last executing test programs: 20m31.059437145s ago: executing program 32 (id=15): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x80100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000001280)) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba", 0x15) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$eJzs3V1sXOlZB/DnnWOvHW9pvd0220K3jFTURi6J8tXEVVDldF1DpTRb1XFhr+rxR9LROnZkOzRboDKggsRNxd4gbpBFWYHUC65YLnHpIrVCSKjqRblAskS72gsufFEJAdpOdc68Y48dJ/Em64/s/n4r7//MmeeM34/xmWMpr08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGf/dzl02fSYbcCADhIV8e/dPpcinAJAADvHtf8/g8AAAAAAAAAAAAAAEddiiKOR4qBVzfSZGwtA+y/0py/fWdidGz3w46lSFGLoqovv/rPnD13/lMXLg538v7Hv90+HM+PX7tcf27h5q3F2aWl2Zn6xHxzemFmds+v8KjH7zRUDUD95ou3Z65fX6qfPXVu29N3Bl/ve/L44KWLJy8Md2onRsfGxrtqenof+rvf5V4rPJ6IIhqR4s3BN1IjImrx6GPxgPfOfjtWdWKo6sTE6FjVkblmY365fDLVclUtot510EhnjA5gLh7JSMRK2fyywUNl98ZvNRYbU3Oz9S82Fpeby82F+VRrt7bsTz1qMZwiViNive/ul+uNIj4aKV4+vZGmIqLojMMnq4XBD25PbR/6uAdlO+u9Eau1x2DOjrC+KOJqpPjZaydiuhyz/BUfj/hCma9GvFLmZyJS+cY4H/HTXd5HPJ56ooh/ixQLaSPNVOeDznnlypfrn5+/vtBV2zmvPPafDwfpiJ+b+qOIqeqMv5Ee/mIHAAAAAAAAAAAAAAAAgLfbsSji25Hij5/93WpdcVTr0t93afg9L/xm95rxZx7wOmXtqYhYqe1tTW5vXjqcauV/D938337oI6n0RxHfyOv//vCwGwMAAAAAAAAAAAAAAAAAAPCuVsQLkeIrJ0+k1ei+p3hz/kb9WmNqrn1X2M69fzv3TG+1Wq16audIzsmcKzlXc67lXM8ZtXx8zpGckzlXcq7mXMu5njOKfHzOkZyTOVdyruZcy7meM3ry8TlHck7mXMm5mnMt53rOOCL37gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCepRRE/jxTf+tpGihQRIxGT0c61vsNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FnIoUay/0V49XaxHXIuLnrVar+vrfVqsVsVFuP6rD7isAAAAAAAAAAAAAAAAAAAAcWamIj0WKp/9vI9Uj4s7g631PHh+8dPHkheEiikhlSXf98+PXLtefW7h5a3F2aWl2pj4x35xemJnd67frv9Kcv31nYnRsXzrzQMf2uf3H+p9buPXSYvPGV5d3fX6g//LU0vJiY3r3p+NY1CImu/cMVQ2eGB2rGj3XbMxXh6baPRpYixjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+LFD/5z/Ops268p73m/5faj4rN2ld+f+tvAcztyI7uvx+wl+2014YOVQvv6xOjY2PjXbt7eu8uLduUUhHPRIpPvPyhaj18ioFd18aXde8t626ez3WDv1LWrWyr6h+aGB2rX12YP3l5bm5hurHcmJqbrY/fakzv+Q8HAAAAAAAAAAAAAAAAAAAAwH0MpCJ+FCn+++/+PXXuO5/X//e0H3Wt//+Nagl9pT9tz03V2v73Vmv729vvuzQ88NFn77V/P9b/l21KqYhvRopzP/pQdT/9zvr/yR21Zd2fRoo3nv1Irqs9UdY1Ot1pv+L15tzs6bL2ryLFr77ZqY2q9kaufXqr9kxZeyxS/MXG9tqv5toPbNWeLWtPRIrv/dfutR/cqj1X1v4kUvzj39Y7tQNl7e/l2uNbtaemF+ZmHjSs5fx/J1L8zdXfSp0+33P+u/7+w8qO3HTXnN9/++2a/8GufSt5Xv8kz3/jAfN/IVJ8p/8jua499lP5+aeq/2/N/ycixX/86/ba67n2/Vu1Z/barcNWzv+3I8V3//LHm33O859HdmuGuuf/l3u25+a75JDm/6mufYO5XdNvcSzejZZe+vqLjbm52UUb99nIb/I4Ku2xYWO/Nw75xMSBKD///yxS/P/xInWuY/Ln/3vaj7au//7nG1uf/5d25KZD+vx/f9e+S/mqpbcnon/55q3eZyL6l176+snmzcaN2Ruz82fPnP70py+cOX3mQu8TnYu7ra09j907QTn/P4gUP/z7H27+HrP9+m/36/+BHbnpkOb/6e4+bbuu2fNQvCuV8//XkeKpz/548/fN+13/d37/P/Gx7bn583dI8/+Brn2DuV3NtzgWAAAAAAAAAAAAj5OBVMSfR4rf+aNfT501RHv5938zO3LTIf37r+Nd+2YOaF3DngcZAOAIKa//Phgp/qn1/c213Nuv/+LXOrXd13/3chTu/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+7FEX8QaQYeHUjrfWVj9v6rzTnb9+ZGB3b/bBjKVLUoqjqy6/+M2fPnf/UhYvDnbzSd5Dd+HA8P37tcv25hZu3FmeXlmZn6hPzzemFmdk9v8KjHr/TUDWA9Zsv3p65fn2pfvbUufb+VjvuDL7e9+TxwUsXT14Y7tROjI6NjXe9RE/vQ3/3u6R77H8iivh+pHhz8I303b6IWjz6WDzgvbPfjlWdGKo6MTE6VnVkrtmYXy6fTLVcVYuodx000hmjA5iLRzISsVI2v2zwUNm98VuNxcbU3Gz9i43F5eZyc2E+1dqtLftTj1oMp4jViFjf5UeyN4r4ZqR4+fRG+ue+iKIzDp+8Ov6l0+ce3J7aPvRxD8p21nsjVmuPwZwdYX1RxD9Eip+9diK+1xfRE+2v+HjEF8p8NeKVMj8Tkco3xvmInx7oqZ391BNFnI8UC2kjvdZXng8655UrX65/fv76Qldt57zy2H8+HKQjfm7qjyJ+UJ3xN9K/7Pi5Lg6rUQAAAAAAAAAAAAAAAABUq7xWI8VXTp5I1frgzTXFzfkb9WuNqbn2sr7O2r/OmulWq9Wqp3aO5JzMuZJzNedazvWcUcvH5xzJOZlzJedqzrWc6zmjyMfnHMk5mXMl52rOtZzrOaMnH59zJOdkzpWcqznXcq7njCOydg8AAAAAAAAAAAAAAAAAAHhnqUVR3cX9W1/bSK2+9v2lJ6Oda+7z+473iwAAAP//u01xPQ==") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r2], 0x5, 0x5ea, &(0x7f0000001400)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r4 = open(0x0, 0x100000, 0x0) flock(r4, 0x1) syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001b40)) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2008800, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 20m19.015283067s ago: executing program 33 (id=30): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000001980)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f000001a980)={0x0, 0xfffffffffffffea3, &(0x7f000001a9c0)={&(0x7f000001aa00)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f000001aa80)={0x0, 0x0, &(0x7f000001aac0)={&(0x7f000001ab00)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 20m9.308149986s ago: executing program 4 (id=52): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x284}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 20m6.057387381s ago: executing program 4 (id=55): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000001980)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f000001a980)={0x0, 0xfffffffffffffea3, &(0x7f000001a9c0)={&(0x7f000001aa00)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 19m58.755165065s ago: executing program 4 (id=60): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x80100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000001280)) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba", 0x15) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r2], 0x5, 0x5ea, &(0x7f0000001400)="$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") r4 = open(0x0, 0x100000, 0x0) flock(r4, 0x1) syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001b40)) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2008800, 0x0) rmdir(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x6, &(0x7f0000001180)=ANY=[@ANYBLOB="05000000000000007311370000000005000000000000000085000000050000009500000000001d009500a50500000000ee40d60e7d581d454e5e2068fbaa71921ed4dce15f0a3762aa0f1e798b7bc20a9d6c004f1b198f38de23425e69662c63330deb245797b2952648766bc38bc0127530724110def0a90252d7c84772d9d619399a6256152d4440c0593eec743c148697ce5e828b7b63c720a27f4d424357ebaf0b9c5b33d265"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 19m46.951899626s ago: executing program 4 (id=69): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x80100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000001280)) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba", 0x15) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$eJzs3V1sXOlZB/DnnWOvHW9pvd0220K3jFTURi6J8tXEVVDldF1DpTRb1XFhr+rxR9LROnZkOzRboDKggsRNxd4gbpBFWYHUC65YLnHpIrVCSKjqRblAskS72gsufFEJAdpOdc68Y48dJ/Em64/s/n4r7//MmeeM34/xmWMpr08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGf/dzl02fSYbcCADhIV8e/dPpcinAJAADvHtf8/g8AAAAAAAAAAAAAAEddiiKOR4qBVzfSZGwtA+y/0py/fWdidGz3w46lSFGLoqovv/rPnD13/lMXLg538v7Hv90+HM+PX7tcf27h5q3F2aWl2Zn6xHxzemFmds+v8KjH7zRUDUD95ou3Z65fX6qfPXVu29N3Bl/ve/L44KWLJy8Md2onRsfGxrtqenof+rvf5V4rPJ6IIhqR4s3BN1IjImrx6GPxgPfOfjtWdWKo6sTE6FjVkblmY365fDLVclUtot510EhnjA5gLh7JSMRK2fyywUNl98ZvNRYbU3Oz9S82Fpeby82F+VRrt7bsTz1qMZwiViNive/ul+uNIj4aKV4+vZGmIqLojMMnq4XBD25PbR/6uAdlO+u9Eau1x2DOjrC+KOJqpPjZaydiuhyz/BUfj/hCma9GvFLmZyJS+cY4H/HTXd5HPJ56ooh/ixQLaSPNVOeDznnlypfrn5+/vtBV2zmvPPafDwfpiJ+b+qOIqeqMv5Ee/mIHAAAAAAAAAAAAAAAAgLfbsSji25Hij5/93WpdcVTr0t93afg9L/xm95rxZx7wOmXtqYhYqe1tTW5vXjqcauV/D938337oI6n0RxHfyOv//vCwGwMAAAAAAAAAAAAAAAAAAPCuVsQLkeIrJ0+k1ei+p3hz/kb9WmNqrn1X2M69fzv3TG+1Wq16audIzsmcKzlXc67lXM8ZtXx8zpGckzlXcq7mXMu5njOKfHzOkZyTOVdyruZcy7meM3ry8TlHck7mXMm5mnMt53rOOCL37gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCepRRE/jxTf+tpGihQRIxGT0c61vsNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FnIoUay/0V49XaxHXIuLnrVar+vrfVqsVsVFuP6rD7isAAAAAAAAAAAAAAAAAAAAcWamIj0WKp/9vI9Uj4s7g631PHh+8dPHkheEiikhlSXf98+PXLtefW7h5a3F2aWl2pj4x35xemJnd67frv9Kcv31nYnRsXzrzQMf2uf3H+p9buPXSYvPGV5d3fX6g//LU0vJiY3r3p+NY1CImu/cMVQ2eGB2rGj3XbMxXh6baPRpYixjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+LFD/5z/Ops268p73m/5faj4rN2ld+f+tvAcztyI7uvx+wl+2014YOVQvv6xOjY2PjXbt7eu8uLduUUhHPRIpPvPyhaj18ioFd18aXde8t626ez3WDv1LWrWyr6h+aGB2rX12YP3l5bm5hurHcmJqbrY/fakzv+Q8HAAAAAAAAAAAAAAAAAAAAwH0MpCJ+FCn+++/+PXXuO5/X//e0H3Wt//+Nagl9pT9tz03V2v73Vmv729vvuzQ88NFn77V/P9b/l21KqYhvRopzP/pQdT/9zvr/yR21Zd2fRoo3nv1Irqs9UdY1Ot1pv+L15tzs6bL2ryLFr77ZqY2q9kaufXqr9kxZeyxS/MXG9tqv5toPbNWeLWtPRIrv/dfutR/cqj1X1v4kUvzj39Y7tQNl7e/l2uNbtaemF+ZmHjSs5fx/J1L8zdXfSp0+33P+u/7+w8qO3HTXnN9/++2a/8GufSt5Xv8kz3/jAfN/IVJ8p/8jua499lP5+aeq/2/N/ycixX/86/ba67n2/Vu1Z/barcNWzv+3I8V3//LHm33O859HdmuGuuf/l3u25+a75JDm/6mufYO5XdNvcSzejZZe+vqLjbm52UUb99nIb/I4Ku2xYWO/Nw75xMSBKD///yxS/P/xInWuY/Ln/3vaj7au//7nG1uf/5d25KZD+vx/f9e+S/mqpbcnon/55q3eZyL6l176+snmzcaN2Ruz82fPnP70py+cOX3mQu8TnYu7ra09j907QTn/P4gUP/z7H27+HrP9+m/36/+BHbnpkOb/6e4+bbuu2fNQvCuV8//XkeKpz/548/fN+13/d37/P/Gx7bn583dI8/+Brn2DuV3NtzgWAAAAAAAAAAAAj5OBVMSfR4rf+aNfT501RHv5938zO3LTIf37r+Nd+2YOaF3DngcZAOAIKa//Phgp/qn1/c213Nuv/+LXOrXd13/3chTu/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+7FEX8QaQYeHUjrfWVj9v6rzTnb9+ZGB3b/bBjKVLUoqjqy6/+M2fPnf/UhYvDnbzSd5Dd+HA8P37tcv25hZu3FmeXlmZn6hPzzemFmdk9v8KjHr/TUDWA9Zsv3p65fn2pfvbUufb+VjvuDL7e9+TxwUsXT14Y7tROjI6NjXe9RE/vQ3/3u6R77H8iivh+pHhz8I303b6IWjz6WDzgvbPfjlWdGKo6MTE6VnVkrtmYXy6fTLVcVYuodx000hmjA5iLRzISsVI2v2zwUNm98VuNxcbU3Gz9i43F5eZyc2E+1dqtLftTj1oMp4jViFjf5UeyN4r4ZqR4+fRG+ue+iKIzDp+8Ov6l0+ce3J7aPvRxD8p21nsjVmuPwZwdYX1RxD9Eip+9diK+1xfRE+2v+HjEF8p8NeKVMj8Tkco3xvmInx7oqZ391BNFnI8UC2kjvdZXng8655UrX65/fv76Qldt57zy2H8+HKQjfm7qjyJ+UJ3xN9K/7Pi5Lg6rUQAAAAAAAAAAAAAAAABUq7xWI8VXTp5I1frgzTXFzfkb9WuNqbn2sr7O2r/OmulWq9Wqp3aO5JzMuZJzNedazvWcUcvH5xzJOZlzJedqzrWc6zmjyMfnHMk5mXMl52rOtZzrOaMnH59zJOdkzpWcqznXcq7njCOydg8AAAAAAAAAAAAAAAAAAHhnqUVR3cX9W1/bSK2+9v2lJ6Oda+7z+473iwAAAP//u01xPQ==") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r2], 0x5, 0x5ea, &(0x7f0000001400)="$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") r4 = open(0x0, 0x100000, 0x0) flock(r4, 0x1) syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001b40)) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2008800, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x6, &(0x7f0000001180)=ANY=[@ANYBLOB="05000000000000007311370000000005000000000000000085000000050000009500000000001d009500a50500000000ee40d60e7d581d454e5e2068fbaa71921ed4dce15f0a3762aa0f1e798b7bc20a9d6c004f1b198f38de23425e69662c63330deb245797b2952648766bc38bc0127530724110def0a90252d7c84772d9d619399a6256152d4440c0593eec743c148697ce5e828b7b63c720a27f4d424357ebaf0b9c5b33d265"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 19m43.598498211s ago: executing program 4 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000280)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000019440)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) pread64(r5, &(0x7f00000194c0)=""/245, 0xf5, 0x80387) 19m40.74243033s ago: executing program 4 (id=75): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6, 0x4, 0xffffffff, 0x7}, 0x2}, 0x20, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x3, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x4, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0xfffffff3, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0xc70, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x3, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x20000006, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x9, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xc47a, 0x136, 0x6]}, 0x45c) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x8000000000002, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) 19m24.749370532s ago: executing program 34 (id=75): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6, 0x4, 0xffffffff, 0x7}, 0x2}, 0x20, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0xc0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x3, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x4, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0xfffffff3, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0xc70, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x3, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x20000006, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x9, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xc47a, 0x136, 0x6]}, 0x45c) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x8000000000002, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) 13m39.209336387s ago: executing program 5 (id=447): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x80100008b}, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x0, &(0x7f0000001280)) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64], 0x5, 0x5ea, &(0x7f0000001400)="$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") r2 = open(0x0, 0x100000, 0x0) flock(r2, 0x1) syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001b40)) mount$fuse(0x0, 0x0, 0x0, 0x2008800, 0x0) rmdir(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 13m35.423344769s ago: executing program 5 (id=449): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r1, &(0x7f00000053c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001e3c0)=0x410000002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4f9, &(0x7f00000006c0)="$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") r2 = creat(&(0x7f0000000bc0)='./bus\x00', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file2\x00', 0xa4c42, 0x108) fallocate(r2, 0x0, 0xbf1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000c40)={0xc, r2, 0x0, 0x40, 0x0, 0xfffffffffe000001}) pread64(0xffffffffffffffff, &(0x7f000001e440)=""/102400, 0x19000, 0xffffffff8) 13m34.444678294s ago: executing program 5 (id=450): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe, 0x500}) 13m33.834427866s ago: executing program 5 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000e00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) shmdt(0x0) syz_open_dev$evdev(&(0x7f0000019e00), 0x2, 0x121c00) r5 = syz_open_dev$sndctrl(&(0x7f0000019e40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000019ec0)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f000001a000)={{0x9, 0x4, 0x1, 0x3, 'syz0\x00', 0x4}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0x80, 0x3, 0x8, 0x3e, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x7, 0x6, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x40, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x40000003, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 13m31.660850505s ago: executing program 5 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f000001a740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000019440)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000019480)='./file2\x00', 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400400) sched_setscheduler(r2, 0x0, &(0x7f0000000300)=0xb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000001a5c0)={0x80000000, 0x4, 0x0, 'queue1\x00', 0x9}) symlink(&(0x7f00000194c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000001a4c0)='./file0\x00') rename(&(0x7f000001a500)='./file0\x00', &(0x7f000001a540)='./file2\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f000001a580)='./file0\x00') 13m28.546440715s ago: executing program 5 (id=456): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0x5, 0x5ea, &(0x7f0000001400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 13m11.213331781s ago: executing program 35 (id=456): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r1], 0x5, 0x5ea, &(0x7f0000001400)="$eJzs3U1vG8cdB+Df0pJsuqjDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbBpWzCtBBJTKEFR2H299hskRSGfe+qh6MFAe+5HqIAecijQu24udrmUGEuRpVg2qfh5gOHMcHZnZ/7eHXGXMBjgubX4bqYfpMjixbfXy/rmRqe3udG5MywnOZmkkUwNshQrSTGdXM0g5Rvlm3V3xRcd571P3lr4rH3/3qA2Vadq+8Z++x3M3TplNsmJOj+q/q49cX/F9gzLgF0YBg7G7eEudw+z+xNet8AkKAZ/N3dpJaeTnKo/B6ReHRrPdnRH71CrHAAAABxTL2xlK+s5M+5xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHFS//5/UafGsDybYvj7/zP1e6nLx9qDcQ8AAAAAAAAAAI7Ad7aylfWcGdYfFtV3/uerytnq9Wv5MGvpZjWXsp6l9NPPatpJWiMdzawv9fur7QPsOb/nnvPPZr4AAAAAAAAA8BX16yzufP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEhODLIqnR2WW2lMJTmVZKbc7m7y92H5OHsw7gEAAADAM/DCVraynjPD+sOiuud/pbrvP5UPs5J+ltNPL91cr54FDO76G5sbnd7mRudOmXb3+6P/HWoYVY8ZPHvY+8hz1RbnqvY/zySL+Wl+nouZzTtZzXJ+kaX0081sflKVllKkVT+9aA3Hufd4r36u9s7jxvpaNZJmbmS5GtulXMv76eV6GtUcqm32P+K9MjrFD2sHjNH1Oi9n9Mc6nwytKiLT2xGZq2NfRuPF/SNxyPPk0SO109h+BnX2KcT8dJ2Xsf79RMd8fuTse2X/SCTn//Ptv97qrdy+dWPt4uRM6Ut6NBKdkUi8+lxFYqaOxmAVHa6Wpcevluerfc9kOT/L+7mebt7MQt7MfN7IG5nLQq6MxPXc46+1m0kOc61d+F5daCb5Q51PhjKuL47EdXSla1Vto+/sROmlo1+Rpr5ZF8pj/KbOJ8OjkWiPROLl/SPxp4fl61pv5fbqraUPDni879Z5edn+bqLW5vJ8ean8x6pqnz87yraX92xrV21nt9sau9rO/fvrddvjrtSZ+jPc7p7mq7ZX92zrVG2vjbTt9SkHgIl3+vXTM83/Nv/V/LT52+at5tunfnxy4eS3ZjL9z6m/nfhL437jB8Xr+TS/2rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1jz6+vdTrdVcVFI5tYao+mydlPF+FwpgXJuCpu9y/88HltY8+/v7ynaWb3ZvdlU6nfWV+4crC/JXLN5Z73bnB67iHCTwFO3/0xz0SAAAAAAAAAAAA4KCexX8nGPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgONt8d1MP0iR9tylubK+udHplWlY3tlyKkkjSfHLpPhHcjWDlNZId8UXHee9T95a+Kx9/95OX1PD7Rv77Xcwd+uU2SQn6vyo+rv2xP0V2zMsA3ZhGDgYt/8HAAD//6ulC6Y=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6m12.880744797s ago: executing program 1 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000e00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) shmdt(0x0) syz_open_dev$evdev(&(0x7f0000019e00), 0x2, 0x121c00) r5 = syz_open_dev$sndctrl(&(0x7f0000019e40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000019ec0)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f000001a000)={{0x9, 0x4, 0x1, 0x3, 'syz0\x00', 0x4}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0x80, 0x3, 0x8, 0x3e, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x7, 0x6, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x40, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x40000003, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 6m9.985620333s ago: executing program 1 (id=758): unshare(0x8000300) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000b40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000c00)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000019c40)) getpid() r4 = gettid() process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/231, 0xffffff4e}], 0x23a, 0x0) 6m2.862108326s ago: executing program 1 (id=762): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x400000e0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0x4b2, 0x800, 0x80000004, 0x1f4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f0d, 0x0, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m53.594451051s ago: executing program 1 (id=770): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x22004006, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000180)="$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") syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001000)={0x1, &(0x7f0000001040)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={0xffffffffffffffff, &(0x7f00000010c0), 0x0}, 0x20) r1 = getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001100)='./proc\x00', &(0x7f0000001140)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000001180)='.\x00', 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x2000200, &(0x7f0000000780), 0x7, 0x504, &(0x7f00000007c0)="$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") openat$udambuf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2) memfd_create(&(0x7f0000000e00)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) close(0x3) 5m47.651858671s ago: executing program 1 (id=774): unshare(0x8000300) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000b40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000bc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000c00)=""/102392, 0x18ff8) r4 = gettid() process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/231, 0xffffff4e}], 0x23a, 0x0) 5m46.037470584s ago: executing program 1 (id=775): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) socket$netlink(0x10, 0x3, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) 5m30.408556199s ago: executing program 36 (id=775): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) socket$netlink(0x10, 0x3, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141081, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, 0x0, 0x0) 5m26.9488324s ago: executing program 8 (id=796): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev}, {@empty}, {@dev}, {@broadcast}]}, @generic={0x89, 0x8, "37ff2ce8b7da"}]}}}}}}}, 0x0) 5m25.101014236s ago: executing program 8 (id=798): ioctl$TCFLSH(0xffffffffffffffff, 0x80045430, 0x20201103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 5m22.318273635s ago: executing program 8 (id=799): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000a40)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000019a40)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000019a80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000019ac0)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffa, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r3, &(0x7f0000019bc0), 0x800001d, 0x1c) 5m18.638673693s ago: executing program 8 (id=800): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000080), 0x1, 0x576, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x1030c1, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, r0, 0x84, 0x75ea, 0xffffffff, 0x200000000000000}) 5m13.967240191s ago: executing program 8 (id=805): mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3ff, 0xa, 0x5c6, 0x0, 0x8003, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) 5m13.2663114s ago: executing program 8 (id=807): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 4m58.114197275s ago: executing program 37 (id=807): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 2m40.600936529s ago: executing program 6 (id=999): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)='p', 0x1}], 0x1}}], 0x2, 0x34008850) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) 2m40.029543151s ago: executing program 6 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2m38.109942014s ago: executing program 6 (id=1003): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f00000005c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000000640), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000000680)) 2m27.330822975s ago: executing program 6 (id=1030): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f0000000800)='./file1\x00', 0x8c8, &(0x7f0000000c80)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000000e00)="$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") openat(0xffffffffffffff9c, &(0x7f0000005280)='./file1\x00', 0xc4042, 0x17f) openat$nullb(0xffffffffffffff9c, &(0x7f00000052c0), 0x48840, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001b840)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f000001b880), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x18ad414) 2m21.181855581s ago: executing program 6 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x45, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fdffffff0000000088000000911161000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f000001a740)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f00000193c0)=0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, 0x0, 0x0) mount(0x0, &(0x7f0000019400)='./file0\x00', 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000019440)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000019480)='./file2\x00', 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x400400) sched_setscheduler(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000001a5c0)={0x80000000, 0x4, 0x0, 'queue1\x00', 0x9}) symlink(&(0x7f00000194c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000001a4c0)='./file0\x00') rename(&(0x7f000001a500)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f000001a580)='./file0\x00') 2m18.51908316s ago: executing program 6 (id=1040): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000019840)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) 2m1.885952782s ago: executing program 38 (id=1040): getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000019840)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) 1m28.900205429s ago: executing program 0 (id=1123): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000340)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f00000010c0)={0x28, 0x0, 0x0, @local}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000400)="4a00ffff11003ee0b4fd", 0xa) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f0000000540)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000012c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES64=r2], 0x5, 0x5ea, &(0x7f0000001400)="$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") open(0x0, 0x100000, 0x0) syz_mount_image$vfat(&(0x7f0000001a00), &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000001b40)) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2008800, 0x0) rmdir(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m22.925082867s ago: executing program 0 (id=1129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43527aee", 0xe5}, {&(0x7f0000000cc0)="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", 0x141}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1808f3125266538de14f70d50bc538b280501c0dc939a30878c909ff313bbdc541643f1af579f8b654da0115e0700000096362f98cadcef093d5984160442728903d659ba4bf7ce6eb884", 0x124}], 0x1}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="00b473265e9975c4f6854e4f2c8ce68d0e1dbedc49da9bfe2fe85ad8a4a3bfba32bb1531b8e78201ecf26d4888ae6c4ecb8e385b070fc8700571f12456d58119f40fc9d8f7690c22fe269b21ae50f0d999e9f28fb4bdd5c273accd267270bb8faa548807ab93e3e2958b377cc10e85cf01bd8697e391d93b0a29f1f5c1b5b2ddf5f338d946760ae63fd965e7db008bd09a8de54158b75296e803fc0b747f5801c9fbf3b184b1b20e8f10d0a218a95a860d438d", 0xb3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m21.801808386s ago: executing program 0 (id=1131): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f0000000800)='./file1\x00', 0x8c8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000000e00)="$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") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000052c0), 0x48840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000001b840)='./file1\x00', 0xc4842, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f000001b880), 0x6200, 0x0) sendfile(r1, r2, 0x0, 0x18ad414) symlink(&(0x7f000001b8c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000001ba00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f000001bbc0)='./file1\x00', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x20fffe82) 1m18.295530411s ago: executing program 0 (id=1136): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) 1m15.638024916s ago: executing program 0 (id=1142): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000001980)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f000001aa80)={0x0, 0x0, &(0x7f000001aac0)={&(0x7f000001ab00)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1m12.391875064s ago: executing program 0 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x20002802}, 0x4801) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe2(&(0x7f0000002380), 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r4, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0xfffffffc, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0xfffffffffffffffd, 0x200804, 0x0, 0x0, 0x0, 0x9, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.344855318s ago: executing program 39 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={0x0}, 0x1, 0x0, 0x0, 0x20002802}, 0x4801) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe2(&(0x7f0000002380), 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r4, {0x403, 0x0, 0x8, 0xfff}}, 0x20) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0xfffffffc, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0xfffffffffffffffd, 0x200804, 0x0, 0x0, 0x0, 0x9, r5, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.270399908s ago: executing program 7 (id=1192): socket$inet(0x2, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x40000100) readv(r1, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() tkill(r4, 0x21) 14.003862642s ago: executing program 7 (id=1205): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x2400c0a2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='limits\x00') lseek(r1, 0x80, 0x0) connect$inet6(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000740), &(0x7f0000000780)='./file1\x00', 0x2004054, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0xc43, &(0x7f0000000980)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000001740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000018c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 12.999114053s ago: executing program 3 (id=1209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) 11.634148013s ago: executing program 3 (id=1213): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.343759698s ago: executing program 3 (id=1217): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x1, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80), 0x0, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9.735197171s ago: executing program 7 (id=1220): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f0000000800)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x4008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x80000001) 9.625755499s ago: executing program 2 (id=1221): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0x1, 0xa}, {0x1, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 9.365187575s ago: executing program 7 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000e00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) shmdt(0x0) syz_open_dev$evdev(&(0x7f0000019e00), 0x2, 0x121c00) r5 = syz_open_dev$sndctrl(&(0x7f0000019e40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f000001a000)={{0x9, 0x4, 0x1, 0x3, 'syz0\x00', 0x4}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0x80, 0x3, 0x8, 0x3e, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x7, 0x6, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x40, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x40000003, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 8.834546589s ago: executing program 3 (id=1223): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) 7.305438407s ago: executing program 2 (id=1226): syz_open_dev$loop(0x0, 0xff, 0x101200) futex(0xffffffffffffffff, 0x5, 0xfffffffe, 0x0, 0x0, 0x1) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) unshare(0x22020600) r2 = syz_ublk_setup_io_uring(0x12a0, &(0x7f00000009c0)={0x0, 0xb9a4, 0x800, 0x3, 0x34b}, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000b00)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/33, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f00000001c0)=""/80, &(0x7f0000000240)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)=0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x17, 0x7, &(0x7f0000000ac0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000400)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x2001) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/92}, 0x20) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 7.135658926s ago: executing program 7 (id=1227): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x400000e0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0x4b2, 0x800, 0x80000004, 0x1f4}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x0, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f0d, 0x0, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.537470481s ago: executing program 3 (id=1230): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x2400c0a2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='limits\x00') lseek(r1, 0x80, 0x0) connect$inet6(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000740), &(0x7f0000000780)='./file1\x00', 0x2004054, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0xc43, &(0x7f0000000980)="$eJzs3U9sHNd9B/DfGy7Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRFi2KFCV/Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8ev7EybSDgrV9aAwAsC8ujn31xKmdXP8BgMfG5Z3++x8AAAAAAAAAAAAAAHhYUhTxVKSYu7iWJqrnHfUL7f6bt8ZHRreuNpiqmn1V+fKrfvLU6TNfenH4bDcvtGc+pP6D9tl4fezy+cYrszfm5qcWFqYmG+Mz7auzk1M73sNu6292rDoAjRtv3Jy8dm2hceqF03e8fGvog4EnjwydG37u+LPdsuMjo6NjG0XqveV3e/eF7WZ4HIoijkeK57/309SKiCJ2fyzq+zv2mw1WnThWdWJ8ZLTqyHS7NbNYvnipeyCKiEZPpWb3GG09FlHr39c+bK8ZsVQ2v2zwsbJ7Y3Ot+daV6anGpdb8YnuxPTtzKXVaW/anEUWcTRHLEbE6cPfu+qOIWqT4zuG1dCUi+rrH4YvVxODt21HsYR93oGxnoz9iuXgExuwAG4giXosUP3v3aFzN55nqXPOFiNfK/EHE22W+HJHKD8aZiPe3+BzxaKpFEX9Zjv+5tTRZnQ+655ULX2t8ZebabE/Z7nnlI14f7jpTPKTrw+Cm3B8H/NxUjyJa1Rl/Ld3/NzsAAAAAAAAAAAAAAAAAPGiDUcRnIsWr//En1bziqOalHz43/IdDv9o7Z/yZe+ynLPtCRCwVO5uTeyhPDLyULqX0kOcSf5zVo4g/zfP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxls7+JFK89N7RtBy9a4q3Z643BiOisypsd+3f7prp6+vr643UyWbOiZxLOZdzruRczRlFrp+zmXMi51LO5ZwrOVdzRl+un7OZcyLnUs7lnCs5V3NGLdfP2cw5kXMp53LOlZyrOeOArN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4KaKIX0SKb39jLUWKiGbERHRyZeBhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2kIr4fKRp/1Ly9rRYRqfq/42j5x5loHirzk9EcLvPlaJ7P2aqy1vzWQ2g/u9OfivhxpBiov3N7wPP493ee3f4YxNvf3Hj22Von+7ovDn0w8OSRw+eGR3/jme0ep60acOxCe+bmrcb4yOjoWM/mWn73T/ZsG8rvWzyYrhMRC2++9UZrenpq/v4flB+BXVR/hB6k2selpx5UD6J2IJrxcPp+D4f79ucMxV4qr//vR4rffe8/uxf8zvW/Hr/SebYxzD//s43r/0ubd7TD639tc718/S+v6Vtd/5/q2fZS/m6kvxZRX7wx138kor7w5lvH2zda16euT82cOXHiy8PDXz59ov9QRP1ae3qq59EDOVwAAAAAAAAAAAAAAAAA+ycV8fuRovXjtdSIiFvVfK2hc8PPHX+2L/qq+VZ3zNt+fezy+cYrszfm5qcWFqYmG+Mz7auzk1M7fbt6Nd1rfGR0TzpzT4N73P7B+iuzc2/Ot6//8eKWrz9RP39lYXG+dXXrl2Mwiohm75ZjVYPHR0arRk+3WzNV1UtbTqb/6PpTEf8VKa6eaaTP5215/v/mGf53zP9f2ryjPZr//4mebeV7plTEzyPF7/zVM/H5qp1PxF3HLJf7u0hx7Ozncrk4VJbrtqFzX4HOzMCy7P9Fin/6xZ1lu/Mhn9ooe3LHB/YRUY7/4Ujx/b/4bvxm3nbn/R+2Hv8nNu/ofsd//cPH/+mebU/ccb+CXXedPP7HI8XLT70Tv5W3fdj9P7r33jiaC9++P8ce/f3/VM+2ofy+v/1gug4AAAAAAAAAAPBI609F/H2k+OFoLb2Yt+3k9/8mN+9oj37/69M92yYfzHpF93yw64MKAAAAAAdEfyriJ5Hi+uI7t+dQ3zn/u2f+5+9tzP8cSZterX7O92vVfQMe5M//eg3l953YfbcBAAAAAAAAAAAAAAAAAADgQEmpiBfzeuoT1Xz+yW3XU1+JFK/+z/O5XDpSluuuAz9U/Vm/ODtz/Pz09OzV1mLryvRUY2yudXWqrPt0pFj728/lukW1vnp3vfnOGu8ba7HPR4rRf+iW7azF3l2b/OmNsifLsp+IFP/9j3eW7a5j/amNsqfKsn8TKb7+L1uXPbJR9nRZ9ruR4kdfb3TLPlGW7d4f9dMbZV+4OlvswagAAAAAAAAAAAAAAAAAAADwcdOfivjzSPG/N5Zvz+XP6//39zytvP3NnvX+N7lVrfM/VK3/v93j+1n/v7qvwNJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+nFEW8FSnmLq6llYHyeUf9Qnvm5q3xkdGtqw2mqmZfVb78qp88dfrMl14cPtvND6//oH0mXh+7fL7xyuyNufmphYWpycb4TPvq7OTUjvew2/qbHasOQOPGGzcnr11baJx64fQdL98a+mDgySND54afO/5st+z4yOjoWE+ZWv99v/td0jbbD0URfx0pnv/eT9MPByKK2P2xuMdnZ68NVp04VnVifGS06sh0uzWzWL54qXsgiohGT6Vm9xjtw1jsSjNiqWx+2eBjZffG5lrzrSvTU41LrfnF9mJ7duZS6rS27E8jijibIpYjYnXg7t31RxFvRIrvHF5L/zoQ0dc9Dl+8OPbVE6e2b0exh33cgbKdjf6I5eKjjtn6+vr6/rXzoBuIIv45Uvzs3aPxbwMRteh8xRciXivzBxFvR2e8U/nBOBPx/hafIx5NtSji/8vxP7eW3h0ozwfd88qFrzW+MnNttqds97zyyF8f9tMBv57Uo4gfVWf8tfTv/l4DAAAAAAAAAAAAAAAAHCBF/HqkeOm9o6maH3x7TnF75nrjcuvKdGdaX3fuX3fO9Pr6+nojdbKZcyLnUs7lnCs5V3NGkevnbJZZX1+fyM+Xci7nXMm5mjP6cv2czZwTOZdyLudcybmaM2q5fs5mzomcSzmXc67kXM0ZB2TuHgAAAAAAAAAAAAAAAAAA8Hgpqv9SfPsba2l9oLO+9ER0csV6oI+9XwYAAP//VMb8Tw==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000001740)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001780)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000018c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001900), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.388328864s ago: executing program 2 (id=1232): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.150053602s ago: executing program 9 (id=1233): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371", 0xde}, {&(0x7f0000000cc0)="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", 0x13f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="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", 0x123}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.700467334s ago: executing program 9 (id=1234): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.116524388s ago: executing program 9 (id=1235): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851f", 0xac}, {&(0x7f0000000cc0)="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", 0x13f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="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", 0x123}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.590207116s ago: executing program 9 (id=1236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x40000003, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 3.501556392s ago: executing program 2 (id=1237): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2713, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1000808, &(0x7f0000000280)=ANY=[@ANYBLOB='nls=euc-jp,part=0x000000000000000000000000001,part=0x0000000000000105,\x00'/84], 0x21, 0x5f9, &(0x7f0000000640)="$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") mkdir(&(0x7f0000000c40)='127.0.0.1:/\x00', 0x1bf) 3.015954912s ago: executing program 9 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = io_uring_setup(0x2a6a, &(0x7f00000001c0)={0x0, 0xd610, 0x0, 0x1, 0x3c}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000700)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x48}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb04, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 2.716393302s ago: executing program 2 (id=1239): socket$inet(0x2, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40000100) readv(r1, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() tkill(r4, 0x21) 1.299406389s ago: executing program 9 (id=1240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) 719.940115ms ago: executing program 2 (id=1241): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xfffffffffffffdc1, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) read(r1, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdd:De', 0xfffffffffffffffe) 254.53133ms ago: executing program 3 (id=1242): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000e00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) shmdt(0x0) syz_open_dev$evdev(&(0x7f0000019e00), 0x2, 0x121c00) r5 = syz_open_dev$sndctrl(&(0x7f0000019e40), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000019ec0)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x1}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f000001a000)={{0x9, 0x4, 0x1, 0x3, 'syz0\x00', 0x4}, 0x0, [0x7fff, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x800, 0x80, 0x3, 0x8, 0x3e, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6b, 0x800, 0x7, 0x6, 0xf676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x7, 0x6, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x0, 0x40, 0xb, 0x4, 0x8000000000000000, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2000000000000002, 0x1d, 0xffffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x40000003, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 0s ago: executing program 7 (id=1243): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 000040 [ 1012.751088][T11376] RBP: 00007f8d3b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1012.751101][T11376] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1012.751114][T11376] R13: 00007f8d3b226038 R14: 00007f8d3b225fa0 R15: 00007ffc517188c8 [ 1012.751146][T11376] [ 1013.121117][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1013.121134][ T29] audit: type=1800 audit(1792531285.875:248): pid=11378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.777" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 1013.360999][ T8811] Bluetooth: hci4: command tx timeout [ 1013.553304][ T8811] Bluetooth: hci5: command tx timeout [ 1013.601355][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.612563][ T8811] Bluetooth: hci5: command tx timeout [ 1017.693147][ T8811] Bluetooth: hci5: command tx timeout [ 1018.023651][T11420] loop8: detected capacity change from 0 to 16 [ 1018.053476][T11420] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1018.184290][T11237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.184378][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.184484][T11237] bridge_slave_0: entered allmulticast mode [ 1018.230503][T11237] bridge_slave_0: entered promiscuous mode [ 1021.279253][T11237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.279342][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.279479][T11237] bridge_slave_1: entered allmulticast mode [ 1022.475233][T11237] bridge_slave_1: entered promiscuous mode [ 1025.317002][T11237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.399988][T11237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.726248][T11333] rxe_eth0 speed is unknown, defaulting to 1000 [ 1026.060795][T11237] team0: Port device team_slave_0 added [ 1026.103802][T11237] team0: Port device team_slave_1 added [ 1026.244897][T11446] loop3: detected capacity change from 0 to 1024 [ 1026.331976][T11446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.414793][T11237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.414809][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.414833][T11237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.576551][T11237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.576568][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.576597][T11237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.679552][T11451] FAULT_INJECTION: forcing a failure. [ 1026.679552][T11451] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.679585][T11451] CPU: 0 UID: 0 PID: 11451 Comm: syz.8.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.679610][T11451] Tainted: [L]=SOFTLOCKUP [ 1026.679618][T11451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1026.679630][T11451] Call Trace: [ 1026.679638][T11451] [ 1026.679646][T11451] dump_stack_lvl+0xe8/0x150 [ 1026.679680][T11451] should_fail_ex+0x410/0x560 [ 1026.679715][T11451] should_failslab+0xa8/0x100 [ 1026.679746][T11451] __kmalloc_cache_noprof+0xa3/0x600 [ 1026.679771][T11451] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1026.679793][T11451] ? assoc_array_insert+0x417/0x2f60 [ 1026.679825][T11451] ? assoc_array_insert+0x417/0x2f60 [ 1026.679863][T11451] assoc_array_insert+0x417/0x2f60 [ 1026.679896][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.679926][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.679956][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.679979][T11451] ? down_write+0x16b/0x200 [ 1026.680016][T11451] __key_link_begin+0xd6/0x1f0 [ 1026.680042][T11451] key_link+0xdd/0x360 [ 1026.680069][T11451] call_sbin_request_key+0x41a/0xbf0 [ 1026.680115][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680139][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680170][T11451] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1026.680200][T11451] ? do_raw_spin_unlock+0xf5/0x200 [ 1026.680263][T11451] ? __pfx_request_key_auth_new+0x10/0x10 [ 1026.680292][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680319][T11451] request_key_and_link+0xf13/0x15a0 [ 1026.680359][T11451] ? __pfx_request_key_and_link+0x10/0x10 [ 1026.680391][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680422][T11451] ? __pfx_key_default_cmp+0x10/0x10 [ 1026.680445][T11451] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1026.680473][T11451] ? down_read+0x2be/0x330 [ 1026.680502][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680526][T11451] ? _copy_from_user+0x94/0xb0 [ 1026.680551][T11451] __se_sys_request_key+0x29a/0x350 [ 1026.680581][T11451] ? __pfx___se_sys_request_key+0x10/0x10 [ 1026.680609][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680639][T11451] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1026.680667][T11451] do_syscall_64+0x166/0x520 [ 1026.680692][T11451] ? trace_irq_disable+0x3b/0x140 [ 1026.680714][T11451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.680740][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.680760][T11451] RIP: 0033:0x7f8d3af9f559 [ 1026.680778][T11451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.680794][T11451] RSP: 002b:00007f8d3bd96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1026.680815][T11451] RAX: ffffffffffffffda RBX: 00007f8d3b225fa0 RCX: 00007f8d3af9f559 [ 1026.680829][T11451] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1026.680844][T11451] RBP: 00007f8d3b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1026.680857][T11451] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1026.680870][T11451] R13: 00007f8d3b226038 R14: 00007f8d3b225fa0 R15: 00007ffc517188c8 [ 1026.680902][T11451] [ 1027.753595][T11237] hsr_slave_0: entered promiscuous mode [ 1027.785663][T11237] hsr_slave_1: entered promiscuous mode [ 1027.864244][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.933665][T11456] FAULT_INJECTION: forcing a failure. [ 1027.933665][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.933698][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.8.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.933724][T11456] Tainted: [L]=SOFTLOCKUP [ 1027.933731][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1027.933743][T11456] Call Trace: [ 1027.933751][T11456] [ 1027.933759][T11456] dump_stack_lvl+0xe8/0x150 [ 1027.933794][T11456] should_fail_ex+0x410/0x560 [ 1027.933829][T11456] should_failslab+0xa8/0x100 [ 1027.933860][T11456] __kmalloc_cache_noprof+0xa3/0x600 [ 1027.933884][T11456] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1027.933906][T11456] ? assoc_array_insert+0x417/0x2f60 [ 1027.933936][T11456] ? assoc_array_insert+0x417/0x2f60 [ 1027.933974][T11456] assoc_array_insert+0x417/0x2f60 [ 1027.934012][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934040][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934071][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934101][T11456] ? down_write+0x16b/0x200 [ 1027.934139][T11456] __key_link_begin+0xd6/0x1f0 [ 1027.934165][T11456] key_link+0xdd/0x360 [ 1027.934193][T11456] call_sbin_request_key+0x41a/0xbf0 [ 1027.934226][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934249][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934280][T11456] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1027.934310][T11456] ? do_raw_spin_unlock+0xf5/0x200 [ 1027.934377][T11456] ? __pfx_request_key_auth_new+0x10/0x10 [ 1027.934405][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934432][T11456] request_key_and_link+0xf13/0x15a0 [ 1027.934472][T11456] ? __pfx_request_key_and_link+0x10/0x10 [ 1027.934503][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934533][T11456] ? __pfx_key_default_cmp+0x10/0x10 [ 1027.934557][T11456] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1027.934584][T11456] ? down_read+0x2be/0x330 [ 1027.934611][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934633][T11456] ? _copy_from_user+0x94/0xb0 [ 1027.934659][T11456] __se_sys_request_key+0x29a/0x350 [ 1027.934689][T11456] ? __pfx___se_sys_request_key+0x10/0x10 [ 1027.934716][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934746][T11456] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1027.934773][T11456] do_syscall_64+0x166/0x520 [ 1027.934798][T11456] ? trace_irq_disable+0x3b/0x140 [ 1027.934821][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.934847][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.934867][T11456] RIP: 0033:0x7f8d3af9f559 [ 1027.934885][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.934901][T11456] RSP: 002b:00007f8d3bd96028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1027.934922][T11456] RAX: ffffffffffffffda RBX: 00007f8d3b225fa0 RCX: 00007f8d3af9f559 [ 1027.934937][T11456] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 1027.934951][T11456] RBP: 00007f8d3b036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.934964][T11456] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 1027.934977][T11456] R13: 00007f8d3b226038 R14: 00007f8d3b225fa0 R15: 00007ffc517188c8 [ 1027.935009][T11456] [ 1028.568849][T10510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1028.585861][T10510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1028.588141][T10510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1028.590427][T10510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1028.626974][T10510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1028.700604][T11353] rxe_eth0 speed is unknown, defaulting to 1000 [ 1029.604680][T11468] FAULT_INJECTION: forcing a failure. [ 1029.604680][T11468] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.604714][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.3.794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.604740][T11468] Tainted: [L]=SOFTLOCKUP [ 1029.604747][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1029.604760][T11468] Call Trace: [ 1029.604768][T11468] [ 1029.604776][T11468] dump_stack_lvl+0xe8/0x150 [ 1029.604811][T11468] should_fail_ex+0x410/0x560 [ 1029.604851][T11468] should_failslab+0xa8/0x100 [ 1029.604882][T11468] __kmalloc_cache_noprof+0xa3/0x600 [ 1029.604907][T11468] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1029.604930][T11468] ? loopback_open+0x298/0xaa0 [ 1029.604957][T11468] ? loopback_open+0x298/0xaa0 [ 1029.604992][T11468] loopback_open+0x298/0xaa0 [ 1029.605035][T11468] snd_pcm_open_substream+0xff1/0x24f0 [ 1029.605058][T11468] ? snd_pcm_open+0x17d/0x690 [ 1029.605095][T11468] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1029.605119][T11468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.605146][T11468] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1029.605169][T11468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.605198][T11468] snd_pcm_open+0x1dc/0x690 [ 1029.605226][T11468] ? __pfx_snd_pcm_open+0x10/0x10 [ 1029.605247][T11468] ? __pfx_default_wake_function+0x10/0x10 [ 1029.605290][T11468] snd_pcm_playback_open+0x5f/0xc0 [ 1029.605318][T11468] chrdev_open+0x4d9/0x600 [ 1029.605347][T11468] ? __pfx_chrdev_open+0x10/0x10 [ 1029.605373][T11468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.605396][T11468] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1029.605422][T11468] ? devcgroup_check_permission+0x31/0x8f0 [ 1029.605453][T11468] ? __pfx_chrdev_open+0x10/0x10 [ 1029.605479][T11468] do_dentry_open+0x80e/0x1360 [ 1029.605517][T11468] vfs_open_consume+0x4a/0x350 [ 1029.605544][T11468] ? path_openat+0x16e5/0x20f0 [ 1029.605570][T11468] path_openat+0x1700/0x20f0 [ 1029.605612][T11468] do_file_open+0x23e/0x4a0 [ 1029.605641][T11468] ? __pfx_do_file_open+0x10/0x10 [ 1029.605685][T11468] ? _raw_spin_unlock+0x28/0x50 [ 1029.605705][T11468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.605728][T11468] ? alloc_fd+0x6af/0x760 [ 1029.605770][T11468] do_sys_openat2+0x115/0x200 [ 1029.605802][T11468] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.605836][T11468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1029.605860][T11468] ? do_user_addr_fault+0xd3f/0x1480 [ 1029.605886][T11468] __x64_sys_openat+0x138/0x170 [ 1029.605923][T11468] do_syscall_64+0x166/0x520 [ 1029.605949][T11468] ? trace_irq_disable+0x3b/0x140 [ 1029.605972][T11468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.605998][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.606018][T11468] RIP: 0033:0x7fb4aed5fd8e [ 1029.606036][T11468] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1029.606053][T11468] RSP: 002b:00007fb4afc0cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.606074][T11468] RAX: ffffffffffffffda RBX: 00007fb4afc0d6c0 RCX: 00007fb4aed5fd8e [ 1029.606095][T11468] RDX: 0000000000000002 RSI: 00007fb4afc0cc00 RDI: ffffffffffffff9c [ 1029.606109][T11468] RBP: 00007fb4afc0cc00 R08: 0000000000000000 R09: 0000000000000000 [ 1029.606122][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1029.606138][T11468] R13: 00007fb4af026038 R14: 00007fb4af025fa0 R15: 00007ffdeb6b2a18 [ 1029.606172][T11468] [ 1031.344061][T10510] Bluetooth: hci6: command tx timeout [ 1033.484555][T10510] Bluetooth: hci6: command tx timeout [ 1035.549104][T10510] Bluetooth: hci6: command tx timeout [ 1037.613377][ T8811] Bluetooth: hci6: command tx timeout [ 1038.116076][T11458] rxe_eth0 speed is unknown, defaulting to 1000 [ 1040.181191][ T5897] bridge_slave_1: left allmulticast mode [ 1040.181216][ T5897] bridge_slave_1: left promiscuous mode [ 1040.181379][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.225813][ T5897] bridge_slave_0: left allmulticast mode [ 1040.225837][ T5897] bridge_slave_0: left promiscuous mode [ 1040.226002][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.335007][ T5897] bridge_slave_1: left allmulticast mode [ 1040.335031][ T5897] bridge_slave_1: left promiscuous mode [ 1040.335191][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.358936][ T5897] bridge_slave_0: left allmulticast mode [ 1040.358954][ T5897] bridge_slave_0: left promiscuous mode [ 1040.359094][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.167492][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.210302][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.234248][ T5897] bond0 (unregistering): Released all slaves [ 1042.046252][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.065662][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.089074][ T5897] bond0 (unregistering): Released all slaves [ 1043.019840][T11536] loop8: detected capacity change from 0 to 1024 [ 1043.067300][T11536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.358042][T10509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.498790][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.498879][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.498996][T11333] bridge_slave_0: entered allmulticast mode [ 1043.555516][T11333] bridge_slave_0: entered promiscuous mode [ 1043.820327][T11549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1043.820348][T11549] block device autoloading is deprecated and will be removed. [ 1043.979947][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.980042][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.980160][T11333] bridge_slave_1: entered allmulticast mode [ 1044.035014][T11333] bridge_slave_1: entered promiscuous mode [ 1044.725497][T11333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.883629][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.883776][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.883890][T11353] bridge_slave_0: entered allmulticast mode [ 1044.937964][T11353] bridge_slave_0: entered promiscuous mode [ 1044.970579][T11333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.300680][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.300768][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.300878][T11353] bridge_slave_1: entered allmulticast mode [ 1045.372184][T11353] bridge_slave_1: entered promiscuous mode [ 1045.613867][T11237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1045.641770][T11237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.680384][ T5897] hsr_slave_0: left promiscuous mode [ 1045.691326][ T5897] hsr_slave_1: left promiscuous mode [ 1045.692033][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.710245][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.754083][ T5897] hsr_slave_0: left promiscuous mode [ 1045.756710][ T5897] hsr_slave_1: left promiscuous mode [ 1045.757424][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.757925][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.241981][T11571] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1046.242000][T11571] block device autoloading is deprecated and will be removed. [ 1046.450927][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1046.665587][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1048.821657][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1048.884159][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1049.499928][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.594096][T11333] team0: Port device team_slave_0 added [ 1049.612317][T11333] team0: Port device team_slave_1 added [ 1049.625878][T11237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1049.651172][T11237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.686106][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.029355][T10510] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1050.039803][T10510] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1050.041963][T10510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1050.059863][T10510] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1050.061878][T10510] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1050.215455][T11353] team0: Port device team_slave_0 added [ 1050.319967][T11333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.319984][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.320008][T11333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.395994][T11353] team0: Port device team_slave_1 added [ 1050.511575][T11333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.511593][T11333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.511617][T11333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.826054][T11353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.826071][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.826094][T11353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.977101][T11353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.977119][T11353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.977150][T11353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.247632][T11333] hsr_slave_0: entered promiscuous mode [ 1051.250042][T11333] hsr_slave_1: entered promiscuous mode [ 1051.280878][T11333] debugfs: 'hsr0' already exists in 'hsr' [ 1051.280897][T11333] Cannot create hsr debugfs directory [ 1052.019647][T11353] hsr_slave_0: entered promiscuous mode [ 1052.034669][T11353] hsr_slave_1: entered promiscuous mode [ 1052.035237][T11353] debugfs: 'hsr0' already exists in 'hsr' [ 1052.035253][T11353] Cannot create hsr debugfs directory [ 1052.173369][T10510] Bluetooth: hci1: command tx timeout [ 1052.457993][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.458082][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.458217][T11458] bridge_slave_0: entered allmulticast mode [ 1052.486122][T11458] bridge_slave_0: entered promiscuous mode [ 1052.782007][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.782096][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.782320][T11458] bridge_slave_1: entered allmulticast mode [ 1052.812403][T11458] bridge_slave_1: entered promiscuous mode [ 1053.261297][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.321339][T11607] loop3: detected capacity change from 0 to 1024 [ 1053.359915][T11607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1053.551780][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.583626][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.837539][T11578] rxe_eth0 speed is unknown, defaulting to 1000 [ 1054.076168][T11458] team0: Port device team_slave_0 added [ 1054.158354][T11616] FAULT_INJECTION: forcing a failure. [ 1054.158354][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.158387][T11616] CPU: 0 UID: 0 PID: 11616 Comm: syz.3.815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.158413][T11616] Tainted: [L]=SOFTLOCKUP [ 1054.158420][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1054.158432][T11616] Call Trace: [ 1054.158439][T11616] [ 1054.158448][T11616] dump_stack_lvl+0xe8/0x150 [ 1054.158482][T11616] should_fail_ex+0x410/0x560 [ 1054.158516][T11616] should_failslab+0xa8/0x100 [ 1054.158547][T11616] __kmalloc_cache_noprof+0xa3/0x600 [ 1054.158571][T11616] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1054.158593][T11616] ? loopback_open+0x298/0xaa0 [ 1054.158620][T11616] ? loopback_open+0x298/0xaa0 [ 1054.158653][T11616] loopback_open+0x298/0xaa0 [ 1054.158693][T11616] snd_pcm_open_substream+0xff1/0x24f0 [ 1054.158716][T11616] ? snd_pcm_open+0x17d/0x690 [ 1054.158747][T11616] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1054.158770][T11616] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.158796][T11616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.158819][T11616] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.158846][T11616] snd_pcm_open+0x1dc/0x690 [ 1054.158875][T11616] ? __pfx_snd_pcm_open+0x10/0x10 [ 1054.158895][T11616] ? __pfx_default_wake_function+0x10/0x10 [ 1054.158937][T11616] snd_pcm_playback_open+0x5f/0xc0 [ 1054.158963][T11616] chrdev_open+0x4d9/0x600 [ 1054.158992][T11616] ? __pfx_chrdev_open+0x10/0x10 [ 1054.159016][T11616] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.159039][T11616] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1054.159065][T11616] ? devcgroup_check_permission+0x31/0x8f0 [ 1054.159095][T11616] ? __pfx_chrdev_open+0x10/0x10 [ 1054.159121][T11616] do_dentry_open+0x80e/0x1360 [ 1054.159165][T11616] vfs_open_consume+0x4a/0x350 [ 1054.159191][T11616] ? path_openat+0x16e5/0x20f0 [ 1054.159217][T11616] path_openat+0x1700/0x20f0 [ 1054.159259][T11616] do_file_open+0x23e/0x4a0 [ 1054.159288][T11616] ? __pfx_do_file_open+0x10/0x10 [ 1054.159332][T11616] ? _raw_spin_unlock+0x28/0x50 [ 1054.159351][T11616] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.159374][T11616] ? alloc_fd+0x6af/0x760 [ 1054.159416][T11616] do_sys_openat2+0x115/0x200 [ 1054.159447][T11616] ? __pfx_do_sys_openat2+0x10/0x10 [ 1054.159482][T11616] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1054.159505][T11616] ? do_user_addr_fault+0xd3f/0x1480 [ 1054.159531][T11616] __x64_sys_openat+0x138/0x170 [ 1054.159565][T11616] do_syscall_64+0x166/0x520 [ 1054.159590][T11616] ? trace_irq_disable+0x3b/0x140 [ 1054.159612][T11616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.159638][T11616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.159658][T11616] RIP: 0033:0x7fb4aed5fd8e [ 1054.159676][T11616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1054.159692][T11616] RSP: 002b:00007fb4afc0cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1054.159713][T11616] RAX: ffffffffffffffda RBX: 00007fb4afc0d6c0 RCX: 00007fb4aed5fd8e [ 1054.159728][T11616] RDX: 0000000000000002 RSI: 00007fb4afc0cc00 RDI: ffffffffffffff9c [ 1054.159741][T11616] RBP: 00007fb4afc0cc00 R08: 0000000000000000 R09: 0000000000000000 [ 1054.159754][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1054.159767][T11616] R13: 00007fb4af026038 R14: 00007fb4af025fa0 R15: 00007ffdeb6b2a18 [ 1054.159799][T11616] [ 1054.253153][T10510] Bluetooth: hci1: command tx timeout [ 1054.638549][T11458] team0: Port device team_slave_1 added [ 1054.743235][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.743283][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.978011][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.978028][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.978051][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.045086][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.045101][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.045124][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.183293][T11620] loop3: detected capacity change from 0 to 512 [ 1055.199216][T11620] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1055.223746][T11620] EXT4-fs (loop3): 1 truncate cleaned up [ 1055.251322][T11620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.001183][ T29] audit: type=1800 audit(1792531328.755:249): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.817" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 1056.127226][T11458] hsr_slave_0: entered promiscuous mode [ 1056.130790][T11458] hsr_slave_1: entered promiscuous mode [ 1056.260069][T11458] debugfs: 'hsr0' already exists in 'hsr' [ 1056.260089][T11458] Cannot create hsr debugfs directory [ 1056.324429][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.334072][T10510] Bluetooth: hci1: command tx timeout [ 1056.541907][T11627] loop3: detected capacity change from 0 to 512 [ 1056.557695][T11627] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1056.584949][T11627] EXT4-fs (loop3): 1 truncate cleaned up [ 1056.653886][T11627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.356750][ T29] audit: type=1800 audit(1792531330.115:250): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.818" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 1057.637108][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.898517][ T5897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.899705][T11636] loop3: detected capacity change from 0 to 16 [ 1057.926234][T11636] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1058.413039][T10510] Bluetooth: hci1: command tx timeout [ 1058.506316][ T5897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.106190][ T5897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.682874][ T8811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.686149][ T8811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.686701][ T8811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.690519][ T8811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.692331][ T8811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.958874][ T5897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.158885][T11333] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1060.206160][T11333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.230580][T11333] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1060.290559][T11333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.398277][T11333] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1060.426528][T11333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.478875][T11333] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1060.545778][T11333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1060.667977][T11333] kthread_run failed with err -4 [ 1061.517080][ T5897] bridge_slave_1: left allmulticast mode [ 1061.517104][ T5897] bridge_slave_1: left promiscuous mode [ 1061.517280][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.555246][ T5897] bridge_slave_0: left allmulticast mode [ 1061.555266][ T5897] bridge_slave_0: left promiscuous mode [ 1061.555425][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.609382][ T5897] bridge_slave_1: left allmulticast mode [ 1061.609402][ T5897] bridge_slave_1: left promiscuous mode [ 1061.609550][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.645362][ T5897] bridge_slave_0: left allmulticast mode [ 1061.645381][ T5897] bridge_slave_0: left promiscuous mode [ 1061.645524][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.774137][ T8811] Bluetooth: hci3: command tx timeout [ 1062.128638][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.156836][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.189305][ T5897] bond0 (unregistering): Released all slaves [ 1063.852833][ T8811] Bluetooth: hci3: command tx timeout [ 1063.918071][T10510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1063.920797][T10510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1063.921625][T10510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1063.922371][T10510] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1063.953002][T10510] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1064.158083][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.188311][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.206981][ T5897] bond0 (unregistering): Released all slaves [ 1064.246848][ T5897] bond1 (unregistering): Released all slaves [ 1064.321043][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.321130][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.321280][T11578] bridge_slave_0: entered allmulticast mode [ 1064.351933][T11578] bridge_slave_0: entered promiscuous mode [ 1064.372312][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.395682][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.395804][T11578] bridge_slave_1: entered allmulticast mode [ 1064.420983][T11578] bridge_slave_1: entered promiscuous mode [ 1064.802064][T11578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.824188][T11578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.824789][ T5897] tipc: Left network mode [ 1065.771948][T10510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1065.786818][T11651] rxe_eth0 speed is unknown, defaulting to 1000 [ 1065.799307][T10510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1065.800090][T10510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1065.809578][T10510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1065.831728][T10510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1065.858579][T11578] team0: Port device team_slave_0 added [ 1065.898431][T11578] team0: Port device team_slave_1 added [ 1065.933226][T10510] Bluetooth: hci3: command tx timeout [ 1066.013345][T10510] Bluetooth: hci4: command tx timeout [ 1067.435372][T11578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.435389][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.435413][T11578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.438754][T11578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.438767][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.438791][T11578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.852857][T10510] Bluetooth: hci2: command tx timeout [ 1068.013733][T10510] Bluetooth: hci3: command tx timeout [ 1068.094461][T10510] Bluetooth: hci4: command tx timeout [ 1068.228539][T11675] rxe_eth0 speed is unknown, defaulting to 1000 [ 1068.377081][T11578] hsr_slave_0: entered promiscuous mode [ 1068.377911][T11578] hsr_slave_1: entered promiscuous mode [ 1068.393955][T11578] debugfs: 'hsr0' already exists in 'hsr' [ 1068.393972][T11578] Cannot create hsr debugfs directory [ 1069.512236][T11700] loop3: detected capacity change from 0 to 2048 [ 1069.514229][T11700] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1069.607990][T11682] rxe_eth0 speed is unknown, defaulting to 1000 [ 1069.932619][T10510] Bluetooth: hci2: command tx timeout [ 1069.957141][T11458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1069.984509][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.004804][T11458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.042111][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.174050][T10510] Bluetooth: hci4: command tx timeout [ 1070.524578][T11458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1070.545886][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.551389][T11458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1070.589009][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.670376][ T5897] hsr_slave_0: left promiscuous mode [ 1070.680085][ T5897] hsr_slave_1: left promiscuous mode [ 1070.680796][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.711318][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.739325][ T5897] hsr_slave_0: left promiscuous mode [ 1070.739890][ T5897] hsr_slave_1: left promiscuous mode [ 1070.740633][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.740650][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.774294][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.774313][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.809770][ T5897] veth1_macvtap: left promiscuous mode [ 1070.809800][ T5897] veth0_macvtap: left promiscuous mode [ 1070.809882][ T5897] veth1_vlan: left promiscuous mode [ 1070.809935][ T5897] veth0_vlan: left promiscuous mode [ 1072.329489][T10510] Bluetooth: hci2: command tx timeout [ 1072.329523][T10510] Bluetooth: hci4: command tx timeout [ 1072.777075][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1072.823631][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1073.579542][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1073.611627][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1074.001034][T11707] batadv0: entered allmulticast mode [ 1074.333904][ T8811] Bluetooth: hci2: command tx timeout [ 1074.762256][T11651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.762345][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.778587][T11651] bridge_slave_0: entered allmulticast mode [ 1074.798966][T11651] bridge_slave_0: entered promiscuous mode [ 1074.867280][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.867367][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.867472][T11651] bridge_slave_1: entered allmulticast mode [ 1074.897284][T11651] bridge_slave_1: entered promiscuous mode [ 1074.931151][ T5897] IPVS: stop unused estimator thread 0... [ 1075.329294][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.410804][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.638065][T11651] team0: Port device team_slave_0 added [ 1075.675884][T11651] team0: Port device team_slave_1 added [ 1076.094441][ T5897] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.158183][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.158200][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.158230][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.365603][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.365621][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.365646][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.646852][ T5897] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.960494][T11651] hsr_slave_0: entered promiscuous mode [ 1076.974537][T11651] hsr_slave_1: entered promiscuous mode [ 1077.158138][ T5897] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.511152][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.511310][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.511420][T11675] bridge_slave_0: entered allmulticast mode [ 1077.544327][T11675] bridge_slave_0: entered promiscuous mode [ 1077.557293][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.557377][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.557483][T11675] bridge_slave_1: entered allmulticast mode [ 1077.564693][T11675] bridge_slave_1: entered promiscuous mode [ 1077.826374][ T5897] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.849732][T11578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1077.868494][T11578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1078.997155][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.997251][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.997357][T11682] bridge_slave_0: entered allmulticast mode [ 1079.002176][T11682] bridge_slave_0: entered promiscuous mode [ 1079.047365][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.219077][T11578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1079.241436][T11578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1079.289239][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.289326][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.289432][T11682] bridge_slave_1: entered allmulticast mode [ 1079.315194][T11682] bridge_slave_1: entered promiscuous mode [ 1079.432365][T11578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1079.450254][T11578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1079.547760][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.570537][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.570597][T11578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1079.600071][T11578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1079.653434][T11682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.676107][T11682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.047276][T11675] team0: Port device team_slave_0 added [ 1080.060487][T11675] team0: Port device team_slave_1 added [ 1080.135767][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.169875][T11682] team0: Port device team_slave_0 added [ 1080.183903][T11682] team0: Port device team_slave_1 added [ 1080.507570][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.507587][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.507611][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.621180][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.621268][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.743226][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.743242][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.743266][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.885631][T11682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.885648][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.885672][T11682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.022735][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.022818][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.030996][T11682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.031009][T11682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.031033][T11682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.226089][T11675] hsr_slave_0: entered promiscuous mode [ 1081.231700][T11675] hsr_slave_1: entered promiscuous mode [ 1081.232296][T11675] debugfs: 'hsr0' already exists in 'hsr' [ 1081.232312][T11675] Cannot create hsr debugfs directory [ 1081.819264][T11682] hsr_slave_0: entered promiscuous mode [ 1081.821629][T11682] hsr_slave_1: entered promiscuous mode [ 1081.836876][T11682] debugfs: 'hsr0' already exists in 'hsr' [ 1081.836894][T11682] Cannot create hsr debugfs directory [ 1085.434208][T11578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.465144][ T5897] bridge_slave_1: left allmulticast mode [ 1085.465164][ T5897] bridge_slave_1: left promiscuous mode [ 1085.465333][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.495401][ T5897] bridge_slave_0: left allmulticast mode [ 1085.495419][ T5897] bridge_slave_0: left promiscuous mode [ 1085.495578][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.554736][ T5897] bridge_slave_1: left allmulticast mode [ 1085.554756][ T5897] bridge_slave_1: left promiscuous mode [ 1085.554910][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.561788][ T5897] bridge_slave_0: left allmulticast mode [ 1085.561805][ T5897] bridge_slave_0: left promiscuous mode [ 1085.561946][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.659348][ T5897] bridge_slave_1: left allmulticast mode [ 1085.659371][ T5897] bridge_slave_1: left promiscuous mode [ 1085.659531][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.689749][ T5897] bridge_slave_0: left allmulticast mode [ 1085.689768][ T5897] bridge_slave_0: left promiscuous mode [ 1085.689911][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.147508][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.167576][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.196387][ T5897] bond0 (unregistering): Released all slaves [ 1086.625004][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.647528][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.654347][ T5897] bond0 (unregistering): Released all slaves [ 1088.002645][T11808] loop3: detected capacity change from 0 to 8 [ 1088.691226][T11808] unable to read inode lookup table [ 1089.100030][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.123203][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.129117][ T5897] bond0 (unregistering): Released all slaves [ 1089.463361][T11578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.480939][T11651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1089.520198][T11651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.648505][T10510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1089.651100][T10510] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1089.651653][T10510] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1089.676576][T10510] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1089.677149][T10510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1089.771645][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.771732][T10895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.816989][T11651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1089.844614][T11651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1090.128440][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.128524][ T6509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.154490][T11651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1090.187104][T11651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1090.316695][T11651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1090.348771][T11651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.970696][T11835] loop3: detected capacity change from 0 to 164 [ 1090.971484][T11835] iso9660: Unknown parameter 'V' [ 1091.685233][T11651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.773092][T10510] Bluetooth: hci5: command tx timeout [ 1092.051095][T11651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.220237][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.220322][ T6509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.357874][T10894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.357959][T10894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.674705][T11817] rxe_eth0 speed is unknown, defaulting to 1000 [ 1092.680522][T11675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1092.724330][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.729675][T11675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1092.768136][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1092.807343][T11675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1092.849364][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.881652][T11675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1092.915829][T11675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.700680][T11682] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1093.758088][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.799220][T11682] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1093.834615][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.853532][T10510] Bluetooth: hci5: command tx timeout [ 1093.900858][T11682] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1093.939643][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.956305][T11682] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1093.997627][T11682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.445931][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.089159][T11578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.255996][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.405162][T10894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.405266][T10894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.519579][T10894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.519661][T10894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.758685][T11893] loop3: detected capacity change from 0 to 2048 [ 1095.777553][T11893] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1095.781001][T11682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.974894][T10510] Bluetooth: hci5: command tx timeout [ 1096.001129][ T5897] hsr_slave_0: left promiscuous mode [ 1096.001731][ T5897] hsr_slave_1: left promiscuous mode [ 1096.028008][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.031601][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.107475][ T5897] hsr_slave_0: left promiscuous mode [ 1096.119264][ T5897] hsr_slave_1: left promiscuous mode [ 1096.119950][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.119968][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.147644][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1096.147662][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.217725][ T5897] hsr_slave_0: left promiscuous mode [ 1096.232215][ T5897] hsr_slave_1: left promiscuous mode [ 1096.234112][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.262157][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.300700][ T5897] veth1_macvtap: left promiscuous mode [ 1096.300734][ T5897] veth0_macvtap: left promiscuous mode [ 1096.300815][ T5897] veth1_vlan: left promiscuous mode [ 1096.300886][ T5897] veth0_vlan: left promiscuous mode [ 1097.120578][T11907] loop3: detected capacity change from 0 to 1024 [ 1097.198023][T11907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1097.258392][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1097.311015][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1097.557514][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.016242][T10510] Bluetooth: hci5: command tx timeout [ 1098.607546][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1098.680700][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1099.834165][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1099.879706][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1100.637021][T11682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.727276][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.727364][ T5895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.800966][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.801052][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.399398][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.092016][T11817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.092103][T11817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.092219][T11817] bridge_slave_0: entered allmulticast mode [ 1102.128270][T11817] bridge_slave_0: entered promiscuous mode [ 1102.207359][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.207447][T11817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.207554][T11817] bridge_slave_1: entered allmulticast mode [ 1102.212279][T11817] bridge_slave_1: entered promiscuous mode [ 1102.337613][T11651] veth0_vlan: entered promiscuous mode [ 1102.403492][T11578] veth0_vlan: entered promiscuous mode [ 1102.432405][T11651] veth1_vlan: entered promiscuous mode [ 1102.581967][T11817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.650147][T11817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.693880][T11578] veth1_vlan: entered promiscuous mode [ 1102.949952][T11817] team0: Port device team_slave_0 added [ 1103.011838][T11817] team0: Port device team_slave_1 added [ 1103.451066][T11817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.451083][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.451106][T11817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.549864][T11817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.549880][T11817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.549904][T11817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.651975][T11578] veth0_macvtap: entered promiscuous mode [ 1103.871719][T11651] veth0_macvtap: entered promiscuous mode [ 1103.981647][T11578] veth1_macvtap: entered promiscuous mode [ 1104.131986][T11817] hsr_slave_0: entered promiscuous mode [ 1104.148462][T11817] hsr_slave_1: entered promiscuous mode [ 1104.149039][T11817] debugfs: 'hsr0' already exists in 'hsr' [ 1104.149056][T11817] Cannot create hsr debugfs directory [ 1104.149502][T11651] veth1_macvtap: entered promiscuous mode [ 1106.090124][T11675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.110208][T11578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.201838][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.226326][T11682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.450924][T11578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.617614][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.095099][T10895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095141][T10895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095175][T10895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095206][T10895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095244][T10895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095276][T10895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095308][T10895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.095339][T10895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.355828][ T5897] bridge_slave_1: left allmulticast mode [ 1107.355851][ T5897] bridge_slave_1: left promiscuous mode [ 1107.356016][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.392672][ T5897] bridge_slave_0: left allmulticast mode [ 1107.392691][ T5897] bridge_slave_0: left promiscuous mode [ 1107.392850][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.940034][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1107.959891][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1107.961134][ T5897] bond0 (unregistering): Released all slaves [ 1109.106721][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.106738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.387641][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.387660][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.458967][ T5897] hsr_slave_0: left promiscuous mode [ 1109.459518][ T5897] hsr_slave_1: left promiscuous mode [ 1109.460174][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.484019][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.219429][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1110.273815][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1110.874970][T11675] veth0_vlan: entered promiscuous mode [ 1111.163300][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.163319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.286441][T11675] veth1_vlan: entered promiscuous mode [ 1111.306339][T11682] veth0_vlan: entered promiscuous mode [ 1111.575267][T11817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1111.628021][T11817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.651904][T11817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1111.675757][T11817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.699931][T11682] veth1_vlan: entered promiscuous mode [ 1111.741311][T11817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1111.807176][T11817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.868493][T11817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1111.975345][T11817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1112.139445][ T8811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1112.141319][ T8811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1112.141848][ T8811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1112.169121][ T8811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1112.184665][ T8811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1112.244169][T11675] veth0_macvtap: entered promiscuous mode [ 1112.347888][T11675] veth1_macvtap: entered promiscuous mode [ 1112.437914][T11682] veth0_macvtap: entered promiscuous mode [ 1112.484846][T11682] veth1_macvtap: entered promiscuous mode [ 1112.611317][T11675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.697484][T11675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.946956][T11682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.960937][ T5898] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.960980][ T5898] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.961014][ T5898] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.961046][ T5898] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.051775][T11682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.364508][T10895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.610009][ T5895] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.610139][ T5895] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.610202][ T5895] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.610310][ T5895] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.745421][T10895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.842342][T11817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.996769][ T8811] Bluetooth: hci6: command tx timeout [ 1116.016191][T10895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.217953][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.218002][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.315045][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.315064][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.440043][T10895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.626480][T11817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.716806][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.716891][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.755747][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.755764][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.858353][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.858436][ T5895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.926406][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.926422][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.977785][T12088] loop3: detected capacity change from 0 to 1024 [ 1117.053379][T10510] Bluetooth: hci6: command tx timeout [ 1117.090798][T12088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.391666][T12058] rxe_eth0 speed is unknown, defaulting to 1000 [ 1117.406316][ T6509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.406332][ T6509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.631830][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.720684][T10895] bridge_slave_1: left allmulticast mode [ 1117.720708][T10895] bridge_slave_1: left promiscuous mode [ 1117.720884][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.774987][T10895] bridge_slave_0: left allmulticast mode [ 1117.775007][T10895] bridge_slave_0: left promiscuous mode [ 1117.775172][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.132513][T10510] Bluetooth: hci6: command tx timeout [ 1120.672203][T12111] loop9: detected capacity change from 0 to 1024 [ 1121.212930][T10510] Bluetooth: hci6: command tx timeout [ 1121.511493][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.543839][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.547333][T10895] bond0 (unregistering): Released all slaves [ 1129.371135][T10895] hsr_slave_0: left promiscuous mode [ 1129.409091][T10895] hsr_slave_1: left promiscuous mode [ 1129.409811][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.409828][T10895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.456239][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.456266][T10895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.522051][T10895] veth1_macvtap: left promiscuous mode [ 1129.522083][T10895] veth0_macvtap: left promiscuous mode [ 1129.522244][T10895] veth1_vlan: left promiscuous mode [ 1129.522306][T10895] veth0_vlan: left promiscuous mode [ 1132.619067][T12180] loop0: detected capacity change from 0 to 512 [ 1132.638099][T12180] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 1133.674805][T10895] team0 (unregistering): Port device team_slave_1 removed [ 1133.801341][T10895] team0 (unregistering): Port device team_slave_0 removed [ 1133.900450][T12186] loop0: detected capacity change from 0 to 2048 [ 1133.901312][T12186] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1137.139908][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.141620][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.141736][T12058] bridge_slave_0: entered allmulticast mode [ 1137.173368][T12058] bridge_slave_0: entered promiscuous mode [ 1137.217938][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.218024][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.218132][T12058] bridge_slave_1: entered allmulticast mode [ 1137.255955][T12058] bridge_slave_1: entered promiscuous mode [ 1137.601795][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.639699][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.832012][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 1137.926323][T12058] team0: Port device team_slave_0 added [ 1137.969126][T12058] team0: Port device team_slave_1 added [ 1138.228477][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.228494][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.228517][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.294435][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.294450][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.294473][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.506886][T12215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1138.506908][T12215] block device autoloading is deprecated and will be removed. [ 1140.251382][T12058] hsr_slave_0: entered promiscuous mode [ 1140.252201][T12058] hsr_slave_1: entered promiscuous mode [ 1140.277032][T12058] debugfs: 'hsr0' already exists in 'hsr' [ 1140.277049][T12058] Cannot create hsr debugfs directory [ 1140.719774][T11817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.055787][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.877'. [ 1141.080527][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.150299][T12237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.081514][T12244] FAULT_INJECTION: forcing a failure. [ 1142.081514][T12244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1142.081549][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.0.880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.081574][T12244] Tainted: [L]=SOFTLOCKUP [ 1142.081582][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1142.081594][T12244] Call Trace: [ 1142.081602][T12244] [ 1142.081611][T12244] dump_stack_lvl+0xe8/0x150 [ 1142.081645][T12244] should_fail_ex+0x410/0x560 [ 1142.081680][T12244] _copy_from_user+0x2d/0xb0 [ 1142.081702][T12244] bpf_obj_get_info_by_fd+0x681/0x3530 [ 1142.081733][T12244] ? lock_acquire+0x115/0x350 [ 1142.081756][T12244] ? futex_unqueue+0x22/0x240 [ 1142.081784][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.081811][T12244] ? futex_unqueue+0x22/0x240 [ 1142.081835][T12244] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 1142.081862][T12244] ? futex_unqueue+0x22/0x240 [ 1142.081890][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.081913][T12244] ? __lock_acquire+0x747/0x2de0 [ 1142.081947][T12244] ? __pfx___futex_wait+0x10/0x10 [ 1142.081972][T12244] ? __pfx_futex_wake_mark+0x10/0x10 [ 1142.081994][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082017][T12244] ? lock_acquire+0x115/0x350 [ 1142.082039][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082071][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082099][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082122][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082145][T12244] ? security_bpf+0x7e/0x2d0 [ 1142.082176][T12244] __sys_bpf+0xa50/0xd90 [ 1142.082209][T12244] ? __pfx___sys_bpf+0x10/0x10 [ 1142.082237][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082260][T12244] ? do_futex+0x3e7/0x4e0 [ 1142.082322][T12244] ? rcu_is_watching+0x16/0xb0 [ 1142.082348][T12244] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1142.082377][T12244] __x64_sys_bpf+0xba/0xd0 [ 1142.082403][T12244] do_syscall_64+0x166/0x520 [ 1142.082432][T12244] ? trace_irq_disable+0x3b/0x140 [ 1142.082454][T12244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.082479][T12244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.082499][T12244] RIP: 0033:0x7f2b9c99f559 [ 1142.082517][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.082534][T12244] RSP: 002b:00007f2b9d8a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1142.082554][T12244] RAX: ffffffffffffffda RBX: 00007f2b9cc25fa0 RCX: 00007f2b9c99f559 [ 1142.082569][T12244] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000f [ 1142.082582][T12244] RBP: 00007f2b9ca36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1142.082595][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.082607][T12244] R13: 00007f2b9cc26038 R14: 00007f2b9cc25fa0 R15: 00007ffffaaa5278 [ 1142.082638][T12244] [ 1142.204862][T12247] loop9: detected capacity change from 0 to 1024 [ 1142.496761][T11817] veth0_vlan: entered promiscuous mode [ 1142.527223][T12247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.606277][T11817] veth1_vlan: entered promiscuous mode [ 1143.111205][T11817] veth0_macvtap: entered promiscuous mode [ 1143.159138][T11682] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.185395][T11817] veth1_macvtap: entered promiscuous mode [ 1143.331514][T11817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.436830][T11817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.502666][ T114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.503367][ T114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.503402][ T114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.522591][T10895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.235152][T12273] loop7: detected capacity change from 0 to 512 [ 1145.256867][T12273] EXT4-fs: Ignoring removed nobh option [ 1145.342047][T12273] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1145.342091][T12273] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 1145.371664][T12273] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.885: inode has both inline data and extents flags [ 1145.371691][T12273] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1145.372604][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1145.372621][ C0] EXT4-fs (loop7): initial error at time 1792531418: ext4_orphan_get:1403: inode 13 [ 1145.372648][ C0] EXT4-fs (loop7): last error at time 1792531418: ext4_orphan_get:1403: inode 13 [ 1145.434252][T12273] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.885: couldn't read orphan inode 13 (err -117) [ 1145.434280][T12273] loop7: lost filesystem error report for type 5 error -117 [ 1145.462260][T12273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.668061][ T29] audit: type=1326 audit(1792531418.435:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.668111][ T29] audit: type=1326 audit(1792531418.435:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.737910][ T29] audit: type=1326 audit(1792531418.505:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.737956][ T29] audit: type=1326 audit(1792531418.505:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.807940][ T29] audit: type=1326 audit(1792531418.575:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.807986][ T29] audit: type=1326 audit(1792531418.575:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.808024][ T29] audit: type=1326 audit(1792531418.575:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.919969][ T29] audit: type=1326 audit(1792531418.685:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.920015][ T29] audit: type=1326 audit(1792531418.685:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1145.979859][ T29] audit: type=1326 audit(1792531418.745:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.7.885" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x7ffc0000 [ 1146.080026][T12058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1146.124686][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.144321][T12058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1146.149880][T12273] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 1146.184990][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.189212][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.189227][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.235196][T12058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1146.276545][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.335376][T12058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1146.367637][T12058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.545561][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.545581][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.666539][T12273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.216837][T12293] loop2: detected capacity change from 0 to 16 [ 1147.247030][T12293] erofs (device loop2): invalid ishare xattr prefix id 0 [ 1147.267364][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.409520][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.286555][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.286641][T10895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.362467][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.362553][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.315263][T12314] loop3: detected capacity change from 0 to 2048 [ 1152.371131][T12314] udf: Bad value for 'anchor' [ 1153.220927][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1153.335932][T12325] loop0: detected capacity change from 0 to 2048 [ 1153.363352][T12325] udf: Unknown parameter 'ÿÿÿÿÿÿ' [ 1156.766477][T12352] loop9: detected capacity change from 0 to 512 [ 1156.767309][T12352] EXT4-fs: Ignoring removed nobh option [ 1156.866713][T12352] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 1156.866757][T12352] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 1156.866824][T12352] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #13: comm syz.9.886: inode has both inline data and extents flags [ 1156.866845][T12352] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1156.870902][T12352] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.886: couldn't read orphan inode 13 (err -117) [ 1156.870928][T12352] loop9: lost filesystem error report for type 5 error -117 [ 1156.872472][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 1156.872490][ C0] EXT4-fs (loop9): initial error at time 1792531429: ext4_orphan_get:1403: inode 13 [ 1156.872516][ C0] EXT4-fs (loop9): last error at time 1792531429: ext4_orphan_get:1408 [ 1156.951407][T12352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.178172][T12357] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.179367][T12357] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.201958][T12352] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 1157.227798][T12357] bridge0: entered allmulticast mode [ 1157.304356][T12352] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 1157.547219][T12352] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.639770][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.879009][T12366] batadv0: entered allmulticast mode [ 1162.377244][T12387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1162.377265][T12387] block device autoloading is deprecated and will be removed. [ 1162.624073][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.913'. [ 1162.624186][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.748047][T12393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.227215][T12058] veth0_vlan: entered promiscuous mode [ 1163.309533][T12058] veth1_vlan: entered promiscuous mode [ 1163.540798][T12058] veth0_macvtap: entered promiscuous mode [ 1163.588595][T12058] veth1_macvtap: entered promiscuous mode [ 1164.684016][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.071574][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.276369][T10895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.276573][T10895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.276604][T10895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.276634][T10895] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.791823][T10895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.791843][T10895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.121287][T10895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.121307][T10895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.755062][T12424] loop3: detected capacity change from 0 to 512 [ 1166.783466][T12424] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1166.823974][T12424] EXT4-fs (loop3): 1 truncate cleaned up [ 1166.825377][T12424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.585073][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 1167.585091][ T29] audit: type=1800 audit(1792531440.345:365): pid=12428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.920" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 1167.923220][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.432010][T12480] loop6: detected capacity change from 0 to 164 [ 1173.432897][T12480] iso9660: Unknown parameter ' ' [ 1174.565352][T12491] loop6: detected capacity change from 0 to 164 [ 1174.566471][T12491] iso9660: Unknown parameter '' [ 1177.617689][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.617739][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.879116][ T29] audit: type=1326 audit(1792531451.645:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x0 [ 1178.880249][T12528] loop2: detected capacity change from 0 to 512 [ 1178.910307][T12528] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 1184.723530][ T29] audit: type=1326 audit(1792531457.485:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.723580][ T29] audit: type=1326 audit(1792531457.485:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.790955][ T29] audit: type=1326 audit(1792531457.555:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.791002][ T29] audit: type=1326 audit(1792531457.555:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.856290][ T29] audit: type=1326 audit(1792531457.625:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.856335][ T29] audit: type=1326 audit(1792531457.625:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.856406][ T29] audit: type=1326 audit(1792531457.625:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.975130][ T29] audit: type=1326 audit(1792531457.745:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1184.975177][ T29] audit: type=1326 audit(1792531457.745:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1185.047792][ T29] audit: type=1326 audit(1792531457.815:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.9.965" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1185.216639][T12556] Bluetooth: hci3: command 0x0406 tx timeout [ 1188.109940][T12598] loop2: detected capacity change from 0 to 512 [ 1188.146323][T12598] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1188.252558][T12598] EXT4-fs (loop2): 1 truncate cleaned up [ 1188.253954][T12598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.883638][T12615] overlayfs: failed to clone upperpath [ 1189.932664][T12596] Bluetooth: hci4: command 0x0406 tx timeout [ 1189.932720][T12596] Bluetooth: hci2: command 0x0406 tx timeout [ 1193.320399][T11817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.587942][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 1194.490113][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.987'. [ 1194.727831][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 1195.714235][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 1195.714253][ T29] audit: type=1326 audit(1792531468.485:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12666 comm="syz.7.971" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dea19f559 code=0x0 [ 1195.949778][T12672] loop2: detected capacity change from 0 to 1024 [ 1195.998829][T12672] hfsplus: failed to load catalog file [ 1197.125073][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 1199.378415][T12701] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 1199.627739][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 1199.646522][T12701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1199.797022][T12707] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1199.976469][T12708] bridge1: entered promiscuous mode [ 1200.061693][T12708] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1200.707496][ T29] audit: type=1326 audit(1792531473.475:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12721 comm="syz.9.1008" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff93f39f559 code=0x0 [ 1200.768498][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1008'. [ 1202.978487][T12758] loop0: detected capacity change from 0 to 32768 [ 1203.038494][T12758] JBD2: Ignoring recovery information on journal [ 1203.100746][T12758] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1203.190512][ T29] audit: type=1800 audit(1792531475.955:467): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1019" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1203.239709][ T29] audit: type=1800 audit(1792531475.995:468): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1019" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1208.378438][T12777] rxe_eth0 speed is unknown, defaulting to 1000 [ 1209.100167][T11651] ocfs2: Unmounting device (7,0) on (node local) [ 1212.327365][T12808] rxe_eth0 speed is unknown, defaulting to 1000 [ 1212.539210][T12811] netlink: 'syz.3.1029': attribute type 4 has an invalid length. [ 1212.909156][T12809] loop6: detected capacity change from 0 to 32768 [ 1213.021225][T12809] JBD2: Ignoring recovery information on journal [ 1213.096378][T12809] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1213.119595][T12814] xt_hashlimit: size too large, truncated to 1048576 [ 1213.206338][ T29] audit: type=1800 audit(1792531485.975:469): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1030" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 1213.248770][ T29] audit: type=1800 audit(1792531486.015:470): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1030" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 1215.334703][ T29] audit: type=1326 audit(1792531488.105:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.334752][ T29] audit: type=1326 audit(1792531488.105:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.534769][T12556] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.695355][ T29] audit: type=1326 audit(1792531488.465:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.695402][ T29] audit: type=1326 audit(1792531488.465:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.812215][ T29] audit: type=1326 audit(1792531488.575:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.812261][ T29] audit: type=1326 audit(1792531488.575:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.876640][ T29] audit: type=1326 audit(1792531488.645:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1215.876687][ T29] audit: type=1326 audit(1792531488.645:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12820 comm="syz.3.1032" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aed9f559 code=0x7ffc0000 [ 1216.363726][T12058] ocfs2: Unmounting device (7,6) on (node local) [ 1216.520443][T12824] loop0: detected capacity change from 0 to 2048 [ 1216.611874][T12824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1218.328660][T12839] xt_hashlimit: size too large, truncated to 1048576 [ 1223.343491][T12874] loop2: detected capacity change from 0 to 32768 [ 1223.704712][T12874] JBD2: Ignoring recovery information on journal [ 1223.786374][T12874] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1223.848854][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 1223.848870][ T29] audit: type=1800 audit(1792531496.615:530): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1224.015193][ T29] audit: type=1800 audit(1792531496.785:531): pid=12874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1226.494389][T12882] loop3: detected capacity change from 0 to 1024 [ 1226.809409][T11817] ocfs2: Unmounting device (7,2) on (node local) [ 1228.502410][T12900] loop2: detected capacity change from 0 to 2048 [ 1228.566049][T12903] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1228.712679][T12903] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1228.712706][T12903] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1228.718759][T12903] Remounting filesystem read-only [ 1228.720433][T11817] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1234.863098][T12917] rxe_eth0 speed is unknown, defaulting to 1000 [ 1235.987302][T12925] loop0: detected capacity change from 0 to 32768 [ 1236.015339][T12556] Bluetooth: hci6: command 0x0406 tx timeout [ 1236.083253][T12925] JBD2: Ignoring recovery information on journal [ 1236.535115][T12925] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1236.801743][ T29] audit: type=1800 audit(1792531509.565:532): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1065" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1236.848399][ T29] audit: type=1800 audit(1792531509.615:533): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1065" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1237.190236][T12556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1237.201141][T12556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1237.201781][T12556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1237.227222][T12556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1237.283938][T12556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1239.121473][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.121522][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.396907][T11651] ocfs2: Unmounting device (7,0) on (node local) [ 1239.459141][T12556] Bluetooth: hci1: command tx timeout [ 1241.540617][T12556] Bluetooth: hci1: command tx timeout [ 1241.797078][ T29] audit: type=1326 audit(1792531514.565:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.7.1074" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dea19f559 code=0x0 [ 1241.847627][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1242.029336][T10895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.740895][T10895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.039228][T10895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.333560][T10895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.452172][T12940] rxe_eth0 speed is unknown, defaulting to 1000 [ 1243.588215][T12987] loop2: detected capacity change from 0 to 2048 [ 1243.614277][T12556] Bluetooth: hci1: command tx timeout [ 1243.697814][T12987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1244.468016][T12995] loop3: detected capacity change from 0 to 32768 [ 1244.537926][T12995] JBD2: Ignoring recovery information on journal [ 1244.586194][T10895] bridge_slave_1: left allmulticast mode [ 1244.586217][T10895] bridge_slave_1: left promiscuous mode [ 1244.586387][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.630330][T12995] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1244.664880][T10895] bridge_slave_0: left allmulticast mode [ 1244.671942][T10895] bridge_slave_0: left promiscuous mode [ 1244.672119][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.774512][ T29] audit: type=1800 audit(1792531517.545:535): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1067" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1245.257565][T12995] (syz.3.1067,12995,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28 [ 1245.693467][T12556] Bluetooth: hci1: command tx timeout [ 1245.857407][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 1248.447672][T10895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1248.476661][T10895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.506427][T10895] bond0 (unregistering): Released all slaves [ 1248.599081][T13016] tipc: Started in network mode [ 1248.599100][T13016] tipc: Node identity 4, cluster identity 4711 [ 1248.599111][T13016] tipc: Node number set to 4 [ 1252.956468][T13051] loop2: detected capacity change from 0 to 32768 [ 1253.222738][T13051] JBD2: Ignoring recovery information on journal [ 1253.253853][T13053] loop0: detected capacity change from 0 to 512 [ 1253.281779][T13058] netlink: 'syz.7.1093': attribute type 4 has an invalid length. [ 1253.293167][T13053] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1253.324800][T13051] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1253.373814][T13053] EXT4-fs (loop0): 1 truncate cleaned up [ 1253.462699][ T29] audit: type=1800 audit(1792531526.225:536): pid=13051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1091" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1253.506710][T13053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.569150][T13057] rxe_eth0 speed is unknown, defaulting to 1000 [ 1254.593880][ T29] audit: type=1800 audit(1792531527.355:537): pid=13070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1092" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 1255.518232][T11651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.783469][T13076] netlink: 'syz.9.1095': attribute type 1 has an invalid length. [ 1255.999203][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1095'. [ 1258.800445][T11817] ocfs2: Unmounting device (7,2) on (node local) [ 1258.870129][T13076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1259.134959][T13079] bridge2: entered promiscuous mode [ 1259.200105][T13079] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1259.528957][T10895] hsr_slave_0: left promiscuous mode [ 1259.582724][T10895] hsr_slave_1: left promiscuous mode [ 1259.583772][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.583790][T10895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.715534][T10895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.715556][T10895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.888171][T10895] veth1_macvtap: left promiscuous mode [ 1259.888206][T10895] veth0_macvtap: left promiscuous mode [ 1259.888287][T10895] veth1_vlan: left promiscuous mode [ 1259.888357][T10895] veth0_vlan: left promiscuous mode [ 1260.491750][ T29] audit: type=1326 audit(1792531533.255:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13099 comm="syz.0.1102" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b9c99f559 code=0x0 [ 1260.586081][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 1265.684914][T13128] loop3: detected capacity change from 0 to 32768 [ 1265.734893][T13128] JBD2: Ignoring recovery information on journal [ 1265.810615][T13128] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1265.878479][ T29] audit: type=1800 audit(1792531538.645:539): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1265.918434][ T29] audit: type=1800 audit(1792531538.685:540): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1110" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1266.201885][T10895] team0 (unregistering): Port device team_slave_1 removed [ 1266.254790][T13128] (syz.3.1110,13128,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28 [ 1266.320133][T10895] team0 (unregistering): Port device team_slave_0 removed [ 1266.790584][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 1268.580465][T13158] loop3: detected capacity change from 0 to 32768 [ 1268.679002][T13158] JBD2: Ignoring recovery information on journal [ 1268.754861][T13158] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1268.839599][ T29] audit: type=1800 audit(1792531541.605:541): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1268.867722][ T29] audit: type=1800 audit(1792531541.635:542): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1269.327540][T13167] loop2: detected capacity change from 0 to 32768 [ 1269.356971][T13167] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1269.394205][T13167] JBD2: Ignoring recovery information on journal [ 1269.430657][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.430743][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.430849][T12940] bridge_slave_0: entered allmulticast mode [ 1269.492467][T12940] bridge_slave_0: entered promiscuous mode [ 1269.527869][T13167] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1269.629758][T12940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.704008][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.704165][T12940] bridge_slave_1: entered allmulticast mode [ 1270.161652][T12940] bridge_slave_1: entered promiscuous mode [ 1271.659632][ T29] audit: type=1800 audit(1792531544.425:543): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1121" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1272.188763][T12940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.276250][T12940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.986210][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 1274.056521][T12940] team0: Port device team_slave_0 added [ 1274.107052][T12940] team0: Port device team_slave_1 added [ 1274.130776][T11817] ocfs2: Unmounting device (7,2) on (node local) [ 1274.442610][T12940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.442627][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.442651][T12940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.764139][T13196] loop3: detected capacity change from 0 to 512 [ 1274.774347][T12940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.774361][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.774386][T12940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.891361][T13196] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1274.909322][T13196] EXT4-fs error (device loop3) in ext4_process_orphan:346: Out of memory [ 1274.909342][T13196] loop3: lost filesystem error report for type 5 error -12 [ 1274.912483][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1274.912502][ C0] EXT4-fs (loop3): initial error at time 1792531547: ext4_process_orphan:346 [ 1274.912540][ C0] EXT4-fs (loop3): last error at time 1792531547: ext4_process_orphan:346 [ 1274.989638][T13196] EXT4-fs (loop3): 1 truncate cleaned up [ 1275.014502][T13196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.317609][T12940] hsr_slave_0: entered promiscuous mode [ 1275.349397][T12940] hsr_slave_1: entered promiscuous mode [ 1275.362199][T12940] debugfs: 'hsr0' already exists in 'hsr' [ 1275.362221][T12940] Cannot create hsr debugfs directory [ 1275.798026][ T5612] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.272375][T13208] loop0: detected capacity change from 0 to 32768 [ 1276.351081][T13208] JBD2: Ignoring recovery information on journal [ 1276.400890][T13208] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1276.516469][ T29] audit: type=1800 audit(1792531549.285:544): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1131" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 1277.005278][T13220] xt_hashlimit: size too large, truncated to 1048576 [ 1279.192959][T11651] ocfs2: Unmounting device (7,0) on (node local) [ 1287.841913][T12940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1287.884496][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1287.948345][T13272] loop3: detected capacity change from 0 to 1024 [ 1287.950516][T12940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1288.003361][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1288.026874][T12940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1288.096771][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1288.118752][T12940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1288.175235][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1288.514089][T13283] loop2: detected capacity change from 0 to 32768 [ 1288.569648][T13283] JBD2: Ignoring recovery information on journal [ 1288.615306][T13283] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1288.735087][ T29] audit: type=1800 audit(1792531561.505:545): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1288.775995][ T29] audit: type=1800 audit(1792531561.545:546): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1289.518172][T13283] (syz.2.1148,13283,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28 [ 1289.791461][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1289.932023][T12940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1289.997520][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.997614][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.076256][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.076339][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.301364][T11817] ocfs2: Unmounting device (7,2) on (node local) [ 1294.856566][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1158'. [ 1297.055037][T13323] bridge3: entered promiscuous mode [ 1300.624639][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.624690][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.860060][T10510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1300.861725][T10510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1300.862276][T10510] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1300.898132][T10510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1300.898653][T10510] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1302.072307][T12556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1302.086428][T12556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1302.090478][T12556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1303.062211][T12556] Bluetooth: hci6: command tx timeout [ 1303.076808][T12556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1303.079818][T12556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1304.883982][ T29] audit: type=1326 audit(1792531577.655:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1304.884031][ T29] audit: type=1326 audit(1792531577.655:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1304.958530][ T29] audit: type=1326 audit(1792531577.725:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1304.958585][ T29] audit: type=1326 audit(1792531577.725:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1305.035414][ T29] audit: type=1326 audit(1792531577.805:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff93f39f559 code=0x7ffc0000 [ 1305.070103][ T29] audit: type=1326 audit(1792531577.835:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93f35fd8e code=0x7ffc0000 [ 1305.103398][ T29] audit: type=1326 audit(1792531577.875:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93f35fd8e code=0x7ffc0000 [ 1305.106532][ T29] audit: type=1326 audit(1792531577.875:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93f35fd8e code=0x7ffc0000 [ 1305.111100][ T29] audit: type=1326 audit(1792531577.875:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93f35fd8e code=0x7ffc0000 [ 1305.138486][T12556] Bluetooth: hci6: command tx timeout [ 1305.169090][ T29] audit: type=1326 audit(1792531577.945:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.9.1167" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff93f35fd8e code=0x7ffc0000 [ 1306.099137][T12556] Bluetooth: hci7: command tx timeout [ 1307.212647][T12556] Bluetooth: hci6: command tx timeout [ 1307.767873][T13398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1307.902906][T13403] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1308.270913][T12556] Bluetooth: hci7: command tx timeout [ 1309.584391][T13411] loop2: detected capacity change from 0 to 2048 [ 1309.585579][T12556] Bluetooth: hci6: command tx timeout [ 1309.657932][T13413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1309.803825][T13413] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1309.803853][T13413] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1309.811268][T13413] Remounting filesystem read-only [ 1309.848493][T11817] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1309.973184][T13351] rxe_eth0 speed is unknown, defaulting to 1000 [ 1310.333360][T12556] Bluetooth: hci7: command tx timeout [ 1311.020699][ T5891] bridge_slave_1: left allmulticast mode [ 1311.020723][ T5891] bridge_slave_1: left promiscuous mode [ 1311.020882][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.085883][ T5891] bridge_slave_0: left allmulticast mode [ 1311.085905][ T5891] bridge_slave_0: left promiscuous mode [ 1311.121632][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.413544][T12556] Bluetooth: hci7: command tx timeout [ 1312.819320][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.860683][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.879025][ T5891] bond0 (unregistering): Released all slaves [ 1312.994711][T13365] rxe_eth0 speed is unknown, defaulting to 1000 [ 1314.754998][T13442] loop3: detected capacity change from 0 to 32768 [ 1316.087460][T13442] JBD2: Ignoring recovery information on journal [ 1316.148602][T13442] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1316.228086][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 1316.228103][ T29] audit: type=1800 audit(1792531588.995:597): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1176" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1316.722041][T13442] (syz.3.1176,13442,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28 [ 1317.276299][ T5612] ocfs2: Unmounting device (7,3) on (node local) [ 1317.447560][T13455] overlayfs: missing 'lowerdir' [ 1318.407750][ T5891] hsr_slave_0: left promiscuous mode [ 1318.436719][ T5891] hsr_slave_1: left promiscuous mode [ 1318.437438][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.461951][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.983501][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1320.879640][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1320.900831][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.924956][ T9] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1320.924981][ T9] usb 3-1: Product: syz [ 1320.924995][ T9] usb 3-1: Manufacturer: syz [ 1320.925065][ T9] usb 3-1: SerialNumber: syz [ 1321.042269][ T9] usb 3-1: config 0 descriptor?? [ 1321.187931][ T9] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 1321.188380][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 1321.188440][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 1321.275386][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 1322.389529][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1324.424771][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 1324.551792][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1324.554076][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 1324.590565][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1324.640719][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 1324.693004][ T9] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1324.816908][ T9] usb 3-1: USB disconnect, device number 2 [ 1324.904958][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 1324.928763][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1325.050772][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1325.084128][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 1325.189504][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1325.514648][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1325.545177][ T9] keyspan 3-1:0.0: device disconnected [ 1326.454311][T13351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.454413][T13351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.454523][T13351] bridge_slave_0: entered allmulticast mode [ 1326.489204][T13351] bridge_slave_0: entered promiscuous mode [ 1326.514428][T13351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.514513][T13351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.514628][T13351] bridge_slave_1: entered allmulticast mode [ 1326.561632][T13351] bridge_slave_1: entered promiscuous mode [ 1327.003354][T13351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.005966][T13351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.794979][T13351] team0: Port device team_slave_0 added [ 1329.871217][T13351] team0: Port device team_slave_1 added [ 1330.116632][T13351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.116648][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.116672][T13351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.180210][T13351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.180225][T13351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.180248][T13351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.467068][ T5897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.097690][ T5897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.264650][T13351] hsr_slave_0: entered promiscuous mode [ 1331.267214][T13351] hsr_slave_1: entered promiscuous mode [ 1331.285982][T13351] debugfs: 'hsr0' already exists in 'hsr' [ 1331.286000][T13351] Cannot create hsr debugfs directory [ 1331.531971][ T5897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.605352][T13522] ip_tables: iptables: counters copy to user failed while replacing table [ 1334.062379][ T5897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.252336][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.252497][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.252630][T13365] bridge_slave_0: entered allmulticast mode [ 1335.399067][T13365] bridge_slave_0: entered promiscuous mode [ 1335.421079][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.439181][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.439298][T13365] bridge_slave_1: entered allmulticast mode [ 1335.474090][T13365] bridge_slave_1: entered promiscuous mode [ 1335.812384][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.815880][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.450530][T13365] team0: Port device team_slave_0 added [ 1336.487709][T13365] team0: Port device team_slave_1 added [ 1337.074604][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.074627][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.074651][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.170378][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.170396][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.170420][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.313936][ T5897] bridge_slave_1: left allmulticast mode [ 1338.313960][ T5897] bridge_slave_1: left promiscuous mode [ 1338.314127][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.346819][ T5897] bridge_slave_0: left allmulticast mode [ 1338.346838][ T5897] bridge_slave_0: left promiscuous mode [ 1338.347000][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.589167][T13583] loop3: detected capacity change from 0 to 2048 [ 1343.643571][T13583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1344.102104][ T5897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.160269][ T5897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.179387][ T5897] bond0 (unregistering): Released all slaves [ 1344.540560][ T5897] tipc: Left network mode [ 1344.781862][T13365] hsr_slave_0: entered promiscuous mode [ 1344.792357][T13365] hsr_slave_1: entered promiscuous mode [ 1344.805804][T13365] debugfs: 'hsr0' already exists in 'hsr' [ 1344.805821][T13365] Cannot create hsr debugfs directory [ 1345.321278][T13612] fuse: Bad value for 'fd' [ 1346.087879][T13624] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 1346.455514][T13624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1346.824827][ T5897] hsr_slave_0: left promiscuous mode [ 1346.846419][ T5897] hsr_slave_1: left promiscuous mode [ 1346.847109][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.847127][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.928880][ T5897] veth1_macvtap: left promiscuous mode [ 1346.928912][ T5897] veth0_macvtap: left promiscuous mode [ 1346.928993][ T5897] veth1_vlan: left promiscuous mode [ 1346.929061][ T5897] veth0_vlan: left promiscuous mode [ 1347.183639][T13634] xt_hashlimit: size too large, truncated to 1048576 [ 1347.754179][T13645] overlayfs: failed to clone upperpath [ 1347.795577][T13645] overlayfs: missing 'lowerdir' [ 1347.830727][T13647] xt_hashlimit: size too large, truncated to 1048576 [ 1348.310149][ T5897] team0 (unregistering): Port device team_slave_1 removed [ 1348.416181][ T5897] team0 (unregistering): Port device team_slave_0 removed [ 1350.490802][T13351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1350.541489][T13351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.558005][T13351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1350.599293][T13351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.658715][T13351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1350.727858][T13351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.744980][T13351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1350.781664][T13351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1351.097028][T13669] loop3: detected capacity change from 0 to 2048 [ 1351.126902][T13669] udf: Bad value for 'anchor' [ 1352.299727][T13695] xt_hashlimit: size too large, truncated to 1048576 [ 1352.662909][T13351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.775495][T13351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.826255][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.826337][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.992166][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.992252][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.316127][T13365] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1353.347627][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1353.389788][T13365] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1353.416704][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1353.443899][T13365] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1353.478219][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1353.494308][T13365] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1353.531982][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.178580][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.194182][T13723] loop2: detected capacity change from 0 to 1024 [ 1354.329389][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.377281][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.377369][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.449693][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.449783][ T5898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.733051][ T32] INFO: task kworker/0:7:10394 blocked for more than 143 seconds. [ 1358.733077][ T32] Tainted: G L syzkaller #0 [ 1358.733088][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1358.733097][ T32] task:kworker/0:7 state:D stack:24520 pid:10394 tgid:10394 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1358.733156][ T32] Workqueue: events drain_vmap_area_work [ 1358.733186][ T32] Call Trace: [ 1358.733194][ T32] [ 1358.733207][ T32] __schedule+0x17dd/0x5940 [ 1358.733235][ T32] ? update_protect_slice+0x128/0x210 [ 1358.733270][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733294][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1358.733327][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733353][ T32] ? __pfx___schedule+0x10/0x10 [ 1358.733382][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733408][ T32] ? schedule+0x90/0x2b0 [ 1358.733435][ T32] schedule+0x164/0x2b0 [ 1358.733460][ T32] schedule_timeout+0xc0/0x2c0 [ 1358.733481][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1358.733501][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733524][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1358.733556][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733588][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.733612][ T32] ? wait_for_completion+0x272/0x5e0 [ 1358.733638][ T32] wait_for_completion+0x2ca/0x5e0 [ 1358.733679][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1358.733707][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733734][ T32] ? __flush_work+0x101/0xca0 [ 1358.733770][ T32] __flush_work+0xa63/0xca0 [ 1358.733800][ T32] ? reclaim_list_global+0x137c/0x13b0 [ 1358.733826][ T32] ? __flush_work+0x101/0xca0 [ 1358.733859][ T32] ? __pfx___flush_work+0x10/0x10 [ 1358.733892][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 1358.733933][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733962][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.733989][ T32] ? flush_work+0xd/0x30 [ 1358.734023][ T32] __purge_vmap_area_lazy+0x880/0xb40 [ 1358.734054][ T32] ? process_scheduled_works+0x97a/0x1630 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1358.734083][ T32] drain_vmap_area_work+0x27/0x40 [ 1358.734106][ T32] process_scheduled_works+0xc3d/0x1630 [ 1358.734135][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.734188][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1358.734223][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.734246][ T32] ? assign_work+0x3cf/0x5d0 [ 1358.734280][ T32] worker_thread+0xa47/0xfb0 [ 1358.734311][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.734345][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.734369][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1358.734410][ T32] kthread+0x38b/0x480 [ 1358.734431][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1358.734461][ T32] ? __pfx_kthread+0x10/0x10 [ 1358.952259][ T32] ret_from_fork+0x514/0xb70 [ 1358.952291][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.952311][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1358.952336][ T32] ? __switch_to+0xc89/0x1420 [ 1358.952368][ T32] ? __pfx_kthread+0x10/0x10 [ 1358.952392][ T32] ret_from_fork_asm+0x1a/0x30 [ 1358.952431][ T32] [ 1358.952531][ T32] [ 1358.952531][ T32] Showing all locks held in the system: [ 1358.952543][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 1358.952558][ T32] #0: ffffffff8fc36598 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1358.952616][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1358.952631][ T32] #0: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1358.952691][ T32] locks held by kworker/u8:3/50: 6, last CPU#0: [ 1358.952705][ T32] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.952763][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.952820][ T32] #2: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1358.952874][ T32] #3: ffffffff8fe38aa0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1358.952928][ T32] #4: ffffffff8fbff7e0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1358.952988][ T32] #5: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1358.953051][ T32] locks held by kworker/0:2/189: 4, on CPU#0: [ 1358.953065][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.953121][ T32] #1: ffffc9000300fc40 (((io_key_has_sqarray).work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.953178][ T32] #2: ffffffff8fbe99b0 (cpu_hotplug_lock){++++}-{0:0}, at: jump_label_update_timeout+0x16/0x30 [ 1358.953232][ T32] #3: ffffffff8fe38aa0 (jump_label_mutex){+.+.}-{4:4}, at: __static_key_slow_dec_cpuslocked+0x3a/0x110 [ 1358.953291][ T32] locks held by kworker/u8:9/1290: 3, last CPU#0: [ 1358.953306][ T32] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.953363][ T32] #1: ffffc90005817c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1358.953421][ T32] #2: ffff888033ade258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1358.953496][ T32] locks held by getty/5366: 2, on CPU#0: [ 1358.953510][ T32] #0: ffff8880362230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1358.953565][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1358.953615][ T32] locks held by syz-executor/5612: 1, last CPU#0: [ 1358.953629][ T32] #0: ffff88807a4be460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1358.953693][ T32] locks held by kworker/0:6/5752: 2, last CPU#0: [ 1358.953708][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115314][ T32] #1: ffffc90004b1fc40 ((work_completion)(&vn->purge_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115377][ T32] locks held by kworker/u8:18/5898: 3, on CPU#0: [ 1359.115392][ T32] #0: ffff88803332e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115449][ T32] #1: ffffc90004fb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115506][ T32] #2: ffffffff91256cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1359.115557][ T32] locks held by kworker/u8:20/6510: 2, on CPU#0: [ 1359.115571][ T32] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115627][ T32] #1: ffffc90002597c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115692][ T32] locks held by kworker/0:7/10394: 3, on CPU#0: [ 1359.115707][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115762][ T32] #1: ffffc90004b4fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1359.115818][ T32] #2: ffffffff8fe8bda0 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 1359.115873][ T32] locks held by syz-executor/11675: 4, last CPU#0: [ 1359.115888][ T32] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1359.115942][ T32] #1: ffff88802add0f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1359.115992][ T32] #2: ffff888031633440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1359.116046][ T32] #3: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1359.116106][ T32] locks held by syz-executor/11682: 1, last CPU#0: [ 1359.116120][ T32] #0: ffff888036b4a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1359.116183][ T32] locks held by syz-executor/13351: 2, last CPU#0: [ 1359.116198][ T32] #0: ffff88803296e540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1359.116245][ T32] #1: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1359.116304][ T32] locks held by syz-executor/13365: 1, last CPU#0: [ 1359.116318][ T32] #0: ffffffff91256cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1359.116372][ T32] locks held by modprobe/13756: 2, last CPU#0: [ 1359.116386][ T32] #0: ffffffff904f3d78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1359.116443][ T32] #1: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1359.116497][ T32] locks held by rm/13757: 2, last CPU#0: [ 1359.116511][ T32] #0: ffff88802add1bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1359.116558][ T32] #1: ffffffff8fd5c960 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1359.116611][ T32] [ 1359.116618][ T32] ============================================= [ 1359.116618][ T32] [ 1359.116627][ T32] NMI backtrace for cpu 0 [ 1359.116642][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.116673][ T32] Tainted: [L]=SOFTLOCKUP [ 1359.116681][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1359.116693][ T32] Call Trace: [ 1359.116702][ T32] [ 1359.116710][ T32] dump_stack_lvl+0xe8/0x150 [ 1359.116742][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1359.116763][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1359.116802][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1359.116826][ T32] sys_info+0x135/0x170 [ 1359.116855][ T32] watchdog+0xfd7/0x1030 [ 1359.116886][ T32] ? watchdog+0x1c7/0x1030 [ 1359.116915][ T32] kthread+0x38b/0x480 [ 1359.116936][ T32] ? __pfx_watchdog+0x10/0x10 [ 1359.116956][ T32] ? __pfx_kthread+0x10/0x10 [ 1359.116978][ T32] ret_from_fork+0x514/0xb70 [ 1359.117001][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1359.117021][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.117044][ T32] ? __switch_to+0xc89/0x1420 [ 1359.117076][ T32] ? __pfx_kthread+0x10/0x10 [ 1359.117098][ T32] ret_from_fork_asm+0x1a/0x30 [ 1359.117132][ T32] [ 1359.347108][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1359.906635][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.917293][ T32] Tainted: [L]=SOFTLOCKUP [ 1359.921589][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1359.931618][ T32] Call Trace: [ 1359.934875][ T32] [ 1359.937882][ T32] vpanic+0x56d/0xa60 [ 1359.941859][ T32] ? __pfx___schedule+0x10/0x10 [ 1359.946694][ T32] ? __pfx_vpanic+0x10/0x10 [ 1359.951186][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1359.956825][ T32] panic+0xc5/0xd0 [ 1359.960534][ T32] ? __pfx_panic+0x10/0x10 [ 1359.964935][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1359.970378][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1359.975731][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1359.981865][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1359.988002][ T32] watchdog+0x1030/0x1030 [ 1359.992320][ T32] ? watchdog+0x1c7/0x1030 [ 1359.996722][ T32] kthread+0x38b/0x480 [ 1360.000772][ T32] ? __pfx_watchdog+0x10/0x10 [ 1360.005427][ T32] ? __pfx_kthread+0x10/0x10 [ 1360.009999][ T32] ret_from_fork+0x514/0xb70 [ 1360.014569][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1360.019695][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1360.025310][ T32] ? __switch_to+0xc89/0x1420 [ 1360.029988][ T32] ? __pfx_kthread+0x10/0x10 [ 1360.034558][ T32] ret_from_fork_asm+0x1a/0x30 [ 1360.039313][ T32] [ 1360.042345][ T32] Kernel Offset: disabled [ 1360.046646][ T32] Rebooting in 86400 seconds..