last executing test programs: 23m19.480270318s ago: executing program 32 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 22m43.015646724s ago: executing program 33 (id=170): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000007480)="c293836fb39a73f4bcba79f028f56246907b2f8f56fb41c18c427d7c45dbba98a502e65064c5a7df02f969919deea267f15d0c6992e1b044388dfa4f2118767bb996dad0b1bcd8cbd549f6e6eb843669b26e8e3b8a8f181423d9dddccd7afc1b985c5f776e83f68936bc7d92b2a3000582aa894f298a81d2607ca2f626498e2fabe270ad250ca1c665a9bde858be5414368c768b35d60c6a5714078448c51ef3036a149a75a1aac351baa9657a31aa5bedf7452c3e9114c8c201943eb3d2e31586fa6d931f3eaaf54a82bead5ebf5b115515015ec20d915639d529f1f6c03a724ba9c54ad4572466a936a1434ab6ac4409ed9ae7bd6b49e2111bf6015b09d8180690b27d134b5b6167ff9c82c8416cc69dae7b34c7cd7915e92e555f77efad192377ad589f10b73dc7ba2f464370c6aa4e71517d2c397e38f72db7ced8377f5d410dd2bb9cfaef0be2ba5a2130deda604fc601b12d016ec8ad7aeae843a60e978b8deca3cf02265b7e5e9c108eceb6032241f2d7ee70282f8ce01da1c69c1d1f908f98e0d3a9c1b3867a7a0b1a177a7752fdf4acc252ad419dff30556bee70cbb8b9f900601bd9118058ccf6f21d1d3a1171ef972204b97c154af325754d724caf9b00f875f33f963e3f331ccd6d6a37860c3359db92f9b8e1905a1de8ae5361c0135a2b811a10e1d8aade34781b4146843448e5c5c0d270a8b183be61fa93f2a8a46e2a2a9daeff74440efe17c8f24c4a120feb95df5ce8d877cc45fe4709c9cae2315556a900ae98690a58fc6db0648806d91c3cfaa8ea7082b0d7cfce31ea53b33f581a866b63f4885bb9de9f8ad04c061cfbbc0c9ea5237040ce928a979cf3d236b44ba1f52b83266a13dda5ec9f13ba1d439f10c3b39efcdae1eb48665b060991579c95502b29f672bb9068040e7c9df92bc183edf94181c99b249092340e2dcda6699a1e828a93e51bdaa158223a47f484907930fdea5e349a71ef39b59770e95e1b188def3993dca6c87552f4f739eb2a82f6c69f13e13559665b9d1619f6b959657d585f629e78b3dc3dc289ed379f90028e8468f5e02f27f9970f44b199cebe867083242a5216fdf00c5680e9edd0acbc3e6670000882c1d1fbde7846b7a52f2a40d4a66b97242b055a595fdfcb40f462e8003a84c25b001937dffc0d4d50ad746061522111c5fb8d7b133ad8ed9bfcc363697c7feb8ab7c3b6b79160fe843046186d05a5bff20810fe50354b6f06fd82c5b6de5ad886e1028bbe1017c013bd53564e8b6dcd421d52b2f2b5cc5887be901bce4758e1c44af20fc6461b4f589525b18ed0b49ca2f979fff1e1fa0fdefba7d863cbfd757b29c2e939e3b026eac486b6d4ae5b876ec36828f35bf78a48d8cf44481ad05735a242e594e3848f19bfd343aa4c198dec5070e1d3ef130ea37cab13bef65e92f4e3a24c097b43e73700acdc9f05c1c1d7224416d220b6a030f0c23fed986e1e778c4b6258061ceae545a0fbd5a4b03425502e3b3364857a1181c123f9b636c6b40dd958bc1a7339f7c10e73c9d9e462f6d31c5a7e64305632166d46d10a04a4d027f6206dbbdf4618c69a7163ddc08de9a27fb60301a470e9190fa201457c7104f15019c81a177cc45da782734e486431824eb2f04616f0dd4fb7fc40be0d1ea511ec839c46690cb0a145fb7fc3cfb49aa2ea7cdf124c384a15a1c457b140f46b3583119be5b431c4299d9c03e7f2678859ceae884c9dcd6a89d54a6972ab36695a0cce84fa6489e1e56d1f6f71104312c50b47f411817dbbdb42c13deccee32811e00315e11ce1b40c17ca96488a44aece85fa6f43c2376cc779dcd98963f65c49117dcc6991a0fe4b09502f262c4ac440029e574f3f0714683c669be885e68e8baccb514d5a3fd376fe1a835b55ae7a914b9ce2aa5112caf94f93dcbfb91489f06a2b9e2ffdfe14b886f16afc5c1ba2c0334ca157a9aff3d40500e263e6434ebb9e5e2f49b9499f135ae4486ddca19c094ba979a7e657702745a7bcf811a3644aba2eaefd94679d51b0194e61d0d31a338cffbe743304087305ae77feae5a6b5e59a10e4010d068912e0fc9fc7133fd7b33d446e754bb2f46ef537b5ec078488ae58dbf9f0db18abddf23d5d740ed54bb0cfe845152eb4871003b66c852d48d04d4d18d0f60da13e18dd191f18871dca210d2e510f1fbdd5be47b9593be066d70b8bedd206aadfbf27e4e8b3510d2b9c47105d9c4f3da78cd8f516aff7d61ed07269781dbdf59c6e8abe7b3b5757236ff6c7fbb655bfdbc7f8abc11e2ed49921cde54182592881376d5ef989d819136ce063c4c55cf2defd6f8738ad91ad4a7ed228c52bd428ff594d0daa493980b937df6d1c2b4c3cacb6037539b7f3491af766108c3ece1dd197f9a0f81a15b077781a43892de53c67d0b9881245205a0fb1053fabb9eba4ccba2e5688c388b98fceb145da3b2b0faea78333054466e75254d95fbee5d631818d7c963a2c4c2f2fb973cd5d4d690ea0142b920e2e3f5e5ff413fa944ed5d028c8d6d80ff367ded777881b4e4d948abf0b5a5e483d2e6f4a660b3acb79941b5257af8e86387fa46603b1f400b7beed437d13de7c1366b792dc593f5ff3d4dd4c0e5edffc27a429026f84e1aa802589b3509aae9d382989e8417028160d846100ad34920059b269c1817164d97da5cfe508d52ae78fc93ddda474cd3a6def5ce79f926279ab623df14a98b79dc92c556f732fa6bc32a7926973f49481e1df39740ca7bbbaff02eae23fa1344b215ffabd7691276cf3ab5e4f7e2ac43678fdd677f04fd027d806da7602e5cf552654eae20d0a3c7cc727bda539a4943a65cfc500e455d7c9d31e80b7f71f70ea3d5b4d43f5e7f855bb368273cb5c5ebd3683d2d3cb15c0881b2b60f188c41fe1d78f16676923ce57ead90e84cd11990f4f5aab03c1ec46fe1f406e36fda34f9940b5470fc14cd7446230043d045c9dfe0192d799217f412be0123c0353ac4174751299646c12153c8154fd095fbcadc2909dd6c7dc2db3cdb5bf3754095eae79152d3236cef4fdeb3c3a1930cd0d6f46d018858f1cedbdde389cf4da14b4d259799b86e9c094a9126181710e73b410d55bceb8c3fa319ae21389cb02503be05ad7a1bb016ca868c9d9d39c0cb014e2b69449e1221ac58aa1350cbebb3fe1ef99937bdcd3e777887dc9855159583bbafb394f44442f0ab475a647e0e574a6c0cf86a26c7b04699f9fcd1c39782e079bbfa84b3ce53da6e0026b6bbdfa8e1ed58ca262fba39d433805a8752b11f6c87fc9dd8c4bd095bfac81d0a468dd4602ebd42a5ef9529704e19b6506a2b3005d62357f7246d47c57770380915fbdb0d1b9eb570042ebb4c37d6f6b4e7220175e30904a454b623b44120894503c64816afaeb671b4cd2123a75e0ec1509ad5f441a181d307f99e64d8b266ae0a01cf2c11e26f5bd6c02a2eb69d134f03fd1234414c63e56e795389080d0c69a83e093655e90fae582196e98dec30bad720c828851fdef48a268360eb8c27c33952d8e14ee506c642eea0735bd1a7a72ea63300d2c4d78f0537c7659f123eff786abf20fd974178ebec763d5c6e72d48b154da1938b2aec0167912c0148e92a80e79195252bd0f92f8a3765503d3adc9bb3c1542554e7a78eafbf36d7b101c82fb3e07c61d962eb86e58dac22c73a99e49a281ea4d4193ef5feda87edec4b9e5be99c281379f80ccc64ccc64bd223a03052b1a0f8ee06f29e40e01854b888adc4ffae42730182f60aca485f99bfce1a2d4f9762a6a4a46022f0ebe593885314a5bf7409eed5add643040d6bd81ed666f2db47990bf2fb9dd468d71e41759e37103837d74c889e8d7bb43a75dcd0235b3a3d39d3127ff3ed1ad5e371256848242f18b5b30f1671b118f615d33e9f50c9574622afd6bce78e1f33bd7b513f5b77f4cff180256a5e90fda24011f6c62a55105fa5002d52532d052a9090eb7da70e85b0190ca64106459c183218b89ee523ea4be8dfc08e6f6e0c50368f10648e06c74eb2e04dbe8ca575cc2737beb34a56ddc4369b2c156e572fc9d538f47d2bb9a83ce4942a9c3f4005a6447480e9be0f35deca15e30efdacda1f3e3ac77288df80d8339ef8c31536add8141398af40db5fe36c353f10d947b314254327b7c914a702b0c51fe94994f64c613aff49d9bd3fd6c44a2c45cdd1438bca84db1128ec62cde86337c063ffcb90b40ef53729855a11ae1ae0502df2439f697b96661527228354e882c8f1a7ba3cf88ad0342a99be040cf75490e979abb65bed85a54e5acb277234914618bd4e49617418658e5e74060433cd894fcc09512b481f032fd3941995faea3d00ab4e9b141e7d1c377e2f4ed89e2c8435906b20781ea5e0621e75c32d37c5c654b25dacc49161b80bbcacfb4f84a5254d91dc3c32c64afcb2c2c19ce534336d8e5a43a60631a76651b7cff5de7720558841a897d246bc69133ef6c773ef40b3072c3611858f77014e2493412d59f3e06aa3e56d0febc49a786f8f3f60ce0fa1fc602c40c0480a6250aeaecf20549a39273f92d1d34e274ae735a7dcfed8c3255299350f521557ffb1583e136ee1523eb3013faba909c77ee4ed850953211c634638bc8cff023a64804376bae5fb8d26291498a5228b132348d058330efbcd01672d7eb822340c5c0b403513c07d268ce3ed262568a2e9b79c9e97abde50bc6c16cb8143c60819425f6a10cdeca87add2a1b81320d3987c6416696e501e8b49d364e8781f3b7bdf5aaba64987203f4ad5474e51b2815d0bc2f008c9e7c74ef03b54b341d4e298c7552c321669c1286879b9384d436f2af4e75d767e80285b8269a2559dbb08be5a18dfe8adea6337db022147c6da195f30608167345227b187f86e0700ca4cd9e0ef15534c5db8ce37ef82b290279b4c5361cf9eb93644bf1da7a2de6d7455337e5591d1371f1e1e6c1d12cb9734a1987e0de323172b167a4687461da53bf42b9075943d1f13e9232f5aafa4ce2cf26ba04792745278005e4d7ba1f60f9e021d5ece188a61d7e3b419bd3aab9483dfd4534486d0e1e77f83d898bae7ddb345dda133df7b045c6bfa1e95e596beabe5c6e2e6981ed64b66f706b84e45779bddd6db25f006ba3dd55799e17e104e36e795c0b5075e1d6cd034a0c6ba3bd4790417b5f1ba30790d14afe3fd0be9c5f656e2cbc48e6dcb761874f8733ea2f98f3b40fe6cca42540862e0aeeb70645d2f9556c47c003c2b7166cf9d26280c141ff034dffc2b412c2cac7a06611631da3d3eeca51d1b2f219fa0efa71d83cd23034201a17edebeec90b84a07a1b23c4b81d01bd4b244fe486603295eeed083d3e03c21bd60471745fcba5480f0c5acee93f84dc3177e88332bf4e332f56d73b0c2ad9890bb328f7667c1b3f0b164df03447076bbc218865a4f64160933508ba0b5d94fdf78d86807d00c936f18bcb5a26e4fbdbbe00c2000467e222e8211be66aedf9c1ee72e03cd2604495997f1d8a7a05d101b682b833799eab57e0cc959a26177bd5674c8689a254f3902df991c925ea79f818feb34ee5e18db6140a510262687eb08b2658b4c95fdb647aa3b41c3cd27a7a504d638a26283bcc403c3f873989b74b1601249b35bb0a1a4e46489be956cfbf7dff4e538e37b9cb56b145806bcc5f631c14f3198f2b809596055d110923e36f8fee54d3f14ec4ab3b9f75fe754402a24a4aae2e8bb9dee3b8026a75dfd4f6c823ec77b796dae424cff07c6773b7dd92cd87abae5ebea2cd2c5b80d9b4c0ef0fa6049ebb5cb26df5b939fc2435877fedc5da34f95686dc0332bfee7c0425e574db29bef932e4a531ab53661e19689e033502d2b33e969ad8cde26efdb591a7fe3a16b807bcd8441b50b8e0166b9bdabde23e28d5b1b4df462a8b85ded7245daf1ed55aa4009a927d1cdc776dfd83c48c350faff815a48377156e763cc0bfd6ad1a0d13bd6b38d047e95ffb2ed91a3f2cd951b806677ca2d9e3224122f6b2e6c29b8ce3fb6839061685f203902b2ad22fdb2007df24d835f89b154da5e6d9f81bac03f0aa7a167b08c88034f604bd32ca3c341395591f58b26241e547f8cab04a634d0c6644f8b3b14638c3ab74e222f68ad8fe39815e7b4a36320d1f3a62822f64807ac4a86db914a5682db00ed5db06fc91f368c6e052e710dcfeb5423645cb1115bfbb5a891ccaf03afd2d7fc640bb784d9d1ec5d72db43d05214f5e9d45cf7a1e8504728dcac92ea41d7a288f1bb3b1620e1e83d71750329ea9145e720797df6aa3cdcbf315727c3245903b6b21543da555d7a5cad18309e7369e51f95e828df80fb360f7c66b993154e029ba81c520fb49e61eafce6ac706e97533aa1bf6ae918432a512d382a579bd673a71884e0e221585505cc9331017bb297aa523ea2e8e6fecc1b28f4a03ed17b00d658a844104b7ba0a567af6ac7d9d71c97e3783179fbe3abe94ec99efa1c91ed1af16c74c88e941224e1201f78ed4ad0244a29ff6d92c8d703b2ad1fb7cb379ec99c59e43579909f029034f19037936d3f1446af55165e4b78a8c8e8785db73fa45d99015c0434a74396dd4cd5ab0dc02768f64a8ef0534f8a9fbfca5ba6c95073b30135626cde4c3155af624ae7ed23b179ec1b7501e6ad1f1ccd1892ec2de9cde60cc721464fa54a8f648326aaf4ab621e0fd7efc9e88bc4afb7cd76f064f06effd94845fab4e4afacf934d072f0a71d1b8bbdcd80306be62ca1e22a71d54100e68fd35d76736e78559fe0e2b57948c9721a62369c61620e2dae50f8784b9ac3e3259f9dd878490442aa4b87929d870e413a59255c222f2db9d6455a7ab778b08aa11d4d0a626b6606ecfbc30c3bfd0b772b2532f83527a286597f3fb1f00d8d4747ebffdb95066a634c5e749219953e5b572a2340214206c32ccd04efa7df306bc819e09e7bf040f3deecf6ccdd33daa8f3cdd2227874228eab30d910524bf246c193da629869274f3322fb2daa7f7896b9493d1eb76517c29005f515f8ca7171e9b53abb9e44b23d9ddad87e40514e1a971e131d0bf847073e7822f982f11f7dc584b1c1a635feaff3982f9bf64ed4cbf77b30a641edb14c4fe386a8257998c856a1eeaf787ded5b3fcbccbbb7cc718a64868d9a53329fdf7d53153bc9300adec5e4c79406be0f166e3cd4625d6b30bc1c0510990e77b57afc3d60d5a5393f1a933a1dc3be0d1c045646a3e1cdf21a7ff59a359034c398ae314497997fe31590680d469b5d4af445c76afaf2599a5fcbfa20c2ee97a03f5f038b3fef92efedd6af77759ee0d6a9b62df496dc0c3fb2b89d4215d43a554f0a92c8f998a9f825472dcc4c76449d65529e242e13f076962c463f369349ac2bc46efaee22bc640bd28afeb2ddadba055cc4304d888327eec8113edb890706fd7b1606388fbde4aee71bf31257b44f9f1454041330c9aa5a05b84485050130d5be6a4f3ef8ec6a01d5f169e81ee2733360be8acb63cbe6e374d3cbb3c54c878aaa63d2b7faa575a27e5185dcdd3f9db20452a40e09e72b4e0ab6a5aea01fdb6dc6e3d53d3962cc6b0a04620fd57dae24bebfccb0517cb254bad860ca5e3f9439cdf680b88932ded8aa434310b8febd19288f23fa10e2395520029ea9b80d6b6892a6cfd3368d1d8d856b88093b27abf2e9aa9b2ddd769121183fc4c397ce1e807ffb786f5e44ccca63d5ea4c783fa06c2c0655c53595b56f406c60c4819df723ced1dde61e217dcdde08360adba9a41f6822d38cf7c7eacf62fcae3ee41fa48d3219c91fe567c393a6e201cd478947facc581cd305c3889da2b4fe259acbe6de3a552d24758ccbf12ba992b72d7e387008d1656ce9685500bb1f3e789f740a35d376b3a0b43e4d58dd3a0e874219fec528854c50f85bf380499c6492d8c58694f07c859d90faf699039f687744e60e7b515f0361237837885275450841c33efa64924674d5cb057aab6cb70032cc1cff7989c34c7045b4594d30c0dd63eb8e8c968b945fb340fd182b14ca32a0760c81d6df7b2230a1bdd9998a8c2117b2ed26ff170b60c316a5abc4524d9871a4ea12e6c6af6a3d406f3cb00e0b7a813bc85e9d70adff3518ab55d75da30c21cc923ceb29ccd03fb87149b80ecb24a27be8f312f362c31fe7b5c16eda624d2fbab96abb26b0a52c152a8c30e8f7e6079cc8529d8551b58cfdf8dfcb7ef1646a2831396c6e834114fc12e8375ad025f0c99a0cdef3bf88295d74379ba9d20c265989570a03b44c23ec2d157a0c05978e490779eb2ebddc0eecfadaac4cbecc572864aaf8f48fb6673b54fc5158147d8885cbcce5909dfc4d9d8a0d89cc6d53eab506afb8ef6dba40bcbe8a5e77208c5cca56b7635c31bde1e5e822aac31dae1cf1ad82ef3a99ae46de9ef7dec0c37a428bd3c365ac0ca4850d0cb7ddfb8a519eb5d7abe6cbc75ced856b6074251cabc805eea809677f28ad0c29197ff31ec4693e44f0ddb16abee17e7ddb6865f75b098d3524d3aafd035d5d35f6a54018065c5e7ec29dae113039b118ce01339e0a1b3e4b395623861ef9e8df9e521b356015a7f8f468e34a974b326d493c2c338302514bf00b4a44916292b9f0e07d65abcf94d9023fb280b750141cd72449e8b61bdad6bb70d32399a3e77fd3f77bd95d10d643d3d20801c39f977aad8f9a6249983df6af0026190533233c7095e40f31ebc0f5c49e4b0d7754a2ae352cb834fcd7e4fada166c8011e89e158bc46cfe62a65b9f7f4cafad3a19d57631bf1f65e6639396adff64c82a993d77a2873748186051072522691d302ccc956f3d2303cc24ddb03c3e2d30ad27e2f016dd3b355f67d5056831cca3ef6e5165664a40c072bff7cadb8c72112e0fde9698f03298a7c1160f0c044edd3da51b26df8121612fb949856dd9a91ed456ef6ced204ecc0fbf055121fff59dc35f59158f9c6d95c6abee06966516e28fbff6983496df28555fa49e3719c81a8449e3dc620fbb920827a897fbf5a27590af05d58ba196871870c53581e231784fbede63a0ccef51d0f9e938d15923bd8eb18867361c810edc61c977630d83773df1561b63db7609f00b85ddd4c85dd326d4c8ea39ef0eb45b56614bf4eddaa8b3fe15a38f97da048cbbbdc57aadfa8bbc1714a0227e7ddbbd1ed84e8f928f1b3f65fe39c8faabb4c09e2c1decc5b0556acda6ca1f2baa76fe712b7d691b9bd78169d67d5e8dfdb78229ce9c68b4638a85d54684103957eedd746d7aaa16161067fc9ec66569b3aceb3394d964b810f3524ab1d304db0b830fe580e56c39a0f5fc59b25fd1123cfa94159dad6a896f2e3acf88729582bb21fef4f0eed457dfc5c3fe2dd1f0aa9e3a31e284d971e216db77d18fea71a217c1fe56a67b35aa06e2bf51b7c3d6bf4f90a256bbfe8bb5684072288e6cc5bbf25f7788e2dd91c4a3cb08c12ec1a3625004112dbdc972ad5214e9c0ab470bd13121d994e4880d974915234ae1900e73c7c4c0263d1cbcd811745c9b7de9aafb612715530f819782bfbe1b5391b23fccd0b763eb05774eb5bb845e52926edfacf9ed908193f0bc27c337ba1d7bebf6d760975ee37c0593d5abbdc01f7f5231cb8c606dedb94dd918619d945b5b78332f9f4e52710b0b7a0eee40b99564315daca1cc1d3c3ac9fbddc541201ed0211037dec7a7dd95bd23896a5e1def59d92d1c478c52792b05df273d5e8c9c34eebce6433dd1e6cfdc6b5678fdc59294b6c22343460b47f190ddc0bf547093085f6b9313377b37dc1454deb8eb39aebea4f4258b5f4fa7a7ddee81532bafcb4e1e092341c8fb658f8932b8b7237b0f596368829ab563b5cbf4e34ac7d66ecd9d1d56b7734959822ce07db00ce9b429206d41a50ad035955bbefefe4051232b0f1ea68a5d42110e8be0eacb403e7fa3cad7deb0cbad293d627874c22cf985a47df64a45a6f9f9165f68c909fafa0c72f7a5cb058bbbfdb02f60e36e8e5fbbe5b2fefa0bc0091c1ba333fbd3942db4a90b7df6b10b4c5d2abf9a9e092a1da6a7df3d2c0951725a395a178fbc23201ec6e8ff4cbaaecd48c34b0ed8cf60fbb7f45cb8571ad3d9a6210583ba42b1b333d310451814d520a24f6169e28166e0ea5468fa2075d02e79a0116648eeb4119f32761d2a7726131d0c2d484df5d4b544fbfe9fb721102f74ed5502675daf9dfb283de390b45540bdfc4463e1027e7b2198d15a0e06bccca7e88f3dd6fa164fb7eeb81ecf6e8961affffd528a8492cc4b7bfcf72c8135ad36e193e774673eb289b197d4daa8e9d4db03dc2da58e8658ff9e756e3a3ec4ecdad6f6d525d6e706ba20fb79d77b77709eedae6cf0122f2e34fe12f62992ca5be22adcec3904d2dafb29cf5dfa6b32e55c2b9d4ab6ab81bf71466b3b3ac7687f376291fe40599d88703916aeda25e6e1f3fe3a064f42e3dd4d8ab2efc6bd520da0b4d8eed4847d310b27569e73d37b31b76f6eee9c2be0561e8f5b5364b7633791bd4aeb78c0c220765e85c696c241ed6aa46a1d341e2fd4306f539644f93ecdf0b2c940d1b843f294aec51bac0ebd72989fe3343994bc2c2a3006fac9e3e237378dc8bfba6a00441db65fa38d414cb80499895cfe865e96d2c03e13b1d2a604a97c144231437fcc7afa20e12ca7e08554decf8278c792de8dd7cf91082c61d54a6a9d1ed65ca2015858f1ede0c4e42892a6dbda1fedbd45d4574e42314ab4d0f2cbce1c1d0cfbd347555b64ab2472fff14de9cbda895606060a3875e857bd43e3e80c7815f6da01533c2e49fc067481ac99db16c07d43132cee3f50f4712fd0085356f3004a4ce05035207de552695fbdd025cc4d62d42916ce1640aa43dc974d6a935ab23049950f1a0d42047ff3c0624157e8f4a2ee78d8458bb1cfe834ac26b4cbf9c9674e3eab295e9050f3c687914bb1a21042a40be6f1572c367fd86393ae13ad76eb47e00f4a752f1f9f049476a8e7bb41214aea9876a080295d6fc65825ffd24bb2a7edc958ed688ad7f5b300c6c452480608b4b86989d8124cd75562a9e126e018659df6cbbb60455d6d2fd18ede8e2154d7d3aa39b30fe49d818c1121e4a2d4363d75348c660da0baac54d0f02e58a0afd9475f445c87f5d0d1a9e185255e33194befb79ddf032ec22c9857b015a1f6ac4fd99fd89a6878b0e35f68a37f00eda7740d44185806dc6bf1becda6b057052f6871de733b4a00afae5b7a8acc6ec1203ddf42e61c00abdd2938b2eab549f643efbaeb6a5548196cef3b23044fa832822b5eb1fee465d7b6da389a60bb0b4cad448bb95e09254da2f1774c6a2a96268d73af233d9fdaffa1b19fc2f28cbfc95741667f5a9de9e672c69651b184607c1351c1492e4d47527b4ada7ac24333f07b96d85d1cef3251c995e665da17961a8bf8ad638d7535d6cfcf6fe555de1abb9c449fce0dc675443784a4ad9a4e98e82198e589f9dd3041315596259a8ed33922cd003572a027e046bf45d0e5325fac107c44317025893fd6663678a1179e25d5f7d9b7873ed72f90a76702e4deec0ea8ada83291b67b2d5ce985f6347d9efeaafd5854826", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x0, {0x6, 0x0, 0x0, {0x6, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}]) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000c, 0x12, r3, 0xd321d000) 21m46.631414131s ago: executing program 0 (id=346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'}) 21m46.196097391s ago: executing program 0 (id=349): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 21m30.647440733s ago: executing program 34 (id=349): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 21m26.812325022s ago: executing program 35 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 19m41.312414477s ago: executing program 36 (id=643): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5f2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x70bd2a, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x4100) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x13}, 0x3, r4}) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002160, 0x0, 0x0) 17m54.859602299s ago: executing program 7 (id=883): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r5, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 17m54.619535596s ago: executing program 7 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 17m53.66030488s ago: executing program 7 (id=888): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000240)={0x1, 0xfffe, "be4108"}) 17m52.383362199s ago: executing program 7 (id=890): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x0) 17m52.277183936s ago: executing program 7 (id=892): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffff9c, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x208a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1800, &(0x7f00000007c0)='b'}) 17m51.085577582s ago: executing program 7 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) 17m50.160105539s ago: executing program 37 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000240)) 14m59.895859138s ago: executing program 8 (id=1169): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 14m44.897135152s ago: executing program 8 (id=1196): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7e9a1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x1, 0x210, &(0x7f00000005c0)="$eJzsmTFv00AUx/93duxQEBIDDCxhqESRqGM7gLowlBUhIbUIGCNqqlK3QamHJhISEQsLH4AvAlImBjYWxMDEAEhIDGRkAYlDdz4nl5iYJCRi6PsNp/89v3v37tl9JzUgCOLI8vnT94/Prq1tXgRwAstwtf2rNfDhhv+H51ZJy9f7Jx91R+MxAEIM5vZf9ndwHK/WLeBxGlaIH8J8vqxjboIrLbkFjgta3waDl+UqJKmMwHBXmx8YunFMizhi9xrx1v2dOPLlEMghlEMNEEP59zoMWwDKegtm5HfQau/WY6CZijjKRElk++QeTSuK6qfyW+e4apRAvq87T5905NzTdt+oXwCOQOsaGDa0XoMLz/MqehoFxvnP2oP4lnxtQ+ef9CTlyZzdeVSt1d49tVrokx1iLnsViF9iIZGdmV7BYoTMY/pVvJJf5UwXx5khZzZqkX/QfcuZXvdNftWX/1refxOqcQHIPXq3FMc3TMvb61qcHopzzqyPIbIvcOwnkfYPZgPnjf5kG7dCNdl7WD1otVd39urb0Xa0H4a1K/4l378cVlVvTseC/ldW/WnJiF8a4+swB4f1JGkGh0DSDPrzMB2NjrvxovFNreGq/3Gs/BQiu17Usd0/76HuPzddx9RsxRqbPEEQBEEQBEEQBEEQBEEQRAGV9zkLXkL/r5Jlv4nlscObyvt3AAAA//99fWJt") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffc, 0x2) getdents(r3, 0x0, 0x58) 14m41.663241844s ago: executing program 8 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) 14m37.12554002s ago: executing program 8 (id=1202): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0xa, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14m33.324515394s ago: executing program 8 (id=1209): prlimit64(0x0, 0xe, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008e}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x35) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x4) 14m30.757361618s ago: executing program 8 (id=1215): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 14m15.418234098s ago: executing program 38 (id=1215): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 13m43.139675196s ago: executing program 9 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) 13m40.22322837s ago: executing program 9 (id=1303): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 13m35.187839839s ago: executing program 9 (id=1306): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) munmap(&(0x7f0000005000/0x1000)=nil, 0x1000) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 13m33.429717768s ago: executing program 9 (id=1308): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000280)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 13m32.008474504s ago: executing program 9 (id=1312): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x1, r4, 0x0, 0x4, 0x0) 13m29.789826137s ago: executing program 9 (id=1314): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 13m13.448881267s ago: executing program 39 (id=1314): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rds(0x15, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 11m23.309838349s ago: executing program 4 (id=1509): ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2bd, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) 11m20.61390508s ago: executing program 4 (id=1512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x59) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 11m18.609277859s ago: executing program 4 (id=1514): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9399}) close(r1) 11m15.874871533s ago: executing program 4 (id=1517): setresgid(0x0, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580), 0x1, 0x14d1, &(0x7f00000015c0)="$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") 11m13.278800728s ago: executing program 4 (id=1521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) io_uring_setup(0x441, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 11m12.079156969s ago: executing program 4 (id=1523): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) acct(&(0x7f0000000140)='./file0\x00') acct(0x0) 11m11.771184803s ago: executing program 40 (id=1523): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) acct(&(0x7f0000000140)='./file0\x00') acct(0x0) 10m26.817910129s ago: executing program 0 (id=1240): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xca\x01\xdfR\xa0\xabL\xaa\x00\x98\x86\xb1\xae,\x91;\x038/h\x85\xb8\xbeSAk\xf4\x9d \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2m\xb0\f\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'\xf8f\x91E8\xebj\\\xfc$m\x92\x97\x8c\x9e\xc5\xa9{\x88', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000002980)="ef", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0!w\xbaf+\xe48\b\xd59\xdd~\xc5TI\xe7\xaa\x02\xe4\xcco\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eip\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4\xac\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5%!\x98TQ\x91\x00\x00', &(0x7f0000000e40)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN\xee\xdd|\x8c\x91\xea\\C%\xdc>\x91\n\x13#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='romfs\x00', &(0x7f0000002940)='\x19\x00\x00\x8dX\x12X\x96\x8a\xc5\xdd\x153\xdf\x9b\xd8\xb8N\x86\x95,B\x032\x13k\xc6]\xe5\xd4\x90\x1c\x06\x1d\xefo/U\x83E+', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 10m25.80914225s ago: executing program 0 (id=1573): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000640)='./file1\x00', 0x0, 0x2008000, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) 10m23.913880554s ago: executing program 0 (id=1575): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "22a5cfd43437ad6a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x4, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10m19.285808539s ago: executing program 0 (id=1584): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @empty=0x11000000}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',rootmode=0000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) listen(r0, 0x4) 10m13.229699899s ago: executing program 2 (id=1593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) 10m11.818983671s ago: executing program 2 (id=1598): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 10m9.120859449s ago: executing program 2 (id=1601): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x1, &(0x7f00000004c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000580)={{r1, r2/1000+60000}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 10m2.508979043s ago: executing program 41 (id=1584): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @empty=0x11000000}}, 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',rootmode=0000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) listen(r0, 0x4) 10m2.487225891s ago: executing program 2 (id=1605): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x1a, 0x5, 0xffffffff) r1 = getpid() prlimit64(r1, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x25d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0x7fc, '\x00', @string=&(0x7f0000000100)=0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 9m57.631231496s ago: executing program 2 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x22) 9m55.863263117s ago: executing program 2 (id=1615): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x2, {0x2, 0x4e1f, @multicast1}, 'vxcan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 9m40.515714463s ago: executing program 42 (id=1615): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_GET_TSC(0x43, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x2, {0x2, 0x4e1f, @multicast1}, 'vxcan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 8m35.243289796s ago: executing program 6 (id=1740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x101) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000540)={0x0, 0x3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = io_uring_setup(0x42db, 0x0) r5 = io_uring_setup(0x178e, &(0x7f0000000540)={0x0, 0x52be, 0x0, 0x0, 0x0, 0x0, r4}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/73, 0x49) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') close_range(r5, 0xffffffffffffffff, 0x0) 8m34.228607028s ago: executing program 6 (id=1742): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x840000000002, 0x3, 0x100) syz_usb_connect(0x0, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c83010203010902290001000000000904000000020201"], 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000100)) r3 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ftruncate(r3, 0xc86) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, 0x0, 0x0) 8m29.559635876s ago: executing program 6 (id=1750): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) capset(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pread64(r1, &(0x7f0000000080)=""/181, 0xb5, 0x365) 8m28.231054927s ago: executing program 6 (id=1752): setresgid(0x0, 0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000001580), 0x1, 0x14d1, &(0x7f00000015c0)="$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") 8m27.12695899s ago: executing program 6 (id=1756): r0 = landlock_create_ruleset(&(0x7f0000000100)={0x520, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x123, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = gettid() tkill(r2, 0xb) 8m25.934842061s ago: executing program 6 (id=1761): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000380)='./file2\x00', 0x4010, &(0x7f0000000040)=ANY=[], 0xfd, 0x1200, &(0x7f0000001a40)="$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") r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000e44652367d2b2c6275ceebc3bd0afee60cc9bc83f43cb457bdc13c5c0354c221ce812d33e2c2803d390501a22c563bfcec8ad8421407dc7ef7c4017e84d5fd26c42353c1bd8c53103659"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095006e00000000006916000000000000bf67000000000000350605000fff0720670600000c000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172bf9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6a1002d94ad089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32a103393c7c166215dab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095031dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa175740395ef9e4a0dc5ad00000000000000000000000050369fa8cd15b7688eb7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = getuid() lchown(&(0x7f0000000100)='./file0\x00', r5, 0xee00) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[], [], 0x2f}) 8m25.165130038s ago: executing program 43 (id=1761): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000380)='./file2\x00', 0x4010, &(0x7f0000000040)=ANY=[], 0xfd, 0x1200, &(0x7f0000001a40)="$eJzs3E+LG3UYB/Bn49auW/ePWqvtQX/oxdPQ3YN4EGSRLcgGlNoVWkGYurMaMiYhExYiYvXk1dchHr0J4hvYi6/B21489iCOmOm6TRvRHrqR9vO5zEOe3zczPwKBCfPk6M1vP+vuV9l+PorWwkK0BhHpdooUrTj20k5zvH5jZ6vd3r6a0pWtaxuvp5RWX/7pwy++f+Xn0bkPflj98Wwcrn909Nvmr4cXDi8e/XHt006VOlXq9UcpTzf7/VF+syzSXqfqZim9VxZ5VaROryqGU/39sj8YjFPe21tZHgyLqkp5b5y6xTiN+mk0HKf8k7zTS1mWpZXl4B+d+fclu9/drus6oq7PxJNR13X9VCzHuXg6VmI1voqIZ+LZeC7Ox/NxIV6IF+PiZNVpXD4AAAAAAAAAAAAAAAAAAAA8Pu6b/184mf9fi3Xz/wAAAAAAAAAAAAAAAAAAAHAK3r9+Y2er3d6+mtJSRPnNwe7BbnNs+lv70Ykyirgca/F7TKb/G0195Z329uU0sR5fl7fu5G8d7D4xnd+Y/J3AnfzipHec32jyaTp/Npbvzm/GWpyfff7NmfmleO3VJv/GX/ks1uKXj6MfZexNzn2S/3Ijpbffbd+TvzRZBwAAAI+CLP1t5v17lt3dX4mI436Tf4DfB+65v16MS4vz3TsR1fjzbl6WxXC6WLrvFcV/L1oP6Z1b8T/ZoOLRL+b9zcRpOPnQ530lAAAAAAAAAAAAPIiH/BThYsx4suyt+WwVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDBQAA//9UWMva") r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000e44652367d2b2c6275ceebc3bd0afee60cc9bc83f43cb457bdc13c5c0354c221ce812d33e2c2803d390501a22c563bfcec8ad8421407dc7ef7c4017e84d5fd26c42353c1bd8c53103659"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095006e00000000006916000000000000bf67000000000000350605000fff0720670600000c000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172bf9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6a1002d94ad089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32a103393c7c166215dab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095031dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa175740395ef9e4a0dc5ad00000000000000000000000050369fa8cd15b7688eb7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = getuid() lchown(&(0x7f0000000100)='./file0\x00', r5, 0xee00) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[], [], 0x2f}) 18.115050842s ago: executing program 3 (id=2403): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) dup2(r0, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 12.651691818s ago: executing program 5 (id=2407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) r5 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r5, 0x0) ftruncate(r5, 0x0) 11.52994261s ago: executing program 5 (id=2409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) 11.529025449s ago: executing program 3 (id=2410): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x164, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f00000001c0)='.\x02\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="11881e672fae6c0cd8b8671e770a1d10e3da622a2714da6d0737898efafcf45e4042993ef091557d2a7d8efac5133dcf49641038788e3834afaad9a7b29c16f1d4f82d5e44e855fb706d86336372a71497be43b4931d352c89eb880eacf58edd5bfa05faf03108b8f73907c3befe4c146ebaa5535aa54849e25c03fe91c50e7c673a9d283c992293311414063f287e82c3f976bcfbf2b2188f8157ce2030b90ec1e90dfd590221bdfbad9d8067c3c412dc235330121b40a0383d4c20866b8985b5a6", @ANYBLOB="cd099bf46634ae0ef20ed2ba2228c7861d77eb8ee5d97ce7a0ac26cdadf7a684dc0ee6f5048a6a3e2e299d207a30c3fe1e73696eaac25bca2d9a44025207a0e36ed20b09f1d1d8752bbb15faa46ca426761546b6172b48665c39072e12cf803bf0b5bf916b8ae2d7e88dd90364d29921c836893f31f70c3e002757353d4a6cdcb9fe803e2ba2139c69b3f60a55aae07cdbbcd36af6fa6cb0368c73a7b97a89c035", @ANYRES16=0x0, @ANYBLOB="565c3d1a135dcfa3316f89263710cde4cfdcd5a74eea8949a429ef95b42bb65e79848dce1ea160e362e643428d36716d0f17497310c5680569"], 0x6, 0x18f, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x15) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=""/49, 0x31) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000200)) utime(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380)={0x0, 0x2}) 9.107546119s ago: executing program 1 (id=2412): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 9.04412802s ago: executing program 5 (id=2413): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1, 0x400000}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x420480, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000180)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0x404c534a, &(0x7f00000003c0)) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000440)={[{@treelog}, {@compress}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@subvolid={'subvolid', 0x3d, 0x91d}}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x25, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") 6.635247487s ago: executing program 1 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x7, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb758, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r5, &(0x7f0000000540)="31e7da93", 0x4, 0x800, 0x0, 0x0) recvmsg(r4, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/41, 0x29}, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 6.561480806s ago: executing program 3 (id=2415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x66) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) socket$key(0xf, 0x3, 0x2) 6.475158958s ago: executing program 5 (id=2416): creat(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) 4.319962125s ago: executing program 1 (id=2417): mkdir(0x0, 0x0) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x9, 0x70bd25, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) socket(0x1d, 0x6, 0x6) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 3.90371555s ago: executing program 1 (id=2418): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000240)) syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x86783, 0x0) 3.903496637s ago: executing program 3 (id=2419): r0 = open(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) dup2(r1, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000100)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.743064626s ago: executing program 3 (id=2420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7GNAjEUBNDZs/YWxBZBRDlk1AMJzVAjyMiWhagACN5LfjAzshy+6n/cmrVkfgumcZYku+S4tk53Sep5ytQaJfvro3ZJNiVzGa2lr++vLNv+TMly6NlfW59uH/wqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPysZwAAAP//wv0Weg==") r1 = io_uring_setup(0x410d, &(0x7f00000000c0)={0x0, 0x60a4, 0x400, 0xfffffffc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000300)=""/100) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syslog(0x4, &(0x7f00000001c0)=""/72, 0x48) syslog(0x3, &(0x7f0000000500)=""/218, 0xda) r4 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r4, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r4, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1.54018218s ago: executing program 5 (id=2421): r0 = openat(0xffffffffffffff9c, 0x0, 0x2026e3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(r0, &(0x7f0000000240)='./file/file0\x00', 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, 0xffffffffffffffff, 0xce9e1000) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x53, 0x3a, '\xd3-\'!!', 0x3a, '', 0x3a, './file/file0', 0x3a, [0x43, 0x4f]}, 0x33) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x101000) r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r3, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020f6936eca9779fb34b0efe7207b1af8ff00000000bfa100000000000007010000f8ffffff0900000008000000b703000000000000850000001000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0xee01, 0x0) 1.310351114s ago: executing program 1 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1) 635.254683ms ago: executing program 5 (id=2423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x66) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) 20.506166ms ago: executing program 3 (id=2424): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 0s ago: executing program 1 (id=2425): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r5, r6, 0x0, 0x80001d00c0d1) kernel console output (not intermixed with test programs): bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.235200][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.242213][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.328626][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.560737][ T7589] bridge_slave_1: left allmulticast mode [ 1126.588780][ T7589] bridge_slave_1: left promiscuous mode [ 1126.641715][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.783159][T12083] Bluetooth: hci1: command tx timeout [ 1126.999183][ T7589] bridge_slave_0: left allmulticast mode [ 1127.038593][ T7589] bridge_slave_0: left promiscuous mode [ 1127.063659][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.140672][T13943] loop3: detected capacity change from 0 to 2048 [ 1127.149058][T13943] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1127.164333][ T7589] bridge_slave_1: left allmulticast mode [ 1127.175262][ T7589] bridge_slave_1: left promiscuous mode [ 1127.207655][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.241172][T13945] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.254416][ T7589] bridge_slave_0: left allmulticast mode [ 1127.262031][ T7589] bridge_slave_0: left promiscuous mode [ 1127.349569][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.424620][ T7589] bridge_slave_1: left allmulticast mode [ 1127.430329][ T7589] bridge_slave_1: left promiscuous mode [ 1127.472870][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.537797][ T7589] bridge_slave_0: left allmulticast mode [ 1127.552938][ T7589] bridge_slave_0: left promiscuous mode [ 1127.559231][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.826048][T13950] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 1127.835334][T13950] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1127.958903][T13950] Remounting filesystem read-only [ 1127.966856][T13950] NILFS (loop3): error -5 truncating bmap (ino=15) [ 1128.406162][ T7589] bridge_slave_1: left allmulticast mode [ 1128.427758][T12076] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1128.440189][ T7589] bridge_slave_1: left promiscuous mode [ 1128.453032][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.477487][ T7589] bridge_slave_0: left allmulticast mode [ 1128.505563][ T7589] bridge_slave_0: left promiscuous mode [ 1128.511376][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.860722][T13960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1954'. [ 1129.024131][T12083] Bluetooth: hci1: command tx timeout [ 1130.559506][T13967] overlayfs: failed to clone upperpath [ 1131.608941][T13973] loop3: detected capacity change from 0 to 4096 [ 1131.616014][T13973] ntfs3: Unknown parameter 'ÿÿ$Àg—G?õ]Hå(ä­\C]Èï’âPõ–}\ˆÂã'®i£7qDÔK˜j(ŒŠ$Äíšêú©D-AÁý' [ 1138.957818][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1139.123523][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1139.339873][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 1139.807921][T14019] loop5: detected capacity change from 0 to 512 [ 1140.372614][T14019] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1140.600853][T14019] EXT4-fs (loop5): invalid journal inode [ 1140.607280][T14019] EXT4-fs (loop5): can't get journal size [ 1140.657177][T14019] EXT4-fs (loop5): 1 truncate cleaned up [ 1140.669207][T14019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.239066][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.607513][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1142.097575][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1142.413445][T12083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1142.435414][T12083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1142.460557][T12083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1142.667009][T12083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1142.702618][T12083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1142.714749][T12083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1143.584572][T14038] loop3: detected capacity change from 0 to 64 [ 1144.664773][T14045] xt_hashlimit: max too large, truncated to 1048576 [ 1144.856222][T12083] Bluetooth: hci2: command tx timeout [ 1144.980293][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1145.299792][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1146.932744][T12083] Bluetooth: hci2: command tx timeout [ 1147.026517][T13807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.053992][T13807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.662629][T13807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.715484][T13888] chnl_net:caif_netlink_parms(): no params data found [ 1148.754536][T13807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.761552][T13807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.073721][T13807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.123420][T12083] Bluetooth: hci2: command tx timeout [ 1149.887146][T14070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.174672][T12083] Bluetooth: hci2: command tx timeout [ 1152.523726][T13807] hsr_slave_0: entered promiscuous mode [ 1152.570268][T13807] hsr_slave_1: entered promiscuous mode [ 1152.792899][T13807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.563903][T13807] Cannot create hsr debugfs directory [ 1156.099610][T13888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.111461][T13888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.127227][T13888] bridge_slave_0: entered allmulticast mode [ 1157.392692][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1157.392720][ T29] audit: type=1326 audit(2000000150.690:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1157.427731][T13888] bridge_slave_0: entered promiscuous mode [ 1158.511522][ T29] audit: type=1326 audit(2000000150.700:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1158.896056][ T29] audit: type=1326 audit(2000000150.700:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1159.142346][T13888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.175085][T13888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.195909][ T29] audit: type=1326 audit(2000000150.700:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1159.391983][T13888] bridge_slave_1: entered allmulticast mode [ 1159.770036][ T29] audit: type=1326 audit(2000000150.700:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1159.806497][T13888] bridge_slave_1: entered promiscuous mode [ 1159.906683][ T29] audit: type=1326 audit(2000000150.700:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1159.942638][ T29] audit: type=1326 audit(2000000150.700:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1160.081426][ T29] audit: type=1326 audit(2000000150.700:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1160.105487][ T29] audit: type=1326 audit(2000000150.700:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e46184690 code=0x7ffc0000 [ 1160.128927][ T29] audit: type=1326 audit(2000000150.700:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e46184690 code=0x7ffc0000 [ 1160.379730][T14124] loop5: detected capacity change from 0 to 32768 [ 1160.525103][T13888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.545621][T13888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1160.609652][T14124] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1160.618902][T14124] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1160.794130][T14124] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1161.549333][T14124] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1162.185643][ T5896] IPVS: starting estimator thread 0... [ 1162.323067][T14138] IPVS: using max 19 ests per chain, 45600 per kthread [ 1163.195932][T13888] team0: Port device team_slave_0 added [ 1163.270348][T13888] team0: Port device team_slave_1 added [ 1164.504909][T13888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.504935][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.504972][T13888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.519486][T13888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.519510][T13888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.519546][T13888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.598669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.652469][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.900871][T13888] hsr_slave_0: entered promiscuous mode [ 1164.950934][T13888] hsr_slave_1: entered promiscuous mode [ 1164.977556][T13888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1165.348278][T13888] Cannot create hsr debugfs directory [ 1165.358921][T14032] chnl_net:caif_netlink_parms(): no params data found [ 1167.866191][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1167.877835][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1168.279227][T14168] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1168.287045][T14168] overlayfs: failed to set xattr on upper [ 1168.292988][T14168] overlayfs: ...falling back to redirect_dir=nofollow. [ 1168.299875][T14168] overlayfs: ...falling back to index=off. [ 1168.305781][T14168] overlayfs: ...falling back to uuid=null. [ 1168.311616][T14168] overlayfs: maximum fs stacking depth exceeded [ 1169.198585][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1169.216466][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1169.243167][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1169.253899][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1169.687416][T14177] loop3: detected capacity change from 0 to 1024 [ 1170.044748][T14032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.008907][T14032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.049720][T14032] bridge_slave_0: entered allmulticast mode [ 1171.537437][ T5842] Bluetooth: hci5: command tx timeout [ 1171.607547][T14184] libceph: resolve ' [ 1171.607547][T14184] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 1171.607547][T14184] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 1171.909806][T14032] bridge_slave_0: entered promiscuous mode [ 1171.948572][T14032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.000657][T14032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.062798][T14032] bridge_slave_1: entered allmulticast mode [ 1172.085751][T14032] bridge_slave_1: entered promiscuous mode [ 1172.156521][ T1157] hfsplus: b-tree write err: -5, ino 4 [ 1173.542099][T14032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.593168][ T5842] Bluetooth: hci5: command tx timeout [ 1175.664244][ T5842] Bluetooth: hci5: command tx timeout [ 1175.670065][T12083] Bluetooth: hci6: command 0x0406 tx timeout [ 1175.686591][T13888] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.187294][T14032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.844116][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.850995][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.630245][T13888] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.681436][T14032] team0: Port device team_slave_0 added [ 1177.983918][T12083] Bluetooth: hci5: command tx timeout [ 1178.156615][T14032] team0: Port device team_slave_1 added [ 1180.276796][T13888] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.677105][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1181.772987][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1181.895733][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1181.906450][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1181.914216][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1181.922927][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1182.732627][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1182.732649][ T29] audit: type=1326 audit(2000000176.250:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.3.2017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37db785d29 code=0x0 [ 1183.083179][ T29] audit: type=1326 audit(2000000176.570:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1183.441748][ T29] audit: type=1326 audit(2000000176.570:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1183.534181][ T29] audit: type=1326 audit(2000000176.570:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1183.557880][ T29] audit: type=1326 audit(2000000176.570:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1183.581863][T13888] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.612409][T14248] loop5: detected capacity change from 0 to 128 [ 1183.620449][T14248] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1183.631199][T14248] sysv_free_block: trying to free block not in datazone [ 1183.638772][T14248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1183.852352][T14248] loop5: detected capacity change from 0 to 32768 [ 1183.871399][T14248] bcachefs (/dev/loop5): error reading superblock: block size (0) smaller than device block size (512) [ 1183.882722][T14248] bcachefs: bch2_fs_get_tree() error: block_size_too_small [ 1183.977905][T14259] loop3: detected capacity change from 0 to 256 [ 1184.001614][T14032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.010916][ T29] audit: type=1326 audit(2000000176.570:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1184.041434][T14259] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1184.068787][T14248] loop5: detected capacity change from 0 to 256 [ 1184.077084][T14032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.129734][ T29] audit: type=1326 audit(2000000176.570:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1184.178176][T14032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.205083][ T29] audit: type=1326 audit(2000000176.570:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1184.228769][T14032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.237966][T14259] tmpfs: Bad value for 'mpol' [ 1184.254982][T14032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.269958][ T29] audit: type=1326 audit(2000000176.570:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1184.345737][T14032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.405935][ T29] audit: type=1326 audit(2000000176.580:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14239 comm="syz.1.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1185.037424][T12083] Bluetooth: hci3: command tx timeout [ 1185.423980][T14032] hsr_slave_0: entered promiscuous mode [ 1185.463197][T14032] hsr_slave_1: entered promiscuous mode [ 1185.642711][T14032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.651527][T14032] Cannot create hsr debugfs directory [ 1186.620639][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2022'. [ 1186.629726][T14275] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1186.958517][T14165] chnl_net:caif_netlink_parms(): no params data found [ 1187.207334][T12083] Bluetooth: hci3: command tx timeout [ 1188.503207][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1188.503231][ T29] audit: type=1326 audit(2000000181.540:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1188.832810][ T29] audit: type=1326 audit(2000000181.540:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1189.442643][ T5842] Bluetooth: hci3: command tx timeout [ 1189.475278][ T29] audit: type=1326 audit(2000000181.640:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1189.619667][ T29] audit: type=1326 audit(2000000181.640:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1189.852728][ T29] audit: type=1326 audit(2000000181.640:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1189.930976][ T29] audit: type=1326 audit(2000000181.740:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1189.962182][ T29] audit: type=1326 audit(2000000181.740:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1190.653834][ T29] audit: type=1326 audit(2000000181.740:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1190.812534][ T29] audit: type=1326 audit(2000000181.840:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6e46185d29 code=0x7ffc0000 [ 1190.910761][ T29] audit: type=1326 audit(2000000181.840:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14276 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1191.884003][ T5842] Bluetooth: hci3: command tx timeout [ 1192.158299][T14304] overlayfs: failed to clone upperpath [ 1192.368481][T14305] xt_l2tp: unknown flags: 10 [ 1196.339528][T14165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.355896][T14165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.368430][T14165] bridge_slave_0: entered allmulticast mode [ 1196.387832][T14165] bridge_slave_0: entered promiscuous mode [ 1196.423924][T14319] bridge0: port 3(erspan0) entered blocking state [ 1196.430911][T14319] bridge0: port 3(erspan0) entered disabled state [ 1197.291555][T14319] erspan0: entered allmulticast mode [ 1197.297994][T14319] erspan0: entered promiscuous mode [ 1197.303857][T14319] bridge0: port 3(erspan0) entered blocking state [ 1197.310341][T14319] bridge0: port 3(erspan0) entered forwarding state [ 1197.438818][T14032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.525930][T14250] chnl_net:caif_netlink_parms(): no params data found [ 1198.127520][T14165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.148434][T14165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.175234][T14165] bridge_slave_1: entered allmulticast mode [ 1198.231395][T14165] bridge_slave_1: entered promiscuous mode [ 1198.356530][T14165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.384473][T14165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.473590][T14165] team0: Port device team_slave_0 added [ 1198.588352][T14032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.634832][T14165] team0: Port device team_slave_1 added [ 1198.741731][ T7589] bridge_slave_1: left allmulticast mode [ 1198.775351][ T7589] bridge_slave_1: left promiscuous mode [ 1198.801209][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.834267][ T7589] bridge_slave_0: left allmulticast mode [ 1198.852790][ T7589] bridge_slave_0: left promiscuous mode [ 1198.873321][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.944658][ T7589] bridge_slave_1: left allmulticast mode [ 1198.961252][ T7589] bridge_slave_1: left promiscuous mode [ 1198.972975][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.011722][ T7589] bridge_slave_0: left allmulticast mode [ 1199.029165][ T7589] bridge_slave_0: left promiscuous mode [ 1199.053052][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.682907][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.747748][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1199.769563][ T7589] bond0 (unregistering): Released all slaves [ 1199.887309][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.977210][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.025014][ T7589] bond0 (unregistering): Released all slaves [ 1200.363081][T14354] loop5: detected capacity change from 0 to 1024 [ 1200.393937][T14354] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1200.450433][T14354] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1200.460251][T14354] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1200.471404][T14354] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.2040: Freeing blocks not in datazone - block = 0, count = 4096 [ 1200.507934][T14354] EXT4-fs (loop5): 1 orphan inode deleted [ 1200.522139][T14354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1200.783207][T14032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.928899][T14165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.937713][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.953934][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.001588][T14165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.030701][T14165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.051170][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.090725][T14165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.283066][T14032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.356608][ T7589] hsr_slave_0: left promiscuous mode [ 1201.379920][ T7589] hsr_slave_1: left promiscuous mode [ 1201.415618][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.436096][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1201.448693][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.508217][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.537003][ T5842] Bluetooth: hci4: unexpected event for opcode 0x041c [ 1206.001148][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1206.826331][T14386] loop5: detected capacity change from 0 to 16 [ 1206.837581][T14384] netlink: 'syz.1.2045': attribute type 3 has an invalid length. [ 1207.478488][T14386] erofs (device loop5): mounted with root inode @ nid 36. [ 1207.495832][T14386] syz.5.2046: attempt to access beyond end of device [ 1207.495832][T14386] loop5: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1208.102206][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1208.644291][ T5842] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1208.680072][T14395] usb usb8: usbfs: process 14395 (syz.5.2048) did not claim interface 0 before use [ 1208.793999][ T5842] Bluetooth: hci4: Injecting HCI hardware error event [ 1208.807054][T12083] Bluetooth: hci4: hardware error 0x00 [ 1208.995616][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1209.018593][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1209.058022][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1209.071896][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1209.084710][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1209.100175][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1209.982746][T14399] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1211.770961][ T5842] Bluetooth: hci1: command tx timeout [ 1211.778497][T12083] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1212.043221][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1213.113438][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1213.129299][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1213.129321][ T29] audit: type=1400 audit(2000000206.650:966): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14420 comm="syz.5.2055" [ 1213.916882][T12083] Bluetooth: hci1: command tx timeout [ 1214.053256][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 1215.131946][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 1216.057806][T12083] Bluetooth: hci1: command tx timeout [ 1216.858825][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 1216.997704][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.022767][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.030122][T14250] bridge_slave_0: entered allmulticast mode [ 1217.044084][T14250] bridge_slave_0: entered promiscuous mode [ 1217.060237][T14165] hsr_slave_0: entered promiscuous mode [ 1217.081216][T14165] hsr_slave_1: entered promiscuous mode [ 1217.106173][T14165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1217.121537][T14165] Cannot create hsr debugfs directory [ 1217.165840][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.191894][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.219971][T14250] bridge_slave_1: entered allmulticast mode [ 1217.248226][T14250] bridge_slave_1: entered promiscuous mode [ 1217.323007][T14447] loop3: detected capacity change from 0 to 1024 [ 1217.431391][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.631863][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.342719][T12083] Bluetooth: hci1: command tx timeout [ 1218.666977][ T7581] hfsplus: b-tree write err: -5, ino 4 [ 1219.722863][T14250] team0: Port device team_slave_0 added [ 1220.727341][T14250] team0: Port device team_slave_1 added [ 1221.738758][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.759535][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.790116][T14468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.796619][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.113234][T14474] Invalid source name [ 1222.117560][T14474] UBIFS error (pid: 14474): cannot open "./file0", error -22 [ 1222.799239][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.934493][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1223.098915][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.202329][T14250] hsr_slave_0: entered promiscuous mode [ 1223.220669][T14250] hsr_slave_1: entered promiscuous mode [ 1223.341212][T14250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.349192][T14250] Cannot create hsr debugfs directory [ 1226.136399][T14393] chnl_net:caif_netlink_parms(): no params data found [ 1227.504528][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1227.514574][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1227.523800][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1227.838358][ T7589] bridge_slave_1: left allmulticast mode [ 1227.841966][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1227.844741][ T7589] bridge_slave_1: left promiscuous mode [ 1227.855909][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1227.857150][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.870501][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1228.400883][ T7589] bridge_slave_0: left allmulticast mode [ 1228.413231][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 1228.422934][ T7589] bridge_slave_0: left promiscuous mode [ 1228.428750][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.487676][ T7589] bridge_slave_1: left allmulticast mode [ 1228.516722][ T7589] bridge_slave_1: left promiscuous mode [ 1229.489662][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.523653][ T7589] bridge_slave_0: left allmulticast mode [ 1229.529458][ T7589] bridge_slave_0: left promiscuous mode [ 1229.535316][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.515426][ T5841] Bluetooth: hci2: command tx timeout [ 1231.191858][T14533] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1231.201429][T14533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2081'. [ 1233.074275][ T5841] Bluetooth: hci2: command tx timeout [ 1234.257063][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.301056][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.592903][T12083] Bluetooth: hci2: command tx timeout [ 1235.727170][ T7589] bond0 (unregistering): Released all slaves [ 1235.955874][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.997715][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.034806][ T7589] bond0 (unregistering): Released all slaves [ 1237.688969][ T5841] Bluetooth: hci2: command tx timeout [ 1237.802701][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.810725][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.976125][T14393] bridge_slave_0: entered allmulticast mode [ 1238.096184][T14393] bridge_slave_0: entered promiscuous mode [ 1238.216284][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.223789][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.389756][ T7589] hsr_slave_0: left promiscuous mode [ 1238.412888][ T7589] hsr_slave_1: left promiscuous mode [ 1238.433811][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.465609][T14577] loop5: detected capacity change from 0 to 64 [ 1238.476763][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.562266][ T7589] hsr_slave_0: left promiscuous mode [ 1238.619081][ T7589] hsr_slave_1: left promiscuous mode [ 1238.635892][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.684249][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.044743][T14591] orangefs_mount: mount request failed with -4 [ 1241.308033][T14593] loop3: detected capacity change from 0 to 2048 [ 1241.408556][T14593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.999389][T12083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1243.011979][T12083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1243.023079][T12083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1243.040546][T12083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1243.052373][T12083] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1243.059907][T12083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1243.106837][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1243.122198][T12076] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1243.250491][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.312211][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1245.156014][T12083] Bluetooth: hci7: command tx timeout [ 1246.817317][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1246.952355][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1247.079449][T14628] loop3: detected capacity change from 0 to 512 [ 1247.187370][T12083] Bluetooth: hci7: command tx timeout [ 1247.310357][T14628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1247.362755][T14628] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.888875][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.971184][T14635] block device autoloading is deprecated and will be removed. [ 1247.981608][T14635] syz.5.2104: attempt to access beyond end of device [ 1247.981608][T14635] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1248.153123][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.191322][T14393] bridge_slave_1: entered allmulticast mode [ 1248.223084][T14393] bridge_slave_1: entered promiscuous mode [ 1248.417272][T14641] loop5: detected capacity change from 0 to 64 [ 1249.642947][T12083] Bluetooth: hci7: command tx timeout [ 1250.325451][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1250.425591][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.644059][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.660877][T14649] loop5: detected capacity change from 0 to 128 [ 1250.703611][T14649] ext4: Unknown parameter 'permit_directio' [ 1251.797410][ T5841] Bluetooth: hci7: command tx timeout [ 1252.032374][T14393] team0: Port device team_slave_0 added [ 1252.368313][T14662] Cannot find add_set index 0 as target [ 1252.935061][T14393] team0: Port device team_slave_1 added [ 1253.320006][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.338251][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.400814][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.444299][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.451896][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.478920][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.774638][T14393] hsr_slave_0: entered promiscuous mode [ 1253.788535][T14393] hsr_slave_1: entered promiscuous mode [ 1253.806039][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1253.828064][T14393] Cannot create hsr debugfs directory [ 1253.899831][T14673] loop5: detected capacity change from 0 to 64 [ 1254.251925][T14511] chnl_net:caif_netlink_parms(): no params data found [ 1255.424941][T14685] fuse: Bad value for 'fd' [ 1259.240053][T14599] chnl_net:caif_netlink_parms(): no params data found [ 1260.080134][T14712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1261.394719][ T7589] bridge_slave_1: left allmulticast mode [ 1261.423834][ T7589] bridge_slave_1: left promiscuous mode [ 1261.442794][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.771081][T14721] Invalid source name [ 1261.775254][T14721] UBIFS error (pid: 14721): cannot open "./file0", error -22 [ 1262.419378][ T7589] bridge_slave_0: left allmulticast mode [ 1262.452768][ T7589] bridge_slave_0: left promiscuous mode [ 1262.460919][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.730092][ T7589] bridge_slave_1: left allmulticast mode [ 1262.748172][ T7589] bridge_slave_1: left promiscuous mode [ 1262.762821][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.784153][ T7589] bridge_slave_0: left allmulticast mode [ 1262.789855][ T7589] bridge_slave_0: left promiscuous mode [ 1262.808967][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.217098][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.229149][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.239689][ T7589] bond0 (unregistering): Released all slaves [ 1263.252085][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.274685][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.289152][ T7589] bond0 (unregistering): Released all slaves [ 1263.301782][T14393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1264.406447][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.363850][T14511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.371262][T14511] bridge_slave_0: entered allmulticast mode [ 1265.412687][T14511] bridge_slave_0: entered promiscuous mode [ 1266.266769][T14736] ceph: No mds server is up or the cluster is laggy [ 1266.320190][ T903] libceph: connect (1)[c::]:6789 error -101 [ 1266.328034][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.337051][ T903] libceph: mon0 (1)[c::]:6789 connect error [ 1266.352730][T14511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.360011][T14511] bridge_slave_1: entered allmulticast mode [ 1266.471087][T14511] bridge_slave_1: entered promiscuous mode [ 1268.674556][T12083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1268.686380][T12083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1269.630404][T12083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1269.638601][T12083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1269.647231][T12083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1269.660013][T12083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1269.708542][T14756] loop3: detected capacity change from 0 to 1024 [ 1270.030170][ T7589] hsr_slave_0: left promiscuous mode [ 1271.043172][ T7589] hsr_slave_1: left promiscuous mode [ 1271.050543][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.061601][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.129972][ T7589] hsr_slave_0: left promiscuous mode [ 1271.169789][ T7589] hsr_slave_1: left promiscuous mode [ 1271.205522][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.220521][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.393316][T14774] loop5: detected capacity change from 0 to 512 [ 1271.733527][ T5841] Bluetooth: hci1: command tx timeout [ 1272.256949][T14774] EXT4-fs (loop5): 1 orphan inode deleted [ 1272.291415][ T6200] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1272.318038][ T6200] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:13: Failed to release dquot type 1 [ 1272.331908][T14774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.396926][T14774] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.487750][T14785] loop3: detected capacity change from 0 to 512 [ 1272.539670][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1272.661229][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1272.709669][T14785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.727262][T14785] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.627889][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.812621][ T5841] Bluetooth: hci1: command tx timeout [ 1274.076490][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 1274.568229][T14803] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2139'. [ 1275.810053][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1276.099563][T14813] loop5: detected capacity change from 0 to 1024 [ 1276.773082][ T5841] Bluetooth: hci1: command tx timeout [ 1276.832781][T14813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1277.457800][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1277.717215][T14818] loop5: detected capacity change from 0 to 256 [ 1278.062867][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.018330][ T5841] Bluetooth: hci1: command tx timeout [ 1280.635809][T14828] xt_CT: No such helper "syz0" [ 1281.541038][T14511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.630658][T14834] loop5: detected capacity change from 0 to 64 [ 1282.053651][T14599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.113235][T14599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.345316][T14599] bridge_slave_0: entered allmulticast mode [ 1282.673786][T14599] bridge_slave_0: entered promiscuous mode [ 1282.698173][T14599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.705423][T14837] loop3: detected capacity change from 0 to 2048 [ 1282.723441][T14837] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1282.734130][T14837] NILFS (loop3): trying rollback from an earlier position [ 1282.741454][T14837] NILFS (loop3): too large filesystem blocksize: 2 ^ 347668480 KiB [ 1282.750023][T14837] NILFS (loop3): error -22 while searching super root [ 1283.692557][T14599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.700154][T14599] bridge_slave_1: entered allmulticast mode [ 1284.055097][T14599] bridge_slave_1: entered promiscuous mode [ 1284.678939][T14511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.824814][T14511] team0: Port device team_slave_0 added [ 1285.844973][T14852] loop3: detected capacity change from 0 to 128 [ 1285.870207][T14599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.947275][T14599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.102260][T14511] team0: Port device team_slave_1 added [ 1288.273846][T14599] team0: Port device team_slave_0 added [ 1288.340738][T14599] team0: Port device team_slave_1 added [ 1288.637869][T14599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.678535][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.747834][T14599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.976718][T14599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.057051][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.083376][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.413828][T14599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.784846][T14599] hsr_slave_0: entered promiscuous mode [ 1290.922144][T14599] hsr_slave_1: entered promiscuous mode [ 1291.012967][T14599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1291.020630][T14599] Cannot create hsr debugfs directory [ 1291.158568][T14867] loop3: detected capacity change from 0 to 8192 [ 1291.438691][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1291.455702][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1291.466612][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1292.283944][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1292.293567][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1292.304097][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1292.539175][T14757] chnl_net:caif_netlink_parms(): no params data found [ 1293.614763][T14906] xt_hashlimit: max too large, truncated to 1048576 [ 1294.683260][T14904] loop3: detected capacity change from 0 to 512 [ 1294.953158][ T5841] Bluetooth: hci2: command tx timeout [ 1296.616934][T14904] EXT4-fs: error -4 creating inode table initialization thread [ 1296.624971][T14904] EXT4-fs (loop3): mount failed [ 1297.122719][ T5842] Bluetooth: hci2: command tx timeout [ 1297.182200][T14923] netlink: 'syz.5.2162': attribute type 1 has an invalid length. [ 1297.190825][T14923] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2162'. [ 1298.238277][T14599] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1298.384950][T14599] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1298.563191][T14757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.572768][T14757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.422671][T14757] bridge_slave_0: entered allmulticast mode [ 1299.438442][ T5841] Bluetooth: hci2: command tx timeout [ 1299.476140][T14757] bridge_slave_0: entered promiscuous mode [ 1299.483520][T14599] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1299.559560][T14885] chnl_net:caif_netlink_parms(): no params data found [ 1299.624193][T14757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.631767][T14757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.639642][T14757] bridge_slave_1: entered allmulticast mode [ 1299.647853][T14757] bridge_slave_1: entered promiscuous mode [ 1299.661311][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.667888][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.769805][T14757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.806402][T14757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.910503][T14757] team0: Port device team_slave_0 added [ 1299.971550][T14757] team0: Port device team_slave_1 added [ 1300.113511][T14942] loop5: detected capacity change from 0 to 16 [ 1300.144673][T14942] erofs (device loop5): mounted with root inode @ nid 36. [ 1300.371182][T14942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.674180][ T5841] Bluetooth: hci2: command tx timeout [ 1303.024475][T14757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.081881][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.362578][T14757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.191825][T14885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.223073][T14885] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.236946][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1304.252678][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1304.266526][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1304.275632][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1304.284871][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1304.296176][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1304.326460][T14885] bridge_slave_0: entered allmulticast mode [ 1304.334035][T14885] bridge_slave_0: entered promiscuous mode [ 1304.344495][T14885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.351895][T14885] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.359993][T14885] bridge_slave_1: entered allmulticast mode [ 1304.367457][T14885] bridge_slave_1: entered promiscuous mode [ 1304.388261][T14757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.400663][T14757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.440526][T14757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.472976][T14964] loop5: detected capacity change from 0 to 256 [ 1304.765078][ T7589] bridge_slave_1: left allmulticast mode [ 1304.906954][T14970] loop5: detected capacity change from 0 to 1024 [ 1304.917326][T14970] EXT4-fs: Ignoring removed orlov option [ 1304.923133][T14970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1305.010444][ T7589] bridge_slave_1: left promiscuous mode [ 1305.062290][T14970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 1305.071611][T14970] System zones: 0-1, 3-36 [ 1305.098826][T14970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1305.207975][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.347034][ T7589] bridge_slave_0: left allmulticast mode [ 1305.368526][ T7589] bridge_slave_0: left promiscuous mode [ 1305.392767][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.434436][ T7589] bridge_slave_1: left allmulticast mode [ 1305.440422][ T7589] bridge_slave_1: left promiscuous mode [ 1305.478490][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.500944][ T7589] bridge_slave_0: left allmulticast mode [ 1305.521058][ T7589] bridge_slave_0: left promiscuous mode [ 1305.529677][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.556304][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.373139][ T5842] Bluetooth: hci3: command tx timeout [ 1306.590219][T14981] loop3: detected capacity change from 0 to 1024 [ 1306.625904][T14981] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1306.634521][T14981] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1306.727679][T14981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.191933][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.362212][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.491176][ T5842] Bluetooth: hci3: command tx timeout [ 1308.594728][ T29] audit: type=1326 audit(2000000302.120:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14991 comm="syz.5.2180" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e46185d29 code=0x0 [ 1308.996770][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.160139][ T7589] bond0 (unregistering): Released all slaves [ 1309.226055][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.309025][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.330751][ T7589] bond0 (unregistering): Released all slaves [ 1310.532785][ T5842] Bluetooth: hci3: command tx timeout [ 1310.540045][T14885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.945670][T14885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.635959][ T7589] hsr_slave_0: left promiscuous mode [ 1311.965771][ T7589] hsr_slave_1: left promiscuous mode [ 1312.001413][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.049329][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.426398][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1312.612884][ T5841] Bluetooth: hci3: command tx timeout [ 1312.619954][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1312.778238][T15015] syz.3.2184: attempt to access beyond end of device [ 1312.778238][T15015] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1312.792234][T15015] qnx6: unable to read the first superblock [ 1312.799651][T15015] syz.3.2184: attempt to access beyond end of device [ 1312.799651][T15015] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1312.813923][T15015] qnx6: unable to read the first superblock [ 1312.820244][T15015] qnx6: unable to read the first superblock [ 1313.928005][T15020] xt_socket: unknown flags 0x50 [ 1315.954767][T15029] slcan: can't register candev [ 1318.511817][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1318.610055][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1319.574989][T14885] team0: Port device team_slave_0 added [ 1319.653629][T14757] hsr_slave_0: entered promiscuous mode [ 1319.694787][T14757] hsr_slave_1: entered promiscuous mode [ 1319.801416][T14757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1319.840174][T14757] Cannot create hsr debugfs directory [ 1320.253974][T14885] team0: Port device team_slave_1 added [ 1320.771962][T14885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.815982][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.842609][ T903] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1320.866359][T14885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.974780][T14885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.002373][T14885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.070312][T14885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.336706][T14885] hsr_slave_0: entered promiscuous mode [ 1321.359757][T14885] hsr_slave_1: entered promiscuous mode [ 1321.367428][T14885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1321.375145][T14885] Cannot create hsr debugfs directory [ 1321.442651][ T903] usb 6-1: Using ep0 maxpacket: 8 [ 1321.486407][ T903] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 1321.503678][ T903] usb 6-1: config 0 has no interface number 0 [ 1321.512577][ T903] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1321.557796][ T903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.571435][ T903] usb 6-1: Product: syz [ 1321.586893][ T903] usb 6-1: Manufacturer: syz [ 1321.602645][ T903] usb 6-1: SerialNumber: syz [ 1321.637718][ T903] usb 6-1: config 0 descriptor?? [ 1321.659625][ T903] as10x_usb: device has been detected [ 1321.674277][ T903] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1322.237230][ T903] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1322.563524][ T903] as10x_usb: error during firmware upload part1 [ 1322.570470][ T903] Registered device PCTV Systems picoStick (74e) [ 1322.602802][ T903] usb 6-1: USB disconnect, device number 6 [ 1322.688546][T15075] loop3: detected capacity change from 0 to 1024 [ 1322.726788][ T903] Unregistered device PCTV Systems picoStick (74e) [ 1322.730089][T15075] EXT4-fs: Ignoring removed nobh option [ 1322.764813][ T903] as10x_usb: device has been disconnected [ 1322.795345][T15075] EXT4-fs: Ignoring removed bh option [ 1322.831471][T14960] chnl_net:caif_netlink_parms(): no params data found [ 1322.919535][T15075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.960072][T15080] loop5: detected capacity change from 0 to 8 [ 1323.269235][T15080] SQUASHFS error: xz decompression failed, data probably corrupt [ 1323.285168][T15080] SQUASHFS error: Failed to read block 0x249: -5 [ 1323.410681][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2200'. [ 1324.137932][ T29] audit: type=1804 audit(2000000770.653:968): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2199" name="/newroot/192/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 1324.164567][T15080] SQUASHFS error: Unable to read metadata cache entry [247] [ 1324.164792][T15080] SQUASHFS error: Unable to read directory block [247:26] [ 1324.341274][T15090] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1324.762824][T15090] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2201'. [ 1324.799548][T15090] SQUASHFS error: Unable to read metadata cache entry [247] [ 1324.826753][T15090] SQUASHFS error: Unable to read directory block [247:26] [ 1324.880630][T14960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.902043][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.929361][T14960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.952740][T14960] bridge_slave_0: entered allmulticast mode [ 1325.001871][T14960] bridge_slave_0: entered promiscuous mode [ 1325.164642][T14960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.175885][T14960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.186414][T14960] bridge_slave_1: entered allmulticast mode [ 1325.194282][T14960] bridge_slave_1: entered promiscuous mode [ 1325.320973][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.358455][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.968734][T14960] team0: Port device team_slave_0 added [ 1326.543096][T14960] team0: Port device team_slave_1 added [ 1326.662617][T14885] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1326.726059][T14885] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1326.762264][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1326.833056][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1326.873737][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1326.886409][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1326.894416][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1326.903224][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1326.926825][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.942545][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.052238][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.087628][T14885] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1327.141331][T14885] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1327.198857][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.212880][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.282832][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.713909][T14960] hsr_slave_0: entered promiscuous mode [ 1327.745639][T14960] hsr_slave_1: entered promiscuous mode [ 1328.043709][T14960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.076418][T14960] Cannot create hsr debugfs directory [ 1329.093838][ T5842] Bluetooth: hci1: command tx timeout [ 1329.262700][ T7589] bridge_slave_1: left allmulticast mode [ 1329.472899][ T7589] bridge_slave_1: left promiscuous mode [ 1329.488850][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.811734][ T7589] bridge_slave_0: left allmulticast mode [ 1330.817598][ T7589] bridge_slave_0: left promiscuous mode [ 1331.003048][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.336561][ T5842] Bluetooth: hci1: command tx timeout [ 1332.390091][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1332.438163][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.683008][ T7589] bond0 (unregistering): Released all slaves [ 1333.412626][ T5842] Bluetooth: hci1: command tx timeout [ 1333.828774][ T7589] hsr_slave_0: left promiscuous mode [ 1333.891121][ T7589] hsr_slave_1: left promiscuous mode [ 1333.913968][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.935155][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.642972][T15154] 9pnet_virtio: no channels available for device syz [ 1334.685015][T15151] input: syz0 as /devices/virtual/input/input22 [ 1335.182327][T15161] 9pnet: Unknown protocol version 9 [ 1336.188927][ T5842] Bluetooth: hci1: command tx timeout [ 1336.312810][ T29] audit: type=1326 audit(2000000782.793:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15160 comm="syz.3.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37db785d29 code=0x0 [ 1336.739096][ T1201] libceph: connect (1)[c::]:6789 error -101 [ 1336.745767][ T1201] libceph: mon0 (1)[c::]:6789 connect error [ 1336.753417][T15164] ceph: No mds server is up or the cluster is laggy [ 1339.772931][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1339.782825][ T1201] hid-generic 0005:7FFF:0008.0006: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1340.423500][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1343.686211][T15213] loop5: detected capacity change from 0 to 128 [ 1344.276398][T15216] loop3: detected capacity change from 0 to 8 [ 1346.548746][T15220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1346.772227][T14885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.795085][T15220] trusted_key: encrypted_key: insufficient parameters specified [ 1348.139200][T14885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.256677][T15228] loop5: detected capacity change from 0 to 8 [ 1348.274641][T15228] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1348.282823][T15228] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1348.298526][T15228] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1348.305494][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.313068][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.319976][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.326325][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.334084][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.340927][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.352314][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.360305][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.367228][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.373599][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.380938][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.387873][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.394618][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.401932][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.408892][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.415202][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.422564][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.429423][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.435713][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.443081][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.449946][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.457200][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.464592][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.471414][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.477724][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.485191][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.493694][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.499934][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.507616][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.514995][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.521426][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.521942][ T29] audit: type=1800 audit(2000000794.813:970): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2236" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1348.529034][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.556740][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.563536][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.570850][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.577717][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.584078][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.591475][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.599257][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.605575][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.612969][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.619805][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.626115][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.633484][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.640431][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.646768][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.654170][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.662086][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.668493][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.675885][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.682805][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.692761][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.701056][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.709303][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.717692][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.725053][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.732484][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.739465][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.746974][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.754709][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.764033][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.771531][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.778152][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.785662][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.792597][T15232] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.800699][T15232] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.807849][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.815413][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.822316][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.828685][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.836158][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.843170][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.849512][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.856971][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.864814][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.871939][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.879453][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.886423][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.892809][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.900294][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.908203][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.941558][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.949330][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.956239][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1348.962744][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1348.971426][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1348.978747][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.044298][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.051714][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.058671][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.064953][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.072895][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.079734][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.086594][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.094093][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.100907][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.107851][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.115242][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.122063][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.128387][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.135806][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.142739][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.148972][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.156307][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.163172][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.169913][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.177731][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.184591][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.190823][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.198191][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.205073][T15228] SQUASHFS error: Failed to read block 0x0: -5 [ 1349.212104][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.219487][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.226504][T15228] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1349.233976][T15228] SQUASHFS error: read_indexes: reading block [6e4:0] [ 1349.676632][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.683886][T10058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.892036][T15104] chnl_net:caif_netlink_parms(): no params data found [ 1350.139380][T15104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.172668][T15104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.180313][T15104] bridge_slave_0: entered allmulticast mode [ 1350.199178][T15104] bridge_slave_0: entered promiscuous mode [ 1350.261963][T15104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.269300][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.279108][T15104] bridge_slave_1: entered allmulticast mode [ 1350.286424][T15104] bridge_slave_1: entered promiscuous mode [ 1350.358121][T15104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.390743][T15104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.400270][T14960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1350.452738][ T7589] bridge_slave_1: left allmulticast mode [ 1350.458570][ T7589] bridge_slave_1: left promiscuous mode [ 1350.481778][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.533282][ T7589] bridge_slave_0: left allmulticast mode [ 1351.553764][ T7589] bridge_slave_0: left promiscuous mode [ 1351.559629][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.773253][T15251] syz.5.2238: attempt to access beyond end of device [ 1351.773253][T15251] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1351.786348][T15251] qnx6: unable to read the first superblock [ 1351.792598][T15251] syz.5.2238: attempt to access beyond end of device [ 1351.792598][T15251] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1351.805524][T15251] qnx6: unable to read the first superblock [ 1351.811476][T15251] qnx6: unable to read the first superblock [ 1353.463201][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.769727][T15261] netlink: 'syz.5.2243': attribute type 3 has an invalid length. [ 1354.028561][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.239182][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.251403][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.261363][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.269101][ T7589] bond0 (unregistering): Released all slaves [ 1354.276094][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.283903][ T5841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1354.300536][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1354.668823][T15104] team0: Port device team_slave_0 added [ 1355.611283][T14960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1356.288549][T15104] team0: Port device team_slave_1 added [ 1356.564776][ T5842] Bluetooth: hci2: command tx timeout [ 1356.607688][ T7589] hsr_slave_0: left promiscuous mode [ 1356.623729][ T7589] hsr_slave_1: left promiscuous mode [ 1356.743750][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.129142][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1358.720816][ T5842] Bluetooth: hci2: command tx timeout [ 1360.780286][ T5842] Bluetooth: hci2: command tx timeout [ 1360.898433][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1360.942025][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1361.095627][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.167847][T14960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1361.243257][T15104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.251924][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.310771][T15104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.350823][T15104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.372951][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.417453][T15104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.888838][T15311] syz.3.2252: attempt to access beyond end of device [ 1361.888838][T15311] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1361.902345][T15311] qnx6: unable to read the first superblock [ 1361.909925][T15311] syz.3.2252: attempt to access beyond end of device [ 1361.909925][T15311] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1361.923558][T15311] qnx6: unable to read the first superblock [ 1361.929629][T15311] qnx6: unable to read the first superblock [ 1362.862738][ T5842] Bluetooth: hci2: command tx timeout [ 1363.682973][T15307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1363.691832][T15307] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1363.703543][T15307] overlayfs: missing 'lowerdir' [ 1364.179138][T15315] netlink: 'syz.1.2254': attribute type 3 has an invalid length. [ 1364.690897][T15104] hsr_slave_0: entered promiscuous mode [ 1365.120163][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1365.193535][T15325] loop3: detected capacity change from 0 to 8 [ 1366.011660][T15104] hsr_slave_1: entered promiscuous mode [ 1366.020113][T15325] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1366.028419][T15325] SQUASHFS error: Failed to read block 0x9b: -5 [ 1366.035409][T15325] SQUASHFS error: Unable to read metadata cache entry [99] [ 1366.042689][T15325] SQUASHFS error: Unable to read inode 0x127 [ 1366.062225][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1366.073730][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1366.082757][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1366.094465][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1366.102148][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1366.141715][T15104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.169852][T15104] Cannot create hsr debugfs directory [ 1366.649329][T15335] netlink: 'syz.5.2256': attribute type 3 has an invalid length. [ 1368.156165][ T5842] Bluetooth: hci3: command tx timeout [ 1370.222668][ T5842] Bluetooth: hci3: command tx timeout [ 1370.375374][T15359] loop5: detected capacity change from 0 to 16 [ 1372.139287][T15359] erofs (device loop5): mounted with root inode @ nid 36. [ 1372.214383][T15359] syz.5.2263: attempt to access beyond end of device [ 1372.214383][T15359] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1372.222637][T15263] chnl_net:caif_netlink_parms(): no params data found [ 1372.242681][T15359] erofs (device loop5): read error -5 @ 8200 of nid 36 [ 1372.294264][ T5842] Bluetooth: hci3: command tx timeout [ 1373.113579][T15365] syz.3.2264: attempt to access beyond end of device [ 1373.113579][T15365] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1373.126699][T15365] qnx6: unable to read the first superblock [ 1373.133491][T15365] syz.3.2264: attempt to access beyond end of device [ 1373.133491][T15365] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1373.146946][T15365] qnx6: unable to read the first superblock [ 1373.153032][T15365] qnx6: unable to read the first superblock [ 1374.485649][T15370] syz.5.2263: attempt to access beyond end of device [ 1374.485649][T15370] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1374.501229][T15370] erofs (device loop5): read error -5 @ 8200 of nid 36 [ 1375.577983][ T5842] Bluetooth: hci3: command tx timeout [ 1375.809375][T15368] syz.5.2263 (15368): drop_caches: 2 [ 1376.624435][T15376] netlink: 'syz.5.2266': attribute type 3 has an invalid length. [ 1377.556684][T15379] support for cryptoloop has been removed. Use dm-crypt instead. [ 1379.388488][T15389] netlink: 'syz.3.2269': attribute type 3 has an invalid length. [ 1381.108199][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.128107][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.179353][T15263] bridge_slave_0: entered allmulticast mode [ 1381.189335][T15263] bridge_slave_0: entered promiscuous mode [ 1381.207017][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.242664][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.260636][T15263] bridge_slave_1: entered allmulticast mode [ 1381.294874][T15263] bridge_slave_1: entered promiscuous mode [ 1382.585292][T15104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1382.598527][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.641933][T15104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1383.675664][T15104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1383.979281][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.893076][T15104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1386.323213][T15430] netlink: 'syz.3.2277': attribute type 3 has an invalid length. [ 1386.860791][T15263] team0: Port device team_slave_0 added [ 1387.789756][T15263] team0: Port device team_slave_1 added [ 1389.290357][T15444] loop3: detected capacity change from 0 to 512 [ 1389.297676][T15444] EXT4-fs: Ignoring removed mblk_io_submit option [ 1389.304327][T15444] ext4: Unknown parameter 'noacl' [ 1389.509035][T15323] chnl_net:caif_netlink_parms(): no params data found [ 1390.780021][T15448] loop3: detected capacity change from 0 to 8192 [ 1390.804687][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.812323][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.857840][T15448] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1390.870875][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.401238][T15453] overlay: Unknown parameter '/' [ 1392.423832][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.441265][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.537799][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1392.557780][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 1392.800104][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1392.820117][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1392.836266][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1392.866790][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1392.877433][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1392.887244][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1392.993667][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.615886][T15467] netlink: 'syz.1.2280': attribute type 3 has an invalid length. [ 1394.934864][ T5841] Bluetooth: hci1: command tx timeout [ 1394.950523][ T5841] Bluetooth: hci6: unexpected event for opcode 0x1001 [ 1395.796978][T15263] hsr_slave_0: entered promiscuous mode [ 1395.826007][T15263] hsr_slave_1: entered promiscuous mode [ 1395.855126][T15263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1395.882595][T15263] Cannot create hsr debugfs directory [ 1395.896311][ T5900] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 1396.250807][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.262755][ T5900] usb 6-1: device descriptor read/64, error -71 [ 1396.453607][T15493] netlink: 'syz.1.2290': attribute type 3 has an invalid length. [ 1396.503540][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.938378][T15323] bridge_slave_0: entered allmulticast mode [ 1396.962912][T15323] bridge_slave_0: entered promiscuous mode [ 1397.151073][ T5841] Bluetooth: hci1: command tx timeout [ 1397.296645][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.321453][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.329207][T15323] bridge_slave_1: entered allmulticast mode [ 1397.340692][ T5900] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1397.348253][T15323] bridge_slave_1: entered promiscuous mode [ 1398.681683][T15505] loop5: detected capacity change from 0 to 2048 [ 1398.886339][T15503] overlayfs: conflicting lowerdir path [ 1399.125437][T15507] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1399.332723][ T5842] Bluetooth: hci1: command tx timeout [ 1399.458347][T15505] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=32, inode=11, rec_len=1024, name_len=6 [ 1399.503733][T15505] Remounting filesystem read-only [ 1399.522072][T15323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.563454][T15323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.583220][T15323] team0: Port device team_slave_0 added [ 1400.611634][T15323] team0: Port device team_slave_1 added [ 1401.205858][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 1401.728067][ T5842] Bluetooth: hci1: command tx timeout [ 1402.563657][T15528] netlink: zone id is out of range [ 1402.608456][T15528] netlink: set zone limit has 4 unknown bytes [ 1402.651465][T15522] loop5: detected capacity change from 0 to 4096 [ 1402.675007][ T7589] bridge_slave_1: left allmulticast mode [ 1402.680733][ T7589] bridge_slave_1: left promiscuous mode [ 1402.708827][T15522] ntfs3: Unknown parameter 'sparså' [ 1402.723252][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.915918][ T7589] bridge_slave_0: left allmulticast mode [ 1402.925349][ T7589] bridge_slave_0: left promiscuous mode [ 1402.933662][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.950596][ T7589] bridge_slave_1: left allmulticast mode [ 1402.958313][ T7589] bridge_slave_1: left promiscuous mode [ 1402.964642][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.167363][T15533] netlink: 'syz.1.2301': attribute type 3 has an invalid length. [ 1403.753653][ T7589] bridge_slave_0: left allmulticast mode [ 1403.782612][ T7589] bridge_slave_0: left promiscuous mode [ 1403.790925][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.350295][T15557] loop3: detected capacity change from 0 to 512 [ 1408.094315][T15557] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1408.158168][T15557] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1408.166573][T15557] EXT4-fs error (device loop3): ext4_init_orphan_info:586: comm syz.3.2307: inode #0: comm syz.3.2307: iget: illegal inode # [ 1408.182643][T15557] EXT4-fs (loop3): get orphan inode failed [ 1408.188789][T15557] EXT4-fs (loop3): mount failed [ 1408.556572][T15563] loop3: detected capacity change from 0 to 16 [ 1408.571907][T15563] erofs (device loop3): mounted with root inode @ nid 36. [ 1408.606120][T15563] syz.3.2309: attempt to access beyond end of device [ 1408.606120][T15563] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1408.627453][T15563] erofs (device loop3): read error -5 @ 8200 of nid 36 [ 1410.032319][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 1414.052357][T15563] syz.3.2309: attempt to access beyond end of device [ 1414.052357][T15563] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1414.083241][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.128314][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.132950][T15563] erofs (device loop3): read error -5 @ 8200 of nid 36 [ 1415.198406][T15575] syz.3.2309 (15575): drop_caches: 2 [ 1415.233090][ T7589] bond0 (unregistering): Released all slaves [ 1416.056086][T15585] loop5: detected capacity change from 0 to 256 [ 1416.097647][T15585] FAT-fs (loop5): Directory bread(block 64) failed [ 1416.104337][T15585] FAT-fs (loop5): Directory bread(block 65) failed [ 1416.110950][T15585] FAT-fs (loop5): Directory bread(block 66) failed [ 1416.117613][T15585] FAT-fs (loop5): Directory bread(block 67) failed [ 1416.124360][T15585] FAT-fs (loop5): Directory bread(block 68) failed [ 1416.130932][T15585] FAT-fs (loop5): Directory bread(block 69) failed [ 1416.138306][T15585] FAT-fs (loop5): Directory bread(block 70) failed [ 1416.145453][T15585] FAT-fs (loop5): Directory bread(block 71) failed [ 1416.152112][T15585] FAT-fs (loop5): Directory bread(block 72) failed [ 1416.158870][T15585] FAT-fs (loop5): Directory bread(block 73) failed [ 1418.228487][T15594] loop3: detected capacity change from 0 to 1024 [ 1418.313689][T15594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.370474][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1418.381893][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1418.397713][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1418.405980][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1418.413884][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1418.424620][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1419.007319][T15607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1420.731013][ T5841] Bluetooth: hci5: command tx timeout [ 1420.763441][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.095171][T15611] loop3: detected capacity change from 0 to 512 [ 1421.107254][T15611] EXT4-fs: Ignoring removed oldalloc option [ 1421.134033][T15611] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1421.144687][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.173211][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.189514][T15611] EXT4-fs (loop3): 1 truncate cleaned up [ 1421.210382][T15611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.234489][ T7589] bond0 (unregistering): Released all slaves [ 1422.625125][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.902752][ T5841] Bluetooth: hci5: command tx timeout [ 1422.938364][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.028182][T15323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.072898][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.200305][T15323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.498506][ T7589] hsr_slave_0: left promiscuous mode [ 1423.924749][T15630] trusted_key: encrypted_key: insufficient parameters specified [ 1425.239796][ T5841] Bluetooth: hci5: command tx timeout [ 1425.250513][ T7589] hsr_slave_1: left promiscuous mode [ 1425.363353][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.406655][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.873396][ T7589] hsr_slave_0: left promiscuous mode [ 1425.972108][T15642] input: syz1 as /devices/virtual/input/input23 [ 1426.776230][ T7589] hsr_slave_1: left promiscuous mode [ 1426.804587][T15642] input: failed to attach handler evdev to device input23, error: -4 [ 1426.962837][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.007870][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1427.019628][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1427.031141][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1427.043481][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1427.071366][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.099596][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1427.107725][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1427.342687][ T5841] Bluetooth: hci5: command tx timeout [ 1429.172590][ T5841] Bluetooth: hci2: command tx timeout [ 1429.398413][T15661] netlink: 'syz.5.2327': attribute type 3 has an invalid length. [ 1429.622991][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1429.942947][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1430.287378][T15666] netlink: 'syz.1.2328': attribute type 3 has an invalid length. [ 1430.915727][T15669] loop5: detected capacity change from 0 to 8 [ 1431.459326][ T5841] Bluetooth: hci2: command tx timeout [ 1433.413662][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1433.514474][ T5841] Bluetooth: hci2: command tx timeout [ 1433.982695][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1435.211079][T15691] loop3: detected capacity change from 0 to 8 [ 1435.245488][T15691] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1435.813259][ T5841] Bluetooth: hci2: command tx timeout [ 1436.024563][T15696] cramfs: Error -3 while decompressing! [ 1436.030845][T15696] cramfs: ffffffff9a4fc438(27)->ffff8880477aa000(4096) [ 1436.038072][T15696] cramfs: Error -3 while decompressing! [ 1436.044104][T15696] cramfs: ffffffff9a4fc438(27)->ffff8880477aa000(4096) [ 1436.308640][ T29] audit: type=1800 audit(2000000882.573:971): pid=15696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2335" name="file0" dev="loop3" ino=244 res=0 errno=0 [ 1436.775185][T15459] chnl_net:caif_netlink_parms(): no params data found [ 1437.075800][T15709] loop5: detected capacity change from 0 to 512 [ 1437.338472][T15709] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1437.343753][T15709] EXT4-fs (loop5): invalid journal inode [ 1437.343830][T15709] EXT4-fs (loop5): can't get journal size [ 1437.363837][T15709] EXT4-fs (loop5): 1 truncate cleaned up [ 1437.364844][T15709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.889111][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.926726][T15647] chnl_net:caif_netlink_parms(): no params data found [ 1439.958211][T15459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.958286][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.958510][T15459] bridge_slave_0: entered allmulticast mode [ 1439.959756][T15459] bridge_slave_0: entered promiscuous mode [ 1439.962129][T15459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.962199][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.962364][T15459] bridge_slave_1: entered allmulticast mode [ 1439.963457][T15459] bridge_slave_1: entered promiscuous mode [ 1440.229324][T15459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.853977][T15736] netlink: 'syz.1.2340': attribute type 3 has an invalid length. [ 1441.274894][T15459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.698453][T15459] team0: Port device team_slave_0 added [ 1443.378715][T15459] team0: Port device team_slave_1 added [ 1443.808613][T15756] loop3: detected capacity change from 0 to 1024 [ 1443.822165][T15596] chnl_net:caif_netlink_parms(): no params data found [ 1443.831227][T15756] hfsplus: xattr searching failed [ 1443.903200][T15459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.942149][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1444.078346][T15459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.097946][T15647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.113599][T15647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.131978][T15647] bridge_slave_0: entered allmulticast mode [ 1444.149706][T15647] bridge_slave_0: entered promiscuous mode [ 1444.171742][T15647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.188321][T15647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.461668][T15647] bridge_slave_1: entered allmulticast mode [ 1444.601504][T15647] bridge_slave_1: entered promiscuous mode [ 1444.902768][T15459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.936657][T15459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.024787][T15459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.072530][T15769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2348'. [ 1445.148310][T15770] loop5: detected capacity change from 0 to 64 [ 1445.216870][T15647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.239194][T15647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.785150][T15459] hsr_slave_0: entered promiscuous mode [ 1445.820510][T15459] hsr_slave_1: entered promiscuous mode [ 1445.867694][T15459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.897179][T15459] Cannot create hsr debugfs directory [ 1446.798300][T15596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.839212][T15596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.871789][T15596] bridge_slave_0: entered allmulticast mode [ 1446.894647][T15596] bridge_slave_0: entered promiscuous mode [ 1446.924164][T15596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.942482][T15596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.957092][T15596] bridge_slave_1: entered allmulticast mode [ 1447.195382][T15783] hub 9-0:1.0: USB hub found [ 1447.204566][T15783] hub 9-0:1.0: 1 port detected [ 1447.220970][T15783] ptrace attach of "./syz-executor exec"[12076] was attempted by "./syz-executor exec"[15783] [ 1447.800983][T15596] bridge_slave_1: entered promiscuous mode [ 1448.586316][T15647] team0: Port device team_slave_0 added [ 1448.596590][T15647] team0: Port device team_slave_1 added [ 1448.698314][T15596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.887266][T15596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.981126][T15789] netlink: 'syz.3.2352': attribute type 3 has an invalid length. [ 1452.422024][T15647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.441224][T15647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.545201][T15808] netlink: 'syz.3.2355': attribute type 39 has an invalid length. [ 1453.552986][T15647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.354074][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1455.445587][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1455.467273][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1455.494564][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1455.534699][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1455.543159][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1455.615964][T15647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.617169][T15826] loop3: detected capacity change from 0 to 256 [ 1455.639038][T15826] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1455.651114][T15647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.679856][T15826] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1455.731829][T15828] x_tables: unsorted underflow at hook 3 [ 1455.757496][ T29] audit: type=1800 audit(2000000901.241:972): pid=15826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2360" name="bus" dev="loop3" ino=1048763 res=0 errno=0 [ 1455.809089][T15647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.895708][T15596] team0: Port device team_slave_0 added [ 1455.924144][T15596] team0: Port device team_slave_1 added [ 1455.969679][T15831] xt_hashlimit: max too large, truncated to 1048576 [ 1456.044505][T15831] 9pnet_fd: Insufficient options for proto=fd [ 1456.222340][T15647] hsr_slave_0: entered promiscuous mode [ 1456.229185][T15647] hsr_slave_1: entered promiscuous mode [ 1456.235521][T15647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.247242][T15647] Cannot create hsr debugfs directory [ 1456.465636][T15596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.475260][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.502443][T15596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.772106][T15840] loop5: detected capacity change from 0 to 512 [ 1457.520949][T15596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.528528][T15596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.785650][ T5842] Bluetooth: hci1: command tx timeout [ 1457.831610][T15596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.886217][T15840] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1457.897026][T15840] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1457.909887][T15840] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1457.921095][T15840] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1457.942153][T15840] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1457.983711][T15840] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2364: bg 0: block 40: padding at end of block bitmap is not set [ 1458.003664][T15840] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1458.020950][T15840] EXT4-fs (loop5): 1 truncate cleaned up [ 1458.033003][T15840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1458.147699][T15840] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.2364: bad symlink. [ 1458.594003][ T9483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.834381][T15855] loop5: detected capacity change from 0 to 16 [ 1459.850029][T15855] erofs (device loop5): mounted with root inode @ nid 36. [ 1460.118924][ T5842] Bluetooth: hci1: command tx timeout [ 1460.160224][T15596] hsr_slave_0: entered promiscuous mode [ 1460.167520][T15596] hsr_slave_1: entered promiscuous mode [ 1460.634355][T15596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1460.689071][T15596] Cannot create hsr debugfs directory [ 1461.193890][T15866] loop3: detected capacity change from 0 to 512 [ 1461.257216][T15866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1461.284496][T15821] chnl_net:caif_netlink_parms(): no params data found [ 1461.303973][T15866] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.445629][ T7589] bridge_slave_1: left allmulticast mode [ 1461.461823][ T7589] bridge_slave_1: left promiscuous mode [ 1461.602849][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.022302][ T7589] bridge_slave_0: left allmulticast mode [ 1462.028067][ T7589] bridge_slave_0: left promiscuous mode [ 1462.883203][ T5842] Bluetooth: hci1: command tx timeout [ 1462.921274][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.133521][ T7589] bridge_slave_1: left allmulticast mode [ 1463.139254][ T7589] bridge_slave_1: left promiscuous mode [ 1463.154976][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.164705][ T7589] bridge_slave_0: left allmulticast mode [ 1463.170461][ T7589] bridge_slave_0: left promiscuous mode [ 1463.317788][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.346398][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1463.359267][ T7589] bridge_slave_1: left allmulticast mode [ 1463.365549][ T7589] bridge_slave_1: left promiscuous mode [ 1463.386095][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.341604][ T7589] bridge_slave_0: left allmulticast mode [ 1464.347322][ T7589] bridge_slave_0: left promiscuous mode [ 1464.365874][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.454273][T15887] loop3: detected capacity change from 0 to 2048 [ 1464.493081][T15887] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1464.506721][T15887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1464.586275][T15890] SET target dimension over the limit! [ 1464.655509][ T29] audit: type=1804 audit(2000000909.566:973): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2376" name="/newroot/404/file0" dev="9p" ino=2 res=1 errno=0 [ 1464.902237][T15892] loop3: detected capacity change from 0 to 8192 [ 1465.045574][ T5842] Bluetooth: hci1: command tx timeout [ 1465.833730][T15898] loop5: detected capacity change from 0 to 8 [ 1465.900776][T15898] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1465.908977][T15898] SQUASHFS error: Failed to read block 0x9b: -5 [ 1465.915431][T15898] SQUASHFS error: Unable to read metadata cache entry [99] [ 1465.922763][T15898] SQUASHFS error: Unable to read inode 0x127 [ 1466.397953][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.429913][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.558898][ T7589] bond0 (unregistering): Released all slaves [ 1466.808342][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.058771][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.079188][ T7589] bond0 (unregistering): Released all slaves [ 1467.105392][ T7589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.145927][ T7589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.188375][ T7589] bond0 (unregistering): Released all slaves [ 1467.341241][T15912] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1467.348598][T15912] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1468.754772][ T5894] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1468.796525][ T5894] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1469.204250][ T5900] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1469.250791][T15909] team0 (unregistering): left promiscuous mode [ 1469.279234][T15909] team0 (unregistering): Port device @ removed [ 1469.355201][ T5900] usb 4-1: device descriptor read/64, error -71 [ 1469.805933][ T5900] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1470.855087][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.265067][ T5900] usb 4-1: device descriptor read/64, error -71 [ 1471.663231][ T5900] usb usb4-port1: attempt power cycle [ 1472.956753][ T7589] hsr_slave_0: left promiscuous mode [ 1473.281697][ T7589] hsr_slave_1: left promiscuous mode [ 1473.758832][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.815308][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.862110][ T7589] hsr_slave_0: left promiscuous mode [ 1474.133760][ T7589] hsr_slave_1: left promiscuous mode [ 1474.142945][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.161076][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1475.490628][ T29] audit: type=1326 audit(2000000919.537:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15953 comm="syz.3.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37db785d29 code=0x7fc00000 [ 1476.007181][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1476.085516][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1476.460595][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1476.518595][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1477.047127][T15964] loop3: detected capacity change from 0 to 512 [ 1477.098553][T15964] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1477.140623][T15964] EXT4-fs (loop3): invalid journal inode [ 1477.188240][T15964] EXT4-fs (loop3): can't get journal size [ 1477.246876][T15964] EXT4-fs (loop3): 1 truncate cleaned up [ 1477.258273][ T7589] team0 (unregistering): Port device team_slave_1 removed [ 1477.516198][T15964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.469024][ T7589] team0 (unregistering): Port device team_slave_0 removed [ 1479.681929][T12076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.655061][T15982] input: syz1 as /devices/virtual/input/input24 [ 1480.917963][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1480.965187][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1481.034145][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1481.359934][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1481.374693][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1481.389440][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1481.625695][T16002] loop5: detected capacity change from 0 to 16 [ 1482.544218][T16002] erofs (device loop5): mounted with root inode @ nid 36. [ 1482.790804][T16002] syz.5.2402: attempt to access beyond end of device [ 1482.790804][T16002] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1482.845732][T16002] erofs (device loop5): read error -5 @ 8200 of nid 36 [ 1483.883772][T16008] syz.5.2402: attempt to access beyond end of device [ 1483.883772][T16008] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1483.897531][T16008] erofs (device loop5): read error -5 @ 8200 of nid 36 [ 1484.188128][ T5841] Bluetooth: hci3: command tx timeout [ 1484.394264][T16006] syz.5.2402 (16006): drop_caches: 2 [ 1485.574027][T15821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.586243][ T29] audit: type=1326 audit(2000000929.153:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9ef85d29 code=0x7fc00000 [ 1486.865224][ T5842] Bluetooth: hci3: command tx timeout [ 1486.881597][T15821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.036542][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.066526][T15821] bridge_slave_0: entered allmulticast mode [ 1487.098009][T15821] bridge_slave_0: entered promiscuous mode [ 1488.415256][T15821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.422671][T15821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.455387][T15821] bridge_slave_1: entered allmulticast mode [ 1488.479771][T15821] bridge_slave_1: entered promiscuous mode [ 1489.046968][T16032] fuse: Bad value for 'fd' [ 1489.078078][ T5842] Bluetooth: hci3: command tx timeout [ 1489.093090][T15821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.234442][T15821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.454434][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1489.468615][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1489.479152][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1489.491378][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1489.505545][ T5841] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1489.513193][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1490.924557][T15821] team0: Port device team_slave_0 added [ 1491.376790][T16047] overlayfs: missing 'lowerdir' [ 1491.723559][ T5842] Bluetooth: hci3: command tx timeout [ 1491.857909][ T5842] Bluetooth: hci7: command tx timeout [ 1492.311754][T16049] loop3: detected capacity change from 0 to 8 [ 1493.450951][T16052] loop5: detected capacity change from 0 to 32768 [ 1493.486731][T16059] netlink: 'syz.1.2412': attribute type 3 has an invalid length. [ 1493.858957][T16052] JBD2: Ignoring recovery information on journal [ 1493.933089][T15821] team0: Port device team_slave_1 added [ 1493.960843][T16052] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1494.039249][ T5841] Bluetooth: hci7: command tx timeout [ 1496.595429][ T5841] Bluetooth: hci7: command tx timeout [ 1496.611586][ T29] audit: type=1326 audit(2000000939.022:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm="syz.3.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37db785d29 code=0x7fc00000 [ 1496.668560][T15821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.675833][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.725842][ T9483] ocfs2: Unmounting device (7,5) on (node local) [ 1496.814459][T15821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.869296][T15821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.877606][T15821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.903776][T15821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.035751][T15821] hsr_slave_0: entered promiscuous mode [ 1497.106728][T15821] hsr_slave_1: entered promiscuous mode [ 1497.128713][T15821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1497.136317][T15821] Cannot create hsr debugfs directory [ 1497.198817][T15992] chnl_net:caif_netlink_parms(): no params data found [ 1498.802158][ T5841] Bluetooth: hci7: command tx timeout [ 1500.096259][T16086] loop3: detected capacity change from 0 to 8192 [ 1500.922534][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.930599][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.998353][T15992] bridge_slave_0: entered allmulticast mode [ 1501.005845][T15992] bridge_slave_0: entered promiscuous mode [ 1501.075141][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.097329][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.104706][T15992] bridge_slave_1: entered allmulticast mode [ 1501.127196][T15992] bridge_slave_1: entered promiscuous mode [ 1501.422992][T16112] netlink: 'syz.3.2424': attribute type 3 has an invalid length. [ 1501.545905][ T0] ================================================================== [ 1501.554047][ T0] BUG: KASAN: wild-memory-access in __lock_acquire+0xc94/0x2100 [ 1501.561729][ T0] Read of size 8 at addr 1fffffff8c8f6558 by task swapper/1/0 [ 1501.569315][ T0] [ 1501.571653][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 1501.581656][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1501.591911][ T0] Call Trace: [ 1501.595287][ T0] [ 1501.598230][ T0] dump_stack_lvl+0x241/0x360 [ 1501.603119][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.608359][ T0] ? __pfx__printk+0x10/0x10 [ 1501.612982][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.618649][ T0] ? _printk+0xd5/0x120 [ 1501.622841][ T0] print_report+0xe8/0x550 [ 1501.627286][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.632954][ T0] ? __virt_addr_valid+0x58/0x530 [ 1501.638021][ T0] ? __lock_acquire+0xc94/0x2100 [ 1501.642995][ T0] kasan_report+0x143/0x180 [ 1501.647538][ T0] ? __lock_acquire+0xc94/0x2100 [ 1501.652512][ T0] kasan_check_range+0x282/0x290 [ 1501.657499][ T0] __lock_acquire+0xc94/0x2100 [ 1501.662307][ T0] lock_acquire+0x1ed/0x550 [ 1501.666843][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1501.672416][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 1501.677471][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.683838][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1501.690026][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.695691][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1501.700933][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1501.706526][ T0] _raw_spin_lock_nested+0x31/0x40 [ 1501.711679][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1501.717250][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 1501.722645][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1501.728220][ T0] sched_core_balance+0xd87/0xf50 [ 1501.733361][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.739024][ T0] ? sched_core_balance+0xce/0xf50 [ 1501.744167][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1501.749837][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.755506][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1501.761093][ T0] __balance_callbacks+0x18a/0x280 [ 1501.766248][ T0] finish_task_switch+0x1d3/0x870 [ 1501.771312][ T0] __schedule+0x1858/0x4c30 [ 1501.775853][ T0] ? tick_nohz_idle_exit+0x293/0x480 [ 1501.781166][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 1501.787451][ T0] ? __pfx___schedule+0x10/0x10 [ 1501.792345][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 1501.798011][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.803693][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 1501.809899][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1501.815596][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.821260][ T0] schedule_idle+0x56/0x90 [ 1501.825714][ T0] do_idle+0x567/0x5c0 [ 1501.829815][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1501.836176][ T0] ? __pfx_do_idle+0x10/0x10 [ 1501.840787][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1501.846035][ T0] cpu_startup_entry+0x42/0x60 [ 1501.850824][ T0] start_secondary+0x102/0x110 [ 1501.855607][ T0] common_startup_64+0x13e/0x147 [ 1501.860580][ T0] [ 1501.863604][ T0] ================================================================== [ 1501.872194][ T0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1501.879395][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-syzkaller-01005-gb9d8a295ed6b #0 [ 1501.889394][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1501.899474][ T0] Call Trace: [ 1501.902771][ T0] [ 1501.905717][ T0] dump_stack_lvl+0x241/0x360 [ 1501.910451][ T0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.915770][ T0] ? __pfx__printk+0x10/0x10 [ 1501.920412][ T0] ? rcu_is_watching+0x15/0xb0 [ 1501.925206][ T0] ? lock_release+0xbf/0xa30 [ 1501.929819][ T0] ? common_startup_64+0x13e/0x147 [ 1501.934969][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.940724][ T0] ? vscnprintf+0x5d/0x90 [ 1501.945098][ T0] panic+0x349/0x880 [ 1501.949032][ T0] ? check_panic_on_warn+0x21/0xb0 [ 1501.954261][ T0] ? __pfx_panic+0x10/0x10 [ 1501.958797][ T0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1501.964023][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.969782][ T0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1501.975805][ T0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1501.982172][ T0] ? print_report+0xe8/0x550 [ 1501.986797][ T0] check_panic_on_warn+0x86/0xb0 [ 1501.991768][ T0] ? __lock_acquire+0xc94/0x2100 [ 1501.996735][ T0] end_report+0x77/0x160 [ 1502.001046][ T0] kasan_report+0x154/0x180 [ 1502.005662][ T0] ? __lock_acquire+0xc94/0x2100 [ 1502.010640][ T0] kasan_check_range+0x282/0x290 [ 1502.015624][ T0] __lock_acquire+0xc94/0x2100 [ 1502.020519][ T0] lock_acquire+0x1ed/0x550 [ 1502.025146][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1502.030727][ T0] ? __pfx_lock_acquire+0x10/0x10 [ 1502.035809][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1502.042270][ T0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1502.048472][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1502.054142][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1502.059389][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1502.064978][ T0] _raw_spin_lock_nested+0x31/0x40 [ 1502.070136][ T0] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 1502.075978][ T0] raw_spin_rq_lock_nested+0xb0/0x140 [ 1502.081386][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1502.086974][ T0] sched_core_balance+0xd87/0xf50 [ 1502.092037][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1502.097803][ T0] ? sched_core_balance+0xce/0xf50 [ 1502.102960][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1502.108638][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1502.114308][ T0] ? __pfx_sched_core_balance+0x10/0x10 [ 1502.119884][ T0] __balance_callbacks+0x18a/0x280 [ 1502.125042][ T0] finish_task_switch+0x1d3/0x870 [ 1502.130363][ T0] __schedule+0x1858/0x4c30 [ 1502.134896][ T0] ? tick_nohz_idle_exit+0x293/0x480 [ 1502.140206][ T0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 1502.146482][ T0] ? __pfx___schedule+0x10/0x10 [ 1502.151370][ T0] ? tick_nohz_idle_exit+0x36e/0x480 [ 1502.156848][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1502.162508][ T0] ? flush_smp_call_function_queue+0x142/0x2a0 [ 1502.168700][ T0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 1502.174535][ T0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1502.180196][ T0] schedule_idle+0x56/0x90 [ 1502.184644][ T0] do_idle+0x567/0x5c0 [ 1502.188771][ T0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1502.195133][ T0] ? __pfx_do_idle+0x10/0x10 [ 1502.199744][ T0] ? lockdep_hardirqs_on+0x99/0x150 [ 1502.204993][ T0] cpu_startup_entry+0x42/0x60 [ 1502.209788][ T0] start_secondary+0x102/0x110 [ 1502.214575][ T0] common_startup_64+0x13e/0x147 [ 1502.219555][ T0] [ 1502.222734][ T0] Kernel Offset: disabled [ 1502.227068][ T0] Rebooting in 86400 seconds..