last executing test programs: 1m49.417662026s ago: executing program 2 (id=19): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003ac0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1m40.869827033s ago: executing program 2 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xe3, 0xe9a, 0x0, 0x8000008, 0x5, 0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffb9, 0x7, 0x0, 0x55a}) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x4}, {@multicast2}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x94) 1m37.974262737s ago: executing program 2 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003ac0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1m32.414644371s ago: executing program 2 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x19) 1m26.115845018s ago: executing program 2 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xe3, 0xe9a, 0x0, 0x8000008, 0x5, 0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffb9, 0x7, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800080, 0x66a9, 0xb, 0x8007, 0x80a, 0x558}) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x4}, {@multicast2}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0}, 0x94) 1m23.967725868s ago: executing program 2 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setresuid(0x0, 0x0, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) 1m8.845530149s ago: executing program 32 (id=34): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setresuid(0x0, 0x0, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) 26.165283948s ago: executing program 0 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 22.828490335s ago: executing program 0 (id=81): syz_usb_connect(0x0, 0x43, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() unshare(0x28000600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003ac0)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 21.019512302s ago: executing program 0 (id=82): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfb, 0x2b0, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2b, 0x0, &(0x7f0000000b40)=0x8) keyctl$read(0xb, 0x0, &(0x7f0000000440)=""/251, 0xfb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) 15.945088569s ago: executing program 1 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) flock(r6, 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r5}, 0x10) 14.831153558s ago: executing program 0 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)={[{@fat=@uid}, {@utf8}, {@utf8no}, {@utf8}, {@shortname_win95}, {@fat=@errors_remount}, {@shortname_winnt}]}, 0x3, 0x21f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, r4, 0x0) ioctl$FIBMAP(r3, 0x1, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14.828488528s ago: executing program 1 (id=88): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a2072776d0022e0e429f7dfa3d87d053bf08f080303f8d6d103e59d3dc48ad1265c7be7580a"], 0xa) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 13.38200958s ago: executing program 1 (id=89): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) flock(r7, 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r6}, 0x10) 11.297561034s ago: executing program 3 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3}, 0x28) setns(0xffffffffffffffff, 0x40000000) 10.848053448s ago: executing program 0 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000000)="f461a9bbc95c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 10.249976927s ago: executing program 3 (id=93): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) flock(r7, 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r6}, 0x10) 9.643983196s ago: executing program 4 (id=47): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x2) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1, 0x1000000, @b}, 0x48, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.129588216s ago: executing program 3 (id=94): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./bus\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfb, 0x2b0, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ptrace$getenv(0x4201, r1, 0x7, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) getsockopt$packet_int(r4, 0x107, 0x12, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2b, 0x0, &(0x7f0000000b40)=0x8) keyctl$read(0xb, 0x0, &(0x7f0000000440)=""/251, 0xfb) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) quotactl_fd$Q_SYNC(r2, 0xffffffff80000101, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) 8.030966514s ago: executing program 3 (id=95): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000003ac0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 8.029984654s ago: executing program 1 (id=103): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000003ac0)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 4.488162311s ago: executing program 4 (id=96): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a2072776d0022e0e429f7dfa3d87d053bf08f080303f8d6d103e59d3dc48ad1265c7be7580a"], 0xa) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r3 = openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 4.484065691s ago: executing program 1 (id=97): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="050f110001050000007e0000000ff08000"]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) ioctl(0xffffffffffffffff, 0x9, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x1, 0x1, 0x8, 0xa5c, 0xe97c}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 1.316093782s ago: executing program 4 (id=98): syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="050f110001050000007e0000000ff08000"]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a224000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) ioctl(0xffffffffffffffff, 0x9, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x1, 0x1, 0x8, 0xa5c, 0xe97c}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) 1.195060343s ago: executing program 0 (id=99): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_cancel(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) flock(r7, 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}}, &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r6}, 0x10) 1.194517804s ago: executing program 3 (id=100): sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}}, 0x40408c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x0, 0x9f5faa811eea84c5, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xf4) unshare(0x400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0xe0ffff, 0x19, 0x3) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000800) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6b8, &(0x7f0000000ac0)="$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") getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'user.incfs.metadata\x00'}, 0x0, 0x0) 1.109173542s ago: executing program 1 (id=101): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x2, 0xf, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 80.821695][ T5774] cgroup: Unknown subsys name 'net' [ 80.964018][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.846494][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.664778][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.686873][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.700306][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.708730][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.716623][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.722749][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.724165][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.739036][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.742113][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.748226][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.754564][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.761871][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.769419][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.776280][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.790848][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.794513][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.798433][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.806373][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.819439][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.840636][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.850758][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.878111][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.895754][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.905708][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.300310][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.453979][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.530586][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.554605][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.562744][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.570298][ T5785] bridge_slave_0: entered allmulticast mode [ 85.579070][ T5785] bridge_slave_0: entered promiscuous mode [ 85.610281][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.619016][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.626653][ T5785] bridge_slave_1: entered allmulticast mode [ 85.633651][ T5785] bridge_slave_1: entered promiscuous mode [ 85.710389][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.730109][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.754721][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.762872][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.770253][ T5789] bridge_slave_0: entered allmulticast mode [ 85.778197][ T5789] bridge_slave_0: entered promiscuous mode [ 85.812348][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.835052][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.842227][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.849686][ T5789] bridge_slave_1: entered allmulticast mode [ 85.857211][ T5789] bridge_slave_1: entered promiscuous mode [ 85.968909][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.976366][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.983573][ T5786] bridge_slave_0: entered allmulticast mode [ 85.990986][ T5786] bridge_slave_0: entered promiscuous mode [ 86.003158][ T5785] team0: Port device team_slave_0 added [ 86.012395][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.025041][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.045608][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.052801][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.060426][ T5786] bridge_slave_1: entered allmulticast mode [ 86.067862][ T5786] bridge_slave_1: entered promiscuous mode [ 86.076179][ T5785] team0: Port device team_slave_1 added [ 86.158441][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.165826][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.173025][ T5784] bridge_slave_0: entered allmulticast mode [ 86.180877][ T5784] bridge_slave_0: entered promiscuous mode [ 86.205881][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.218179][ T5789] team0: Port device team_slave_0 added [ 86.224688][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.233075][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.240448][ T5784] bridge_slave_1: entered allmulticast mode [ 86.248371][ T5784] bridge_slave_1: entered promiscuous mode [ 86.276658][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.283813][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.310168][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.330481][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.342219][ T5789] team0: Port device team_slave_1 added [ 86.375474][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.382488][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.408970][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.464569][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.477331][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.507421][ T5786] team0: Port device team_slave_0 added [ 86.527661][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.534663][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.560966][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.574237][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.581330][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.607373][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.624076][ T5786] team0: Port device team_slave_1 added [ 86.634247][ T5784] team0: Port device team_slave_0 added [ 86.649564][ T5784] team0: Port device team_slave_1 added [ 86.722359][ T5785] hsr_slave_0: entered promiscuous mode [ 86.729585][ T5785] hsr_slave_1: entered promiscuous mode [ 86.737309][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.744286][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.771128][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.809849][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.817063][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.843202][ T5793] Bluetooth: hci1: command tx timeout [ 86.843510][ T5793] Bluetooth: hci0: command tx timeout [ 86.852424][ T5799] Bluetooth: hci2: command tx timeout [ 86.860697][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.872872][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.880346][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.906380][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.950125][ T5789] hsr_slave_0: entered promiscuous mode [ 86.957382][ T5789] hsr_slave_1: entered promiscuous mode [ 86.963665][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.972096][ T5789] Cannot create hsr debugfs directory [ 86.991828][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.995699][ T5799] Bluetooth: hci3: command tx timeout [ 86.999140][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.030459][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.177109][ T5786] hsr_slave_0: entered promiscuous mode [ 87.183629][ T5786] hsr_slave_1: entered promiscuous mode [ 87.190815][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.198694][ T5786] Cannot create hsr debugfs directory [ 87.209946][ T5784] hsr_slave_0: entered promiscuous mode [ 87.216685][ T5784] hsr_slave_1: entered promiscuous mode [ 87.222848][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.230762][ T5784] Cannot create hsr debugfs directory [ 87.620121][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.639116][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.649850][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.662268][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.731575][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.742437][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.767408][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.785442][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.852850][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.877588][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.893220][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.903750][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.997076][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.029782][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.041348][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.067724][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.109866][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.193475][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.210651][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.260219][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.279929][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.287294][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.298868][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.306128][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.340865][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.348226][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.360607][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.367820][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.449929][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.474404][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.513932][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.521164][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.580337][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.587592][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.631992][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.732345][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.782563][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.789890][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.839126][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.846426][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.917238][ T5799] Bluetooth: hci0: command tx timeout [ 88.918868][ T5102] Bluetooth: hci1: command tx timeout [ 88.923062][ T5793] Bluetooth: hci2: command tx timeout [ 88.990522][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.077038][ T5793] Bluetooth: hci3: command tx timeout [ 89.112750][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.149473][ T5785] veth0_vlan: entered promiscuous mode [ 89.192988][ T5785] veth1_vlan: entered promiscuous mode [ 89.300207][ T5789] veth0_vlan: entered promiscuous mode [ 89.314531][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.349939][ T5785] veth0_macvtap: entered promiscuous mode [ 89.370376][ T5789] veth1_vlan: entered promiscuous mode [ 89.380387][ T5785] veth1_macvtap: entered promiscuous mode [ 89.432533][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.459940][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.477875][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.488930][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.497859][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506765][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.582478][ T5786] veth0_vlan: entered promiscuous mode [ 89.621065][ T5786] veth1_vlan: entered promiscuous mode [ 89.640098][ T5789] veth0_macvtap: entered promiscuous mode [ 89.658008][ T5789] veth1_macvtap: entered promiscuous mode [ 89.731464][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.740797][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.757513][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.796053][ T5786] veth0_macvtap: entered promiscuous mode [ 89.808563][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.811745][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.829604][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.832037][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.844390][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.873334][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.887259][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.901259][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.917209][ T5786] veth1_macvtap: entered promiscuous mode [ 89.969028][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.984299][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.005783][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.014557][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.070114][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.081938][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.092953][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.104791][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.117083][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.139455][ T5784] veth0_vlan: entered promiscuous mode [ 90.164089][ T5784] veth1_vlan: entered promiscuous mode [ 90.240975][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.257834][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.276002][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.292103][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.304273][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.321073][ T5784] veth0_macvtap: entered promiscuous mode [ 90.333052][ T5784] veth1_macvtap: entered promiscuous mode [ 90.352012][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.368566][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.379561][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.390638][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.400594][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.411770][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.429756][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.601715][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.687250][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.754007][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.824219][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.981545][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.000173][ T5793] Bluetooth: hci1: command tx timeout [ 91.006125][ T5799] Bluetooth: hci2: command tx timeout [ 91.011568][ T5799] Bluetooth: hci0: command tx timeout [ 91.032480][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.044715][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.062265][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.074023][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.092880][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.105979][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.155477][ T5102] Bluetooth: hci3: command tx timeout [ 91.203075][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216817][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227488][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.237341][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.358026][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.373943][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.390869][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.418023][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.439164][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.448834][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.603733][ T5885] syz.0.5[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.632821][ T5885] loop0: detected capacity change from 0 to 16 [ 91.701164][ T5885] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.734973][ T5885] syz.0.5: attempt to access beyond end of device [ 91.734973][ T5885] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 91.867695][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.138222][ T9] cfg80211: failed to load regulatory.db [ 92.195083][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.345582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.454920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.660129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 92.669366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.085268][ T5799] Bluetooth: hci1: command tx timeout [ 94.090753][ T5799] Bluetooth: hci2: command tx timeout [ 94.096787][ T5793] Bluetooth: hci3: command tx timeout [ 94.102329][ T5102] Bluetooth: hci0: command tx timeout [ 94.140471][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.149955][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.171845][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.186721][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.605117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.605920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.622319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.708220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.717041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.811190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.331080][ T5900] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.445392][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.504596][ T5906] loop1: detected capacity change from 0 to 128 [ 118.176811][ T5102] Bluetooth: hci2: ISO packet for unknown connection handle 271 [ 119.952129][ T5102] Bluetooth: hci0: ISO packet for unknown connection handle 271 [ 126.864981][ T6004] Bluetooth: MGMT ver 1.22 [ 130.035063][ T5102] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.043112][ T5102] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.196082][ T5799] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 134.372632][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.379293][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.352710][ T6048] loop1: detected capacity change from 0 to 128 [ 142.015893][ T6048] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 142.109274][ T6048] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.206507][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.976316][ T6057] loop1: detected capacity change from 0 to 128 [ 144.083725][ T6057] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.145361][ T6057] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.123262][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.045070][ T5799] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 147.051395][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.227525][ T6072] loop3: detected capacity change from 0 to 1024 [ 148.265470][ T6072] ======================================================= [ 148.265470][ T6072] WARNING: The mand mount option has been deprecated and [ 148.265470][ T6072] and is ignored by this kernel. Remove the mand [ 148.265470][ T6072] option from the mount to silence this warning. [ 148.265470][ T6072] ======================================================= [ 148.447726][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.597100][ T6082] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.047868][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.182785][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.192184][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.208997][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.268032][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.286508][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.293954][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.532041][ T5799] Bluetooth: hci4: command tx timeout [ 153.563391][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.965901][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.157387][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.366025][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.030224][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 155.555062][ T5799] Bluetooth: hci4: command tx timeout [ 155.647509][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.717024][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.724348][ T6083] bridge_slave_0: entered allmulticast mode [ 155.766908][ T6083] bridge_slave_0: entered promiscuous mode [ 155.797047][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.804236][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.975173][ T6083] bridge_slave_1: entered allmulticast mode [ 156.726449][ T6083] bridge_slave_1: entered promiscuous mode [ 158.537463][ T5799] Bluetooth: hci4: command tx timeout [ 160.595931][ T5799] Bluetooth: hci4: command tx timeout [ 160.956014][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.163785][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.523541][ T6083] team0: Port device team_slave_0 added [ 161.996847][ T6083] team0: Port device team_slave_1 added [ 165.620442][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.644903][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.718952][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.889486][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.934035][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.015001][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.050965][ T5799] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.057508][ T5799] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.142126][ T6083] hsr_slave_0: entered promiscuous mode [ 168.149050][ T6083] hsr_slave_1: entered promiscuous mode [ 168.175272][ T6083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.183094][ T6083] Cannot create hsr debugfs directory [ 168.460508][ T6164] loop1: detected capacity change from 0 to 128 [ 168.526815][ T6164] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 168.607350][ T6164] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.689339][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.805969][ T34] hsr_slave_0: left promiscuous mode [ 169.826670][ T34] hsr_slave_1: left promiscuous mode [ 169.855800][ T5799] Bluetooth: hci3: ISO packet for unknown connection handle 271 [ 171.686111][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.725182][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.760501][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.771599][ T6176] loop0: detected capacity change from 0 to 128 [ 171.795139][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.833449][ T34] bridge_slave_1: left allmulticast mode [ 171.857615][ T6176] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 171.880421][ T34] bridge_slave_1: left promiscuous mode [ 171.886357][ T6179] loop3: detected capacity change from 0 to 128 [ 171.907278][ T6176] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.920059][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.969281][ T6179] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 172.007499][ T6179] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.044311][ T34] bridge_slave_0: left allmulticast mode [ 172.050312][ T34] bridge_slave_0: left promiscuous mode [ 172.057064][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.562701][ T34] veth1_macvtap: left promiscuous mode [ 173.025216][ T34] veth0_macvtap: left promiscuous mode [ 173.161808][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.174670][ T34] veth1_vlan: left promiscuous mode [ 173.184483][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.206089][ T34] veth0_vlan: left promiscuous mode [ 177.567591][ T5799] Bluetooth: hci2: ISO packet for unknown connection handle 271 [ 180.916635][ T6206] loop1: detected capacity change from 0 to 128 [ 180.937915][ T6204] loop0: detected capacity change from 0 to 256 [ 181.143542][ T6204] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 184.041588][ T34] team0 (unregistering): Port device team_slave_1 removed [ 184.168205][ T34] team0 (unregistering): Port device team_slave_0 removed [ 184.348986][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.576063][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.253883][ T6228] loop0: detected capacity change from 0 to 128 [ 190.113614][ T34] bond0 (unregistering): Released all slaves [ 190.496832][ T6245] process 'syz.1.76' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 190.979392][ T6083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.279660][ T6083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.290763][ T6083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.351305][ T6083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.990407][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.004959][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.213917][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.330340][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.400302][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.407695][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.720391][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.727669][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.341619][ T6083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.627841][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.008533][ T6314] loop0: detected capacity change from 0 to 128 [ 202.658540][ T6333] loop0: detected capacity change from 0 to 128 [ 203.657988][ T6083] veth0_vlan: entered promiscuous mode [ 203.714057][ T6083] veth1_vlan: entered promiscuous mode [ 203.822284][ T6083] veth0_macvtap: entered promiscuous mode [ 203.898901][ T6083] veth1_macvtap: entered promiscuous mode [ 204.000020][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.012347][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.022550][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.033973][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.044422][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.122256][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.377613][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.638546][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.692737][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.733544][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.744463][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.754748][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.808222][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.836633][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.898477][ T6083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.914918][ T6083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.923822][ T6083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.948516][ T6083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.416507][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.460165][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.650428][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.836394][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.971153][ T6365] loop3: detected capacity change from 0 to 128 [ 207.865493][ T6367] loop4: detected capacity change from 0 to 128 [ 208.043492][ T6367] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 208.058707][ T6367] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 212.098707][ T6083] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.156205][ T50] Bluetooth: hci3: ISO packet for unknown connection handle 271 [ 214.677312][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 214.683426][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.683472][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 215.300688][ T6405] loop3: detected capacity change from 0 to 16 [ 215.333766][ T6405] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.346603][ T6405] syz.3.100: attempt to access beyond end of device [ 215.346603][ T6405] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 215.376003][ T6405] syz.3.100: attempt to access beyond end of device [ 215.376003][ T6405] loop3: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 215.389906][ T6405] syz.3.100: attempt to access beyond end of device [ 215.389906][ T6405] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 215.410958][ T6405] syz.3.100: attempt to access beyond end of device [ 215.410958][ T6405] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 215.460572][ T6405] syz.3.100: attempt to access beyond end of device [ 215.460572][ T6405] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 216.031157][ T5786] BUG: Bad page state in process syz-executor pfn:2ebfa [ 216.039076][ T5786] page:ffffea0000bafe80 refcount:0 mapcount:0 mapping:ffff88805dd80270 index:0x2 pfn:0x2ebfa [ 216.049569][ T5786] aops:z_erofs_cache_aops ino:0 [ 216.054979][ T5786] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 216.062753][ T5786] page_type: 0xffffffff() [ 216.067316][ T5786] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dd80270 [ 216.076073][ T5786] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 216.084702][ T5786] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 216.092135][ T5786] page_owner tracks the page as allocated [ 216.098305][ T5786] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6405, tgid 6401 (syz.3.100), ts 215346376018, free_ts 214600993866 [ 216.120477][ T5786] post_alloc_hook+0x1cd/0x210 [ 216.125751][ T5786] get_page_from_freelist+0x195c/0x19f0 [ 216.131352][ T5786] __alloc_pages+0x1e3/0x460 [ 216.136634][ T5786] z_erofs_do_read_page+0x20c0/0x3680 [ 216.142175][ T5786] z_erofs_pcluster_readmore+0x2cf/0x450 [ 216.147983][ T5786] z_erofs_read_folio+0x208/0x540 [ 216.153055][ T5786] filemap_read_folio+0x167/0x760 [ 216.158693][ T5786] do_read_cache_folio+0x470/0x7e0 [ 216.163910][ T5786] erofs_bread+0x16f/0x630 [ 216.168519][ T5786] erofs_namei+0x28c/0xf00 [ 216.172990][ T5786] erofs_lookup+0x135/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.177622][ T5786] path_openat+0x10b8/0x3190 [ 216.182270][ T5786] do_filp_open+0x1c5/0x3d0 [ 216.186874][ T5786] do_sys_openat2+0x12c/0x1c0 [ 216.191740][ T5786] __x64_sys_creat+0x90/0xb0 [ 216.196451][ T5786] do_syscall_64+0x55/0xb0 [ 216.200925][ T5786] page last free stack trace: [ 216.205722][ T5786] free_unref_page_prepare+0x7ce/0x8e0 [ 216.211233][ T5786] free_unref_page_list+0xbe/0x860 [ 216.216605][ T5786] release_pages+0x1fa0/0x2220 [ 216.221425][ T5786] tlb_flush_mmu+0x368/0x4f0 [ 216.226111][ T5786] tlb_finish_mmu+0xc3/0x1d0 [ 216.230754][ T5786] exit_mmap+0x3f0/0xb50 [ 216.235103][ T5786] __mmput+0x118/0x3c0 [ 216.239205][ T5786] exit_mm+0x1da/0x2c0 [ 216.243316][ T5786] do_exit+0x88e/0x23c0 [ 216.247587][ T5786] do_group_exit+0x21b/0x2d0 [ 216.252219][ T5786] get_signal+0x12fc/0x1400 [ 216.257273][ T5786] arch_do_signal_or_restart+0x96/0x780 [ 216.262890][ T5786] exit_to_user_mode_loop+0x70/0x110 [ 216.268364][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 216.273985][ T5786] irqentry_exit_to_user_mode+0x9/0x40 [ 216.280134][ T5786] exc_page_fault+0x8f/0x110 [ 216.285243][ T5786] Modules linked in: [ 216.289202][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0 [ 216.296785][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.306894][ T5786] Call Trace: [ 216.310202][ T5786] [ 216.313167][ T5786] dump_stack_lvl+0x16c/0x230 [ 216.317911][ T5786] ? show_regs_print_info+0x20/0x20 [ 216.323166][ T5786] ? swiotlb_print_info+0x70/0x70 [ 216.328261][ T5786] bad_page+0x14b/0x170 [ 216.332499][ T5786] free_unref_page_prepare+0x887/0x8e0 [ 216.338044][ T5786] free_unref_page+0x32/0x2e0 [ 216.342783][ T5786] ? __folio_put+0xef/0x210 [ 216.347338][ T5786] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 216.353805][ T5786] erofs_shrink_workstation+0x118/0x290 [ 216.359407][ T5786] ? erofs_shrinker_unregister+0x170/0x170 [ 216.365273][ T5786] ? io_schedule+0xd0/0xd0 [ 216.369742][ T5786] ? kobject_put+0x43c/0x470 [ 216.374385][ T5786] erofs_shrinker_unregister+0x5d/0x170 [ 216.379980][ T5786] erofs_put_super+0x4e/0x150 [ 216.384715][ T5786] ? erofs_free_inode+0xb0/0xb0 [ 216.389617][ T5786] generic_shutdown_super+0x134/0x2b0 [ 216.395051][ T5786] kill_block_super+0x44/0x90 [ 216.399815][ T5786] erofs_kill_sb+0x4c/0x140 [ 216.404345][ T5786] deactivate_locked_super+0x97/0x100 [ 216.409741][ T5786] cleanup_mnt+0x429/0x4c0 [ 216.414179][ T5786] task_work_run+0x1ce/0x250 [ 216.418793][ T5786] ? task_work_cancel+0x240/0x240 [ 216.423844][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 216.429336][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 216.434643][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 216.440224][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 216.445721][ T5786] do_syscall_64+0x61/0xb0 [ 216.450188][ T5786] ? clear_bhb_loop+0x40/0x90 [ 216.454892][ T5786] ? clear_bhb_loop+0x40/0x90 [ 216.459586][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.465499][ T5786] RIP: 0033:0x7f2f7a5901f7 [ 216.469941][ T5786] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 216.489566][ T5786] RSP: 002b:00007fff9e0c38a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 216.497999][ T5786] RAX: 0000000000000000 RBX: 00007f2f7a611d7d RCX: 00007f2f7a5901f7 [ 216.505992][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e0c3960 [ 216.514065][ T5786] RBP: 00007fff9e0c3960 R08: 0000000000000000 R09: 0000000000000000 [ 216.522051][ T5786] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9e0c49f0 [ 216.530032][ T5786] R13: 00007f2f7a611d7d R14: 0000000000034a6e R15: 00007fff9e0c4a30 [ 216.538032][ T5786] [ 216.541898][ T5786] Disabling lock debugging due to kernel taint [ 216.548210][ T5786] BUG: Bad page state in process syz-executor pfn:1ef8e [ 216.555342][ T5786] page:ffffea00007be380 refcount:0 mapcount:0 mapping:ffff88805dd80270 index:0x3 pfn:0x1ef8e [ 216.565961][ T5786] aops:z_erofs_cache_aops ino:0 [ 216.571651][ T5786] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 216.579501][ T5786] page_type: 0xffffffff() [ 216.583868][ T5786] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dd80270 [ 216.592525][ T5786] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 216.601197][ T5786] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 216.608538][ T5786] page_owner tracks the page as allocated [ 216.614273][ T5786] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6405, tgid 6401 (syz.3.100), ts 215346395232, free_ts 214600973525 [ 216.636245][ T5786] post_alloc_hook+0x1cd/0x210 [ 216.641056][ T5786] get_page_from_freelist+0x195c/0x19f0 [ 216.646682][ T5786] __alloc_pages+0x1e3/0x460 [ 216.651312][ T5786] z_erofs_do_read_page+0x20c0/0x3680 [ 216.656766][ T5786] z_erofs_pcluster_readmore+0x2cf/0x450 [ 216.662425][ T5786] z_erofs_read_folio+0x208/0x540 [ 216.667928][ T5786] filemap_read_folio+0x167/0x760 [ 216.672984][ T5786] do_read_cache_folio+0x470/0x7e0 [ 216.678237][ T5786] erofs_bread+0x16f/0x630 [ 216.682694][ T5786] erofs_namei+0x28c/0xf00 [ 216.687221][ T5786] erofs_lookup+0x135/0x310 [ 216.691778][ T5786] path_openat+0x10b8/0x3190 [ 216.696482][ T5786] do_filp_open+0x1c5/0x3d0 [ 216.701028][ T5786] do_sys_openat2+0x12c/0x1c0 [ 216.705774][ T5786] __x64_sys_creat+0x90/0xb0 [ 216.710396][ T5786] do_syscall_64+0x55/0xb0 [ 216.714891][ T5786] page last free stack trace: [ 216.719585][ T5786] free_unref_page_prepare+0x7ce/0x8e0 [ 216.725138][ T5786] free_unref_page_list+0xbe/0x860 [ 216.730293][ T5786] release_pages+0x1fa0/0x2220 [ 216.735170][ T5786] tlb_flush_mmu+0x368/0x4f0 [ 216.739798][ T5786] tlb_finish_mmu+0xc3/0x1d0 [ 216.744443][ T5786] exit_mmap+0x3f0/0xb50 [ 216.748761][ T5786] __mmput+0x118/0x3c0 [ 216.752854][ T5786] exit_mm+0x1da/0x2c0 [ 216.757061][ T5786] do_exit+0x88e/0x23c0 [ 216.761339][ T5786] do_group_exit+0x21b/0x2d0 [ 216.766427][ T5786] get_signal+0x12fc/0x1400 [ 216.771370][ T5786] arch_do_signal_or_restart+0x96/0x780 [ 216.777066][ T5786] exit_to_user_mode_loop+0x70/0x110 [ 216.782406][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 216.788043][ T5786] irqentry_exit_to_user_mode+0x9/0x40 [ 216.793546][ T5786] exc_page_fault+0x8f/0x110 [ 216.798254][ T5786] Modules linked in: [ 216.802183][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Tainted: G B syzkaller #0 [ 216.811228][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.821312][ T5786] Call Trace: [ 216.824623][ T5786] [ 216.827598][ T5786] dump_stack_lvl+0x16c/0x230 [ 216.832326][ T5786] ? show_regs_print_info+0x20/0x20 [ 216.837562][ T5786] ? swiotlb_print_info+0x70/0x70 [ 216.842629][ T5786] bad_page+0x14b/0x170 [ 216.846810][ T5786] free_unref_page_prepare+0x887/0x8e0 [ 216.852307][ T5786] free_unref_page+0x32/0x2e0 [ 216.857030][ T5786] ? __folio_put+0xef/0x210 [ 216.861649][ T5786] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 216.868102][ T5786] erofs_shrink_workstation+0x118/0x290 [ 216.873701][ T5786] ? erofs_shrinker_unregister+0x170/0x170 [ 216.879542][ T5786] ? io_schedule+0xd0/0xd0 [ 216.883990][ T5786] ? kobject_put+0x43c/0x470 [ 216.888609][ T5786] erofs_shrinker_unregister+0x5d/0x170 [ 216.894188][ T5786] erofs_put_super+0x4e/0x150 [ 216.898892][ T5786] ? erofs_free_inode+0xb0/0xb0 [ 216.903758][ T5786] generic_shutdown_super+0x134/0x2b0 [ 216.909160][ T5786] kill_block_super+0x44/0x90 [ 216.913868][ T5786] erofs_kill_sb+0x4c/0x140 [ 216.918414][ T5786] deactivate_locked_super+0x97/0x100 [ 216.923815][ T5786] cleanup_mnt+0x429/0x4c0 [ 216.928244][ T5786] task_work_run+0x1ce/0x250 [ 216.932850][ T5786] ? task_work_cancel+0x240/0x240 [ 216.937903][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 216.943395][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 216.948716][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 216.954284][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 216.959769][ T5786] do_syscall_64+0x61/0xb0 [ 216.964218][ T5786] ? clear_bhb_loop+0x40/0x90 [ 216.968913][ T5786] ? clear_bhb_loop+0x40/0x90 [ 216.973611][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.979524][ T5786] RIP: 0033:0x7f2f7a5901f7 [ 216.983951][ T5786] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 217.003574][ T5786] RSP: 002b:00007fff9e0c38a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 217.012016][ T5786] RAX: 0000000000000000 RBX: 00007f2f7a611d7d RCX: 00007f2f7a5901f7 [ 217.020006][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e0c3960 [ 217.028009][ T5786] RBP: 00007fff9e0c3960 R08: 0000000000000000 R09: 0000000000000000 [ 217.036009][ T5786] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9e0c49f0 [ 217.043993][ T5786] R13: 00007f2f7a611d7d R14: 0000000000034a6e R15: 00007fff9e0c4a30 [ 217.051990][ T5786] [ 217.056434][ T5786] BUG: Bad page state in process syz-executor pfn:2bdf0 [ 217.063495][ T5786] page:ffffea0000af7c00 refcount:0 mapcount:0 mapping:ffff88805dd80270 index:0x4 pfn:0x2bdf0 [ 217.074030][ T5786] aops:z_erofs_cache_aops ino:0 [ 217.079377][ T5786] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 217.087215][ T5786] page_type: 0xffffffff() [ 217.091570][ T5786] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805dd80270 [ 217.100229][ T5786] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 217.108882][ T5786] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 217.116217][ T5786] page_owner tracks the page as allocated [ 217.121948][ T5786] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6405, tgid 6401 (syz.3.100), ts 215346414127, free_ts 214600963158 [ 217.143925][ T5786] post_alloc_hook+0x1cd/0x210 [ 217.148780][ T5786] get_page_from_freelist+0x195c/0x19f0 [ 217.154371][ T5786] __alloc_pages+0x1e3/0x460 [ 217.159051][ T5786] z_erofs_do_read_page+0x20c0/0x3680 [ 217.164448][ T5786] z_erofs_pcluster_readmore+0x2cf/0x450 [ 217.170151][ T5786] z_erofs_read_folio+0x208/0x540 [ 217.175350][ T5786] filemap_read_folio+0x167/0x760 [ 217.180809][ T5786] do_read_cache_folio+0x470/0x7e0 [ 217.186023][ T5786] erofs_bread+0x16f/0x630 [ 217.190479][ T5786] erofs_namei+0x28c/0xf00 [ 217.194981][ T5786] erofs_lookup+0x135/0x310 [ 217.199532][ T5786] path_openat+0x10b8/0x3190 [ 217.204185][ T5786] do_filp_open+0x1c5/0x3d0 [ 217.208778][ T5786] do_sys_openat2+0x12c/0x1c0 [ 217.213482][ T5786] __x64_sys_creat+0x90/0xb0 [ 217.218155][ T5786] do_syscall_64+0x55/0xb0 [ 217.222661][ T5786] page last free stack trace: [ 217.227392][ T5786] free_unref_page_prepare+0x7ce/0x8e0 [ 217.232892][ T5786] free_unref_page_list+0xbe/0x860 [ 217.238097][ T5786] release_pages+0x1fa0/0x2220 [ 217.242887][ T5786] tlb_flush_mmu+0x368/0x4f0 [ 217.247544][ T5786] tlb_finish_mmu+0xc3/0x1d0 [ 217.252173][ T5786] exit_mmap+0x3f0/0xb50 [ 217.256513][ T5786] __mmput+0x118/0x3c0 [ 217.260605][ T5786] exit_mm+0x1da/0x2c0 [ 217.264704][ T5786] do_exit+0x88e/0x23c0 [ 217.268956][ T5786] do_group_exit+0x21b/0x2d0 [ 217.273585][ T5786] get_signal+0x12fc/0x1400 [ 217.278170][ T5786] arch_do_signal_or_restart+0x96/0x780 [ 217.284171][ T5786] exit_to_user_mode_loop+0x70/0x110 [ 217.289584][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 217.295207][ T5786] irqentry_exit_to_user_mode+0x9/0x40 [ 217.300714][ T5786] exc_page_fault+0x8f/0x110 [ 217.305385][ T5786] Modules linked in: [ 217.309313][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Tainted: G B syzkaller #0 [ 217.318356][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.328440][ T5786] Call Trace: [ 217.331728][ T5786] [ 217.334672][ T5786] dump_stack_lvl+0x16c/0x230 [ 217.339368][ T5786] ? show_regs_print_info+0x20/0x20 [ 217.344581][ T5786] ? swiotlb_print_info+0x70/0x70 [ 217.349623][ T5786] bad_page+0x14b/0x170 [ 217.353862][ T5786] free_unref_page_prepare+0x887/0x8e0 [ 217.359348][ T5786] free_unref_page+0x32/0x2e0 [ 217.364039][ T5786] ? __folio_put+0xef/0x210 [ 217.368559][ T5786] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 217.374991][ T5786] erofs_shrink_workstation+0x118/0x290 [ 217.380560][ T5786] ? erofs_shrinker_unregister+0x170/0x170 [ 217.386387][ T5786] ? io_schedule+0xd0/0xd0 [ 217.390833][ T5786] ? kobject_put+0x43c/0x470 [ 217.395452][ T5786] erofs_shrinker_unregister+0x5d/0x170 [ 217.401017][ T5786] erofs_put_super+0x4e/0x150 [ 217.405714][ T5786] ? erofs_free_inode+0xb0/0xb0 [ 217.410582][ T5786] generic_shutdown_super+0x134/0x2b0 [ 217.415976][ T5786] kill_block_super+0x44/0x90 [ 217.420664][ T5786] erofs_kill_sb+0x4c/0x140 [ 217.425189][ T5786] deactivate_locked_super+0x97/0x100 [ 217.430583][ T5786] cleanup_mnt+0x429/0x4c0 [ 217.435010][ T5786] task_work_run+0x1ce/0x250 [ 217.439619][ T5786] ? task_work_cancel+0x240/0x240 [ 217.444660][ T5786] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.450133][ T5786] exit_to_user_mode_loop+0xe6/0x110 [ 217.455434][ T5786] exit_to_user_mode_prepare+0xf6/0x180 [ 217.461000][ T5786] syscall_exit_to_user_mode+0x1a/0x50 [ 217.466475][ T5786] do_syscall_64+0x61/0xb0 [ 217.470909][ T5786] ? clear_bhb_loop+0x40/0x90 [ 217.475597][ T5786] ? clear_bhb_loop+0x40/0x90 [ 217.480287][ T5786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.486193][ T5786] RIP: 0033:0x7f2f7a5901f7 [ 217.490617][ T5786] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 217.510240][ T5786] RSP: 002b:00007fff9e0c38a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 217.518675][ T5786] RAX: 0000000000000000 RBX: 00007f2f7a611d7d RCX: 00007f2f7a5901f7 [ 217.526655][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9e0c3960 [ 217.534630][ T5786] RBP: 00007fff9e0c3960 R08: 0000000000000000 R09: 0000000000000000 [ 217.542608][ T5786] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9e0c49f0 [ 217.550584][ T5786] R13: 00007f2f7a611d7d R14: 0000000000034a6e R15: 00007fff9e0c4a30 [ 217.558576][ T5786]