CR3: 0000000078e16000 CR4: 00000000003526f0 [ 355.499848][ T7722] Call Trace: [ 355.503139][ T7722] [ 355.506160][ T7722] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 355.513568][ T7722] kvm_check_async_pf_completion+0x102/0x3c0 [ 355.519619][ T7722] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 355.526384][ T7722] vcpu_run+0x26be/0x7760 [ 355.530744][ T7722] ? vcpu_run+0x364e/0x7760 [ 355.535388][ T7722] ? __pfx_vcpu_run+0x10/0x10 [ 355.540081][ T7722] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 355.545854][ T7722] ? rcu_is_watching+0x15/0xb0 [ 355.550657][ T7722] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 355.556418][ T7722] ? __mutex_trylock_common+0x153/0x260 [ 355.561996][ T7722] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 355.567836][ T7722] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 355.574730][ T7722] ? rcu_is_watching+0x15/0xb0 [ 355.580512][ T7722] ? trace_contention_end+0x39/0x120 [ 355.585980][ T7722] ? look_up_lock_class+0x74/0x170 [ 355.591141][ T7722] ? register_lock_class+0x51/0x320 [ 355.596462][ T7722] ? __lock_acquire+0xab9/0xd20 [ 355.598315][ T7729] erofs (device loop3): mounted with root inode @ nid 36. [ 355.601380][ T7722] kvm_vcpu_ioctl+0x99a/0xed0 [ 355.613282][ T7722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.618663][ T7722] ? __fget_files+0x2a/0x420 [ 355.623314][ T7722] ? __fget_files+0x3a0/0x420 [ 355.628134][ T7722] ? __fget_files+0x2a/0x420 [ 355.632769][ T7722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.637756][ T7722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.643062][ T7722] __se_sys_ioctl+0xfc/0x170 [ 355.647763][ T7722] do_syscall_64+0xfa/0xfa0 [ 355.652302][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.658437][ T7722] ? clear_bhb_loop+0x60/0xb0 [ 355.663134][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.669087][ T7722] RIP: 0033:0x7f6c5438f6c9 [ 355.674203][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.694437][ T7722] RSP: 002b:00007f6c551c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.702915][ T7722] RAX: ffffffffffffffda RBX: 00007f6c545e5fa0 RCX: 00007f6c5438f6c9 [ 355.710989][ T7722] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 355.719037][ T7722] RBP: 00007f6c54411f91 R08: 0000000000000000 R09: 0000000000000000 [ 355.727057][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.735199][ T7722] R13: 00007f6c545e6038 R14: 00007f6c545e5fa0 R15: 00007ffd9ad420e8 [ 355.743189][ T7722] [ 355.746339][ T7722] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.753623][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT(full) [ 355.762817][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.772875][ T7722] Call Trace: [ 355.776166][ T7722] [ 355.779099][ T7722] dump_stack_lvl+0x99/0x250 [ 355.783701][ T7722] ? __asan_memcpy+0x40/0x70 [ 355.788299][ T7722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.793513][ T7722] ? __pfx__printk+0x10/0x10 [ 355.798127][ T7722] vpanic+0x237/0x6d0 [ 355.802122][ T7722] ? __pfx_vpanic+0x10/0x10 [ 355.806628][ T7722] ? is_bpf_text_address+0x292/0x2b0 [ 355.811927][ T7722] ? is_bpf_text_address+0x26/0x2b0 [ 355.817141][ T7722] panic+0xb9/0xc0 [ 355.820876][ T7722] ? __pfx_panic+0x10/0x10 [ 355.825319][ T7722] __warn+0x334/0x4c0 [ 355.829572][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.836615][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.843654][ T7722] report_bug+0x2be/0x4f0 [ 355.847997][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.855151][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.862264][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1ab/0x2f0 [ 355.869410][ T7722] handle_bug+0x84/0x160 [ 355.873658][ T7722] exc_invalid_op+0x1a/0x50 [ 355.878174][ T7722] asm_exc_invalid_op+0x1a/0x20 [ 355.883034][ T7722] RIP: 0010:kvm_arch_can_dequeue_async_page_present+0x1a9/0x2f0 [ 355.890672][ T7722] Code: 00 65 48 8b 0d 58 41 2e 11 48 3b 4c 24 40 75 21 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 7f 17 0a cc e8 48 e1 79 00 90 <0f> 0b 90 b0 01 eb c0 e8 4b 91 14 0a f3 0f 1e fa 4c 8d b3 f8 02 00 [ 355.910280][ T7722] RSP: 0018:ffffc900042f7460 EFLAGS: 00010287 [ 355.916358][ T7722] RAX: ffffffff81479ee8 RBX: ffff888069045280 RCX: 0000000000080000 [ 355.924418][ T7722] RDX: ffffc9000bb13000 RSI: 0000000000001d68 RDI: 0000000000001d69 [ 355.932395][ T7722] RBP: ffffc900042f74e8 R08: ffff8880690452bf R09: 1ffff1100d208a57 [ 355.940631][ T7722] R10: dffffc0000000000 R11: ffffed100d208a58 R12: 1ffff9200085ee8c [ 355.948608][ T7722] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 355.956606][ T7722] ? kvm_arch_can_dequeue_async_page_present+0x1a8/0x2f0 [ 355.963650][ T7722] ? __pfx_kvm_arch_can_dequeue_async_page_present+0x10/0x10 [ 355.971043][ T7722] kvm_check_async_pf_completion+0x102/0x3c0 [ 355.977042][ T7722] ? kvm_service_local_tlb_flush_requests+0xed/0x130 [ 355.984165][ T7722] vcpu_run+0x26be/0x7760 [ 355.988512][ T7722] ? vcpu_run+0x364e/0x7760 [ 355.993084][ T7722] ? __pfx_vcpu_run+0x10/0x10 [ 355.997853][ T7722] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 356.003579][ T7722] ? rcu_is_watching+0x15/0xb0 [ 356.008359][ T7722] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 356.014005][ T7722] ? __mutex_trylock_common+0x153/0x260 [ 356.019564][ T7722] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 356.025286][ T7722] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 356.031267][ T7722] ? rcu_is_watching+0x15/0xb0 [ 356.036037][ T7722] ? trace_contention_end+0x39/0x120 [ 356.041335][ T7722] ? look_up_lock_class+0x74/0x170 [ 356.046461][ T7722] ? register_lock_class+0x51/0x320 [ 356.051668][ T7722] ? __lock_acquire+0xab9/0xd20 [ 356.056539][ T7722] kvm_vcpu_ioctl+0x99a/0xed0 [ 356.061241][ T7722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 356.066477][ T7722] ? __fget_files+0x2a/0x420 [ 356.071084][ T7722] ? __fget_files+0x3a0/0x420 [ 356.075767][ T7722] ? __fget_files+0x2a/0x420 [ 356.080382][ T7722] ? bpf_lsm_file_ioctl+0x9/0x20 [ 356.085331][ T7722] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 356.090538][ T7722] __se_sys_ioctl+0xfc/0x170 [ 356.095128][ T7722] do_syscall_64+0xfa/0xfa0 [ 356.099642][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.105706][ T7722] ? clear_bhb_loop+0x60/0xb0 [ 356.110394][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.116296][ T7722] RIP: 0033:0x7f6c5438f6c9 [ 356.120789][ T7722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.140409][ T7722] RSP: 002b:00007f6c551c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.148845][ T7722] RAX: ffffffffffffffda RBX: 00007f6c545e5fa0 RCX: 00007f6c5438f6c9 [ 356.156821][ T7722] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 356.164808][ T7722] RBP: 00007f6c54411f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.172791][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.180777][ T7722] R13: 00007f6c545e6038 R14: 00007f6c545e5fa0 R15: 00007ffd9ad420e8 [ 356.188776][ T7722] [ 356.191971][ T7722] Kernel Offset: disabled [ 356.196305][ T7722] Rebooting in 86400 seconds..