last executing test programs: 22.462682684s ago: executing program 2 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 19.331196203s ago: executing program 3 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) io_setup(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(0x0, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r5, r6+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, &(0x7f0000000240), 0x0) 18.061064109s ago: executing program 3 (id=526): syz_open_dev$vbi(0x0, 0x2, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000230eb6e08ac0537021d5f0102030109021200010880c01009a7efb3231c75b789523aa1e7b7049b050003b30208"], 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_submit(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x4000051) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x200002) 17.926463782s ago: executing program 1 (id=527): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, 0x0, 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r5, 0x94ed, 0x0, &(0x7f0000000040), &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x700, 0x0) 17.656979948s ago: executing program 2 (id=528): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 13.416949957s ago: executing program 1 (id=529): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20) pivot_root(&(0x7f0000000540)='./file1\x00', &(0x7f00000017c0)='./file1\x00') keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) utimes(&(0x7f0000000400)='.\x00', &(0x7f0000000500)={{0x0, 0x2710}}) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) io_uring_setup(0x2e01, &(0x7f0000000040)={0x0, 0xafd2, 0x1000, 0x2, 0x2ca}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x6, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000180)={{0x0, 0x80}, {0xfffffffffffffff7, 0x1}, 0x1bb, 0x1}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000680)={[0xfffffbff, 0x80, 0x8001, 0xe3, 0x1, 0x9, 0x6, 0x0, 0x5, 0xe00, 0x874d, 0x2, 0x3d9092bd, 0x8, 0x9, 0x9, 0x8, 0x2, 0x4, 0x7f, 0x4, 0x0, 0x9, 0x8, 0x6, 0x1, 0x0, 0x400, 0x4, 0x885, 0xffffffbc, 0x1, 0x8, 0xffff, 0x8, 0x0, 0x32, 0x0, 0x4, 0x3, 0xba, 0x2, 0x7, 0x6, 0xe7, 0x6, 0x9, 0xb, 0x5, 0x4, 0x3, 0x7b, 0x1ff, 0x4, 0x0, 0x6, 0x361, 0x0, 0x40, 0x4a, 0x3, 0x8, 0x66, 0xff, 0x3, 0x8, 0x7, 0x2, 0x7, 0x4, 0x36, 0xfb2, 0x2, 0x3, 0x4, 0xaa, 0x9480, 0x36b1, 0x1, 0x4, 0xc40f, 0x5, 0x4, 0x0, 0x0, 0x8, 0x80000000, 0x3, 0x40, 0x6, 0x4, 0x6, 0x9, 0x2, 0x1, 0x0, 0x4, 0x7, 0x341a, 0x3, 0x81, 0x6, 0x7, 0x10001, 0xfffffff8, 0x43, 0x0, 0x40, 0x81, 0x2, 0x94, 0x3, 0x1000, 0x1, 0x9, 0xa, 0x5, 0x80000001, 0x2, 0x4, 0x35, 0x0, 0x0, 0x46, 0x45bb, 0x9, 0x1, 0xd, 0x3, 0x3, 0x5, 0x6, 0x9, 0x3726, 0x3, 0x8, 0x1, 0x5623, 0x3503, 0x8000, 0x5, 0x10, 0x6, 0x7, 0x5, 0x4, 0x3, 0x6, 0xffffff20, 0x6, 0x40, 0x1, 0x7ff, 0x1, 0x7, 0x6, 0x4, 0x3, 0x401, 0x3fd, 0x4, 0x0, 0xfff, 0xcf, 0x60d, 0x5, 0xe, 0x70a, 0x4, 0x1, 0x5, 0xe98, 0x5a253222, 0x1, 0x9c, 0xcb, 0x3, 0x1000, 0x200, 0x2, 0x101, 0x7, 0x1, 0x743, 0x5, 0x4, 0x1, 0x5, 0x6, 0x2, 0x9, 0x1, 0x2, 0x80000, 0x6, 0xa48, 0x5575d5eb, 0xe, 0x4, 0x3, 0x7, 0x8000, 0x8, 0x9, 0x5, 0x7fffffff, 0x401, 0x8001, 0x2, 0x9, 0x9, 0xfffffffc, 0x2, 0x8, 0xc05, 0x56, 0x7, 0xfffffffd, 0x40, 0x0, 0x6, 0x1, 0x4, 0x4, 0x1, 0x80000001, 0x5, 0x1c91e0, 0x800, 0x0, 0x7, 0x1, 0x5, 0x5, 0x7, 0x1000, 0x6, 0xfe0000, 0x8, 0x328, 0xa3, 0x800, 0x8, 0x8, 0x9, 0x5, 0x5, 0x8, 0x8, 0xd45, 0x5, 0x0, 0x6, 0x3, 0x2, 0x7, 0xdd9, 0xfffffff8, 0x101, 0xcd, 0x400000, 0x3ff, 0x7, 0x17b8, 0x6, 0x3, 0x1, 0xc, 0xfff, 0x7, 0x7fffffff, 0x9, 0xfffffff7, 0x5, 0xfff, 0x9, 0xd40b, 0xffffffff, 0x2, 0xfffff54a, 0x4, 0x80000000, 0x1, 0xffffb812, 0xda3, 0xab9, 0x3, 0x5, 0x9, 0x600, 0x51be, 0x200, 0x2, 0x1, 0x6, 0xfffffffe, 0x1, 0x6, 0x90, 0x0, 0xc3c, 0x8, 0x0, 0x3, 0xffff, 0x3, 0x15, 0x9, 0x1000, 0x9, 0x0, 0x3, 0x1, 0x101, 0x4, 0x7fff, 0x10, 0x8, 0x10, 0x4, 0x81, 0x2, 0x6, 0xfffffff4, 0x3, 0x8, 0x2, 0xc, 0x6, 0xfffffffb, 0x3, 0xff, 0x1, 0x9, 0xdde0, 0xffff, 0x10001, 0xffff, 0x6, 0x4, 0x2, 0x80000000, 0x3, 0x8001, 0xa, 0xd4, 0x5, 0x2, 0xb, 0xfffffffb, 0xd, 0x4, 0x3a0, 0x5b8, 0x3, 0x8, 0x6, 0x9, 0xff, 0x8000, 0x4, 0xe12, 0x6, 0xffffff01, 0x4, 0xfdbf, 0x3, 0x6, 0x8, 0xfffffffb, 0x10000, 0x892c, 0x31b, 0xfffffff8, 0x7367, 0xfffffffb, 0x6, 0x8000, 0x80, 0x1, 0x8, 0x6, 0x4, 0x80, 0x5, 0x4, 0x0, 0xca, 0x6, 0x4, 0x4, 0x735, 0x10000, 0x6, 0x8, 0xffff0b69, 0x6, 0xb8c4, 0x8000, 0x8, 0x0, 0xe, 0x6, 0x4, 0x9, 0x7fff, 0x42, 0xcf2b, 0xfffffffc, 0x2, 0x0, 0x49fa, 0xb549, 0xffff, 0x2de, 0x1, 0x2a3f, 0x3080, 0x7fffffff, 0x0, 0x2, 0x5b, 0x8, 0x2, 0xd, 0x7fff, 0x41a0000, 0x1ff, 0x2d, 0x8f0b, 0x5, 0x8000, 0x2, 0x7, 0x86, 0x10001, 0x34, 0xf57, 0xfffffff5, 0x6bff, 0x6, 0x6, 0x7, 0xfff, 0xc, 0x48, 0x81, 0x9, 0x3, 0x10000000, 0x3, 0x9, 0x3, 0x7, 0x8, 0xa, 0x4, 0x30000000, 0x5, 0x38, 0x7, 0x1, 0xfffffff9, 0x7, 0x8, 0xd2, 0x3ff, 0xc96, 0x4, 0x4, 0xe0, 0x10, 0x4, 0x101, 0x100, 0x1, 0xff, 0x7f, 0x6, 0x6, 0x16f1c, 0x6d, 0xffff617b, 0x0, 0x8, 0x5, 0x1e, 0xffffffff, 0x2, 0x60, 0xff, 0xfffffffd, 0x0, 0x4, 0xd1, 0xff, 0x9, 0x1, 0xfffff000, 0x3, 0xffffffff, 0xa, 0x0, 0xfffffff9, 0x0, 0x4, 0x9, 0x6, 0x8, 0x6, 0x5, 0x94, 0x100, 0x7fffffff, 0x5, 0x8, 0x2, 0x4, 0x5, 0xfffffff8, 0x8, 0x9, 0x2, 0x8, 0xaf37, 0x1, 0x0, 0x26, 0x5, 0x2, 0x7, 0xff, 0x0, 0x7, 0x37, 0xffffffff, 0x8, 0x5, 0x9, 0x2, 0x2, 0x1, 0xa, 0x9, 0x8, 0x8, 0x62e1, 0x101, 0xfffff733, 0x1000, 0x518a, 0x2804, 0x87b, 0xfffffffc, 0xa8, 0x7fff, 0x400, 0x8, 0x1, 0x9, 0x68170000, 0x9, 0x7, 0x1e, 0x3ff, 0x1, 0x8, 0xfffffff7, 0x200, 0xffff0001, 0x2, 0x74, 0x7, 0xe74a, 0xfffffe01, 0xb074, 0x6a, 0x5, 0x9, 0x400, 0xc, 0x10001, 0x4b46, 0x642f, 0x80000000, 0x8, 0x8000, 0x80000001, 0x80000001, 0x6, 0x510, 0x3, 0x3, 0xffffffff, 0x3, 0x3, 0x5, 0x80, 0x10, 0x4, 0x1, 0x3, 0x9, 0xd44, 0x7, 0x4, 0x0, 0x9, 0x3, 0x2, 0x609, 0x1, 0x9, 0x9, 0xffff9757, 0x8000, 0x7f, 0x9, 0x5, 0x95, 0x80000000, 0x4, 0x3, 0x7fff, 0x9, 0x4, 0xb, 0x2, 0x38e, 0x7, 0x9d, 0x10001, 0xfff, 0x7f, 0x15a38cb0, 0xfffffffa, 0xe8b3, 0x100, 0x47b, 0x0, 0x10, 0xe22, 0x5, 0x7, 0x0, 0x2, 0x80000001, 0x9, 0xfff, 0x8, 0x7, 0x5, 0x0, 0x3ff, 0x7002, 0x6, 0x8, 0x4, 0xed, 0xf4, 0xde38, 0x200, 0x2, 0x7, 0x8340, 0xb, 0x2, 0x5, 0x6, 0x8000, 0x7, 0x1ff, 0x7fffffff, 0x8, 0x0, 0x7fffffff, 0xf, 0x5, 0x7, 0x2, 0x7, 0x7fff, 0x3, 0x7fffffff, 0x1, 0x1, 0x80000000, 0xea, 0x692, 0xc9f, 0x7, 0x9, 0x7ff, 0x1, 0x59e2, 0x3, 0x0, 0x8000, 0x3, 0x6, 0xfffff64b, 0x6, 0xa6, 0x0, 0x9, 0x7, 0x2, 0xffff, 0x2dc1, 0x3, 0x5, 0x5, 0x4, 0x1, 0x7, 0x26, 0x5, 0x1000, 0x10, 0x2, 0xad, 0xb, 0x8, 0xcc, 0x1b9f, 0x3ff, 0x4d17, 0x8, 0x4, 0x6, 0x24, 0xfff, 0x1000, 0x4dd0, 0xff, 0x7fff, 0x7, 0x8, 0x9, 0x5, 0x10000, 0x9, 0xffffffda, 0x7f, 0x2, 0x0, 0x6, 0x1ff, 0x93ae, 0x7fff, 0x4, 0x1, 0xa00, 0x1ff, 0x7, 0x10000, 0x10, 0x8, 0x6, 0x6, 0x6, 0x9, 0x3, 0x3, 0x40, 0x7, 0x40, 0x2, 0x200, 0xfffffff9, 0x80000000, 0x6, 0xfffffff8, 0x6, 0x1, 0x1, 0x1c63, 0x9, 0xfaf, 0x8, 0x3, 0x9, 0x4, 0x3, 0x8, 0x3, 0x7, 0xfffffffb, 0xff, 0xb096, 0x4, 0xcb, 0x401, 0x8c6, 0x10000, 0x920, 0x0, 0xffffffa2, 0x3, 0x8, 0x6, 0x18, 0x7, 0x7, 0x4, 0x7, 0x664, 0x8, 0xcba, 0x2, 0x401, 0x2, 0x3, 0x3331316e, 0x7, 0xf, 0x2, 0x4, 0x6, 0x3, 0x4, 0x2, 0x4, 0x2, 0x7, 0x7, 0x6c19, 0x2, 0x6, 0x1, 0x4, 0x1, 0x8000, 0x5, 0x1, 0x311, 0x4, 0x7ff, 0xff, 0x7, 0xdb, 0x7f, 0x9, 0x1, 0x8, 0x4, 0xb6b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x7, 0x0, 0x10000, 0x1, 0x7, 0x4, 0x5, 0xc, 0x0, 0x9, 0xfffffff7, 0x3, 0x1, 0x5b, 0x5, 0x3, 0x6, 0xd, 0x8000, 0x0, 0x2, 0x0, 0x40, 0xffffe42f, 0x3, 0x0, 0x8, 0x9, 0xa1e, 0x401, 0x3, 0x51, 0x2, 0x1000, 0x2, 0x753c, 0x1e, 0x7, 0x6, 0x94, 0x4, 0x2, 0x10001, 0x40, 0x5d3, 0x28b2, 0xf, 0x3, 0x0, 0x2ee, 0x1, 0x9, 0xf, 0x5, 0x84b, 0x10001, 0x2, 0x2, 0x1, 0x9, 0xfffffda9, 0x2fe, 0x4, 0x4, 0x5, 0x545, 0x6, 0x7, 0x0, 0x650, 0x3, 0x9, 0xb9, 0x5, 0x79, 0x2, 0x9, 0x101, 0x1, 0x38, 0xef0, 0x2cb, 0xfa06, 0x200, 0x7, 0x80000000, 0xffff3818, 0xd0, 0x5, 0x9, 0x7f, 0xff, 0x4, 0x1, 0x7, 0xf736, 0x8, 0x23c6, 0x7, 0x401, 0x100, 0x5, 0x2, 0xfffffff8, 0x5, 0x2, 0xbf1, 0x467c8826, 0xffff, 0x4, 0x7ff, 0x6, 0x5, 0x6, 0x1000, 0x7ff, 0x1, 0x9, 0x0, 0x3a9, 0x7, 0xb, 0xc, 0x9, 0x1, 0x10, 0x0, 0x2, 0x8, 0xa4, 0x7, 0x0, 0x3, 0x9, 0x10000000, 0x7, 0x6, 0xf, 0x7, 0x5, 0x5, 0xb3aa, 0x2, 0xab9, 0x0, 0x49, 0x9, 0x4, 0x0, 0x4f9, 0x7fff, 0x7, 0x3, 0x9000, 0x6, 0x8, 0x3, 0x10000, 0x7, 0x6, 0x8, 0x793c, 0x4, 0x56a, 0x7, 0x3, 0x886, 0x5, 0x8, 0x0, 0x7fffffff, 0xe34]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) 13.408906048s ago: executing program 2 (id=538): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, 0x0, 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r5, 0x94ed, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x700, 0x0) 10.737296241s ago: executing program 3 (id=530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @private=0xa010100, r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r5 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x21, &(0x7f0000000bc0)=ANY=[], 0x0, 0xf61, 0x2a, &(0x7f00000006c0)=""/42, 0x40f00, 0xb1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0xb, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r4}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x36b8d822, 0x3}, &(0x7f0000000180)) sendmmsg$unix(r1, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x640100d0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x40) 9.699259143s ago: executing program 0 (id=531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 9.638891909s ago: executing program 3 (id=532): pipe2$9p(0x0, 0x80000) dup(0xffffffffffffffff) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 8.962479216s ago: executing program 1 (id=533): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20) pivot_root(&(0x7f0000000540)='./file1\x00', &(0x7f00000017c0)='./file1\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 7.433358147s ago: executing program 3 (id=534): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034700)=""/102400, 0x19000) socket$inet6(0xa, 0x3, 0xff) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a0000"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x1370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x12a0, 0xffffffff, 0xffffffff, 0x12a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0xfd, 0x0, 0x13}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x7, 0x1, 0x5, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @local, [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xffffff00, 0xff000000], 0x700, 0x2440}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1100, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x2, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x54, 0xffff42f2, 0x5, 0x5ee, 0x8, 0x1c, 0x8001, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x13d0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fc, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff2, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x0, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x3, 0x40000000000002}], 0x9}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.432083467s ago: executing program 0 (id=544): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 4.938069573s ago: executing program 0 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019}) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 4.896909777s ago: executing program 1 (id=536): syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0) sched_setscheduler(r1, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) 4.200957306s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 4.042311971s ago: executing program 0 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 2.931542891s ago: executing program 0 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, 0x0, 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r5, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) r8 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x700, 0x0) 2.931138981s ago: executing program 2 (id=542): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) close(r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYBLOB="712fac7fa09751a043bcc8162ef83db49504dd0914556d6fc537ec548a5ba50651096f71333ee1ca784546e27376104bb694d1174b6ea80964235850c01639f5da1517b252d0b8a6e299e29198dd38843699092f91ea7f43f96b5b0a156ed1a232b396f6fda007f3afaea8408ab949509f87980b37d46d59b8c7b7dc95e2f787370976312e7c35ccff2dff7d204397950ac8cbcb2552356c21d9722bdb2bdb37968be2e46eed56d7ee3ea7dfdecada189803b7b5331c7e8e83744ecde920475c9ff47a9c494347537af2aadc995f6d826f50b3dcd899e3b75364", @ANYRESDEC=r1], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x60058c0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.363815766s ago: executing program 0 (id=543): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902"], 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0) 1.211386941s ago: executing program 1 (id=545): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 1.125764459s ago: executing program 2 (id=546): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 37.405047ms ago: executing program 1 (id=547): pipe2$9p(0x0, 0x80000) dup(0xffffffffffffffff) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=548): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20) pivot_root(&(0x7f0000000540)='./file1\x00', &(0x7f00000017c0)='./file1\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 81.602073][ T5776] cgroup: Unknown subsys name 'net' [ 81.739575][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.443206][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.213986][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.234945][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.243541][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.243738][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.258523][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.259700][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.266693][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.274182][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.281175][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.287812][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.301378][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.309167][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.317359][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.330277][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.337753][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.361582][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.376258][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.384501][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.392420][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.402671][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.412894][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.433922][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.441836][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.450001][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.986902][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.024274][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.091082][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.143479][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 86.244712][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.252134][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.259567][ T5791] bridge_slave_0: entered allmulticast mode [ 86.267526][ T5791] bridge_slave_0: entered promiscuous mode [ 86.277833][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.285953][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.293226][ T5791] bridge_slave_1: entered allmulticast mode [ 86.301771][ T5791] bridge_slave_1: entered promiscuous mode [ 86.373444][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.380682][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.388033][ T5786] bridge_slave_0: entered allmulticast mode [ 86.395515][ T5786] bridge_slave_0: entered promiscuous mode [ 86.435662][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.443159][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.451987][ T5786] bridge_slave_1: entered allmulticast mode [ 86.459656][ T5786] bridge_slave_1: entered promiscuous mode [ 86.484615][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.523548][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.531132][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.538436][ T5792] bridge_slave_0: entered allmulticast mode [ 86.546246][ T5792] bridge_slave_0: entered promiscuous mode [ 86.556607][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.594114][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.603534][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.610996][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.618232][ T5792] bridge_slave_1: entered allmulticast mode [ 86.627222][ T5792] bridge_slave_1: entered promiscuous mode [ 86.646461][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.653802][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.661215][ T5787] bridge_slave_0: entered allmulticast mode [ 86.668278][ T5787] bridge_slave_0: entered promiscuous mode [ 86.677297][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684702][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.692007][ T5787] bridge_slave_1: entered allmulticast mode [ 86.699083][ T5787] bridge_slave_1: entered promiscuous mode [ 86.708200][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.796386][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.809203][ T5791] team0: Port device team_slave_0 added [ 86.818374][ T5791] team0: Port device team_slave_1 added [ 86.844552][ T5786] team0: Port device team_slave_0 added [ 86.853856][ T5786] team0: Port device team_slave_1 added [ 86.862161][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.898330][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.962167][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.969171][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.995419][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.010395][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.020520][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.027506][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.054011][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.068562][ T5792] team0: Port device team_slave_0 added [ 87.078620][ T5792] team0: Port device team_slave_1 added [ 87.085261][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.097178][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.129508][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.227637][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.236960][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.268991][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.325744][ T5787] team0: Port device team_slave_0 added [ 87.341883][ T5787] team0: Port device team_slave_1 added [ 87.414338][ T5797] Bluetooth: hci1: command tx timeout [ 87.414364][ T5801] Bluetooth: hci0: command tx timeout [ 87.475579][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.485764][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.516707][ T5797] Bluetooth: hci3: command tx timeout [ 87.519954][ T5801] Bluetooth: hci2: command tx timeout [ 87.522684][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.571545][ T5786] hsr_slave_0: entered promiscuous mode [ 87.578433][ T5786] hsr_slave_1: entered promiscuous mode [ 87.609175][ T5791] hsr_slave_0: entered promiscuous mode [ 87.617214][ T5791] hsr_slave_1: entered promiscuous mode [ 87.624433][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.632505][ T5791] Cannot create hsr debugfs directory [ 87.638830][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.647267][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.673586][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.692602][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.700723][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.727045][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.740879][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.747874][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.774712][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.905454][ T5787] hsr_slave_0: entered promiscuous mode [ 87.912347][ T5787] hsr_slave_1: entered promiscuous mode [ 87.918569][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.927010][ T5787] Cannot create hsr debugfs directory [ 87.952054][ T5792] hsr_slave_0: entered promiscuous mode [ 87.958586][ T5792] hsr_slave_1: entered promiscuous mode [ 87.965518][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.973897][ T5792] Cannot create hsr debugfs directory [ 88.383266][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.401298][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.412182][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.423471][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.512508][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.534342][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.564804][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.579154][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.600435][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.617683][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.638760][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.653979][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.731748][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.742695][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.771580][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.781915][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.865194][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.928728][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.959263][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.966644][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.977951][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.985155][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.083885][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.125099][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.147396][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.154678][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.180998][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.222379][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.229541][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.247549][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.299132][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.326822][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.334070][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.351667][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.358875][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.406872][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.477524][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.490471][ T5801] Bluetooth: hci1: command tx timeout [ 89.508667][ T5801] Bluetooth: hci0: command tx timeout [ 89.527870][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.535229][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.572662][ T5801] Bluetooth: hci2: command tx timeout [ 89.578157][ T5801] Bluetooth: hci3: command tx timeout [ 89.597443][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.604746][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.784900][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.944926][ T5791] veth0_vlan: entered promiscuous mode [ 89.983650][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.008849][ T5791] veth1_vlan: entered promiscuous mode [ 90.052654][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.138721][ T5791] veth0_macvtap: entered promiscuous mode [ 90.155983][ T5791] veth1_macvtap: entered promiscuous mode [ 90.206583][ T5787] veth0_vlan: entered promiscuous mode [ 90.231577][ T5786] veth0_vlan: entered promiscuous mode [ 90.245174][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.266313][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.289442][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.301107][ T5786] veth1_vlan: entered promiscuous mode [ 90.312230][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.321397][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.330402][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.339312][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.352103][ T5787] veth1_vlan: entered promiscuous mode [ 90.499683][ T5787] veth0_macvtap: entered promiscuous mode [ 90.518480][ T5786] veth0_macvtap: entered promiscuous mode [ 90.541965][ T5792] veth0_vlan: entered promiscuous mode [ 90.551934][ T5787] veth1_macvtap: entered promiscuous mode [ 90.574283][ T5786] veth1_macvtap: entered promiscuous mode [ 90.587195][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.595847][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.612611][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.623375][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.628043][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.642236][ T5792] veth1_vlan: entered promiscuous mode [ 90.664171][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.675004][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.687505][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.707432][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.716453][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725420][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.734392][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.773977][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.784668][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.823802][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.834797][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.845116][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.858648][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.882653][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.926060][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.938226][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.948203][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.958726][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.971668][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.987930][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.998081][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.011934][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.023771][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.120782][ T5792] veth0_macvtap: entered promiscuous mode [ 91.151119][ T5792] veth1_macvtap: entered promiscuous mode [ 91.345609][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.362931][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.375675][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.419631][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.445500][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.467194][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.580900][ T5801] Bluetooth: hci0: command tx timeout [ 91.582809][ T5797] Bluetooth: hci1: command tx timeout [ 91.692262][ T5801] Bluetooth: hci3: command tx timeout [ 91.692284][ T5797] Bluetooth: hci2: command tx timeout [ 91.737841][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.826361][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.890241][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.894586][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.914320][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.924598][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.940089][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.950444][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.961237][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.981858][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.114145][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125223][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.141588][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.152205][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.160551][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.169390][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.219669][ T786] cfg80211: failed to load regulatory.db [ 92.234860][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.252250][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.286708][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.300742][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.446712][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.455129][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.491487][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.543817][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.574512][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.836847][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 92.880484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.773889][ T5797] Bluetooth: hci0: command tx timeout [ 93.777088][ T5801] Bluetooth: hci1: command tx timeout [ 93.779434][ T5797] Bluetooth: hci3: command tx timeout [ 93.784856][ T5794] Bluetooth: hci2: command tx timeout [ 94.133217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.142656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.194899][ T5862] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 94.230513][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 94.249886][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.260746][ T5862] usb 3-1: Product: syz [ 94.265019][ T5862] usb 3-1: Manufacturer: syz [ 94.279253][ T5862] usb 3-1: SerialNumber: syz [ 94.459874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.540642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.598411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.642996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.643296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.660031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.745295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.507043][ T5862] usb 3-1: USB disconnect, device number 2 [ 99.628472][ T5921] Invalid ELF section header size [ 100.862451][ T28] audit: type=1800 audit(1760476970.307:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12" name="bus" dev="overlay" ino=43 res=0 errno=0 [ 100.974455][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.432354][ T5932] could not allocate digest TFM handle hmac(streebog512) [ 105.668410][ T5952] Invalid ELF section header size [ 106.754442][ T5952] program syz.2.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.023608][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.246600][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 107.310298][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 108.115498][ T8] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 108.252067][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 108.440983][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.469868][ T8] usb 4-1: Product: syz [ 108.479551][ T8] usb 4-1: Manufacturer: syz [ 108.494694][ T5970] Invalid ELF section header size [ 108.661121][ T8] usb 4-1: SerialNumber: syz [ 113.083649][ T8] usb 4-1: USB disconnect, device number 2 [ 117.919311][ T6000] syz.2.28[6000]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 118.757138][ T6000] loop2: detected capacity change from 0 to 40427 [ 118.811637][ T6000] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.835939][ T6012] Invalid ELF section header size [ 118.985984][ T6000] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.490203][ T969] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.542901][ T6000] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.773601][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.818683][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.940287][ T969] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 120.069557][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.269541][ T969] usb 4-1: config 0 descriptor?? [ 120.618527][ T6000] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.670555][ T6000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.965366][ T6033] binder: 6028:6033 ioctl 40189206 200000000340 returned -22 [ 121.256923][ T6035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34'. [ 121.363303][ T969] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 121.479306][ T969] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 121.643677][ T969] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 121.757312][ T969] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 121.913273][ T6000] overlayfs: missing 'lowerdir' [ 122.365901][ T969] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 122.545214][ T969] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 122.658775][ T6046] fuse: Unknown parameter 'group_i00000000000000000000' [ 123.035694][ T969] usb 4-1: USB disconnect, device number 3 [ 124.178842][ T6060] Invalid ELF section header size [ 124.886779][ T6064] Invalid ELF section header size [ 125.454761][ T6064] program syz.1.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.163600][ T6089] binder: 6085:6089 ioctl 40189206 200000000340 returned -22 [ 130.533901][ T6079] loop0: detected capacity change from 0 to 40427 [ 130.632218][ T6103] Invalid ELF section header size [ 133.231920][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254465][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.221432][ T6148] loop3: detected capacity change from 0 to 40427 [ 140.265101][ T6148] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 140.305037][ T6148] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.148509][ T6148] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 141.718009][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 145.559920][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 145.869843][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 145.886207][ T5879] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 145.898126][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.916531][ T5879] usb 2-1: Product: syz [ 145.927977][ T5879] usb 2-1: Manufacturer: syz [ 145.941219][ T5879] usb 2-1: SerialNumber: syz [ 145.978944][ T5879] usb 2-1: config 0 descriptor?? [ 146.333599][ T6203] loop0: detected capacity change from 0 to 40427 [ 146.366889][ T6203] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 146.379479][ T6203] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 146.402541][ T5879] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 146.425678][ T6203] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.438507][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.460320][ T5879] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 146.477279][ T5879] usb 2-1: media controller created [ 146.547554][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.569549][ T6203] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 146.587411][ T6203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.604015][ T6199] Cannot find add_set index 0 as target [ 146.689541][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.714489][ T5879] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 146.734768][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 146.918118][ T5879] usb 2-1: USB disconnect, device number 2 [ 147.038171][ T6219] overlayfs: missing 'workdir' [ 148.176145][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 151.159860][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.350994][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 151.387958][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.431991][ T27] usb 3-1: config 0 has no interfaces? [ 151.432166][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.531784][ T27] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 151.541451][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.549857][ T27] usb 3-1: Product: syz [ 151.554702][ T27] usb 3-1: Manufacturer: syz [ 151.560435][ T27] usb 3-1: SerialNumber: syz [ 151.610799][ T27] usb 3-1: config 0 descriptor?? [ 151.769972][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 151.868316][ T5879] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 151.894326][ T5879] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 151.907294][ T787] usb 3-1: USB disconnect, device number 3 [ 151.931985][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.949997][ T5879] usb 2-1: Product: syz [ 151.954580][ T5879] usb 2-1: Manufacturer: syz [ 152.119390][ T5879] usb 2-1: SerialNumber: syz [ 152.189676][ T6259] fuse: Bad value for 'fd' [ 153.294338][ T5879] usb 2-1: USB disconnect, device number 3 [ 158.215544][ T6302] fuse: Bad value for 'fd' [ 158.309935][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.790009][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 159.797491][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.813346][ T5862] usb 4-1: config 0 has no interfaces? [ 159.836647][ T5862] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 159.949805][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.989714][ T5862] usb 4-1: Product: syz [ 159.994373][ T5862] usb 4-1: Manufacturer: syz [ 160.008975][ T5862] usb 4-1: SerialNumber: syz [ 160.029697][ T5862] usb 4-1: config 0 descriptor?? [ 160.190188][ T6318] loop1: detected capacity change from 0 to 4096 [ 160.304723][ T5862] usb 4-1: USB disconnect, device number 4 [ 160.512620][ T6318] EXT4-fs (loop1): Test dummy encryption mode enabled [ 160.550192][ T6318] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 160.570303][ T6318] System zones: 0-5 [ 160.614701][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.918063][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.936782][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.141490][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 162.161583][ T5879] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 162.184109][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 162.204951][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.238078][ T5879] usb 4-1: Product: syz [ 162.257097][ T5879] usb 4-1: Manufacturer: syz [ 162.265427][ T5879] usb 4-1: SerialNumber: syz [ 165.756695][ T5879] usb 4-1: USB disconnect, device number 5 [ 166.644173][ T6346] fuse: Bad value for 'fd' [ 168.586672][ T5879] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.804480][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 168.821354][ T6369] loop1: detected capacity change from 0 to 4096 [ 168.822298][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.838514][ T6369] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.876709][ T5879] usb 4-1: config 0 has no interfaces? [ 168.895270][ T5879] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 168.895834][ T6369] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 168.904822][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.930008][ T5879] usb 4-1: Product: syz [ 168.934387][ T5879] usb 4-1: Manufacturer: syz [ 168.939032][ T5879] usb 4-1: SerialNumber: syz [ 168.947767][ T6369] System zones: 0-5 [ 168.947813][ T5879] usb 4-1: config 0 descriptor?? [ 168.998600][ T6369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.143527][ T5879] usb 4-1: USB disconnect, device number 6 [ 170.293103][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.541205][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 175.511241][ T6415] loop0: detected capacity change from 0 to 4096 [ 175.578746][ T6415] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.664347][ T6415] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 175.697776][ T6415] System zones: 0-5 [ 175.719468][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.380482][ T6424] binder: 6421:6424 ioctl 4018620d 0 returned -22 [ 177.417096][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.170486][ T969] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 180.565555][ T28] audit: type=1800 audit(1760477050.057:3): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name="bus" dev="overlay" ino=200 res=0 errno=0 [ 180.610727][ T969] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.621418][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.896326][ T969] usb 4-1: Product: syz [ 180.900753][ T969] usb 4-1: Manufacturer: syz [ 180.907316][ T969] usb 4-1: SerialNumber: syz [ 180.928390][ T969] usb 4-1: config 0 descriptor?? [ 184.327640][ T969] usb 4-1: can't set config #0, error -71 [ 184.340310][ T969] usb 4-1: USB disconnect, device number 7 [ 184.971084][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 185.650448][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 185.672105][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.683822][ T5879] usb 1-1: config 0 has no interfaces? [ 185.692903][ T5879] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.710194][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.740174][ T5879] usb 1-1: Product: syz [ 185.744413][ T5879] usb 1-1: Manufacturer: syz [ 185.792867][ T5879] usb 1-1: SerialNumber: syz [ 187.591150][ T5879] usb 1-1: config 0 descriptor?? [ 188.106105][ T5879] usb 1-1: can't set config #0, error -71 [ 188.120496][ T5879] usb 1-1: USB disconnect, device number 2 [ 188.800598][ T6476] binder: 6475:6476 ioctl c0306201 0 returned -14 [ 190.580227][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.763363][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 190.804632][ T5879] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 190.833184][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.851600][ T5879] usb 1-1: Product: syz [ 190.855839][ T5879] usb 1-1: Manufacturer: syz [ 190.870955][ T5879] usb 1-1: SerialNumber: syz [ 190.904914][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 191.244325][ T5879] usb 1-1: config 0 descriptor?? [ 191.419369][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 191.467853][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.478459][ T8] usb 2-1: Product: syz [ 191.483176][ T8] usb 2-1: Manufacturer: syz [ 191.817082][ T5879] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 191.871912][ T8] usb 2-1: SerialNumber: syz [ 191.996445][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.011322][ T8] usb 2-1: config 0 descriptor?? [ 192.047441][ T5879] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 192.060198][ T5879] usb 1-1: media controller created [ 192.067014][ T6483] Cannot find add_set index 0 as target [ 192.145679][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.687164][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 192.720968][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 192.728116][ T5879] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 192.793861][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 192.867011][ T5879] usb 1-1: USB disconnect, device number 3 [ 192.974350][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 193.062905][ T6506] overlayfs: failed to resolve './file0': -2 [ 193.896111][ T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 194.614058][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621180][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.270739][ T5836] usb 2-1: USB disconnect, device number 4 [ 196.380035][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 196.384525][ T6516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 196.839944][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.855109][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.869055][ T5862] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.889489][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.000997][ T5862] usb 1-1: config 0 descriptor?? [ 197.470870][ T5862] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.484204][ T5862] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 197.499389][ T5862] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 197.670670][ T5862] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 197.884759][ T5862] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 197.907734][ T5862] cp2112: probe of 0003:10C4:EA90.0002 failed with error -5 [ 199.110658][ T969] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.134070][ T6534] binder: 6530:6534 ioctl 40189206 200000000340 returned -22 [ 199.630280][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 199.697706][ T969] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 199.816459][ T969] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 199.995704][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.042247][ T969] usb 4-1: Product: syz [ 200.063122][ T5843] usb 1-1: USB disconnect, device number 4 [ 200.082309][ T969] usb 4-1: Manufacturer: syz [ 200.113018][ T969] usb 4-1: SerialNumber: syz [ 201.384479][ T6547] overlayfs: failed to resolve './file0': -2 [ 202.305525][ T969] usb 4-1: USB disconnect, device number 8 [ 206.152488][ T28] audit: type=1800 audit(1760477074.657:4): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.163" name="bus" dev="overlay" ino=248 res=0 errno=0 [ 210.175876][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 212.107319][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.117090][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 212.124622][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.831813][ T6599] loop3: detected capacity change from 0 to 4096 [ 212.919764][ T6599] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.030560][ T6607] overlayfs: failed to resolve './file0': -2 [ 215.160716][ T6599] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 215.161099][ T6599] EXT4-fs: failed to create workqueue [ 215.210374][ T6599] EXT4-fs (loop3): mount failed [ 218.735362][ T5801] Bluetooth: hci3: unexpected event for opcode 0x202d [ 219.451999][ T6653] loop3: detected capacity change from 0 to 4096 [ 219.641282][ T6653] EXT4-fs (loop3): Test dummy encryption mode enabled [ 219.655229][ T6653] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 219.665854][ T6653] System zones: 0-5 [ 219.674540][ T6653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.882952][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.074041][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 224.952365][ T6690] binder: 6687:6690 ioctl 40189206 200000000340 returned -22 [ 226.211273][ T6705] loop3: detected capacity change from 0 to 4096 [ 226.452072][ T28] audit: type=1800 audit(1760477095.887:5): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.199" name="bus" dev="overlay" ino=289 res=0 errno=0 [ 227.179861][ T6705] EXT4-fs (loop3): Test dummy encryption mode enabled [ 227.215221][ T6705] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 227.252144][ T6705] System zones: 0-5 [ 227.270844][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.164500][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.201503][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 228.429326][ T6724] Invalid ELF section header size [ 232.269574][ T6758] loop2: detected capacity change from 0 to 4096 [ 232.326085][ T6758] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.349196][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.208'. [ 232.390905][ T6758] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 232.394275][ T6744] loop0: detected capacity change from 0 to 40427 [ 232.399142][ T6758] System zones: [ 232.413172][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 232.446197][ T6744] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 232.459291][ T6744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.501111][ T6758] 0-5 [ 232.528868][ T6744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.545098][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 232.563214][ T6758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.832046][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.067578][ T6780] Invalid ELF section header size [ 239.623361][ T6810] loop2: detected capacity change from 0 to 4096 [ 239.653044][ T6810] EXT4-fs (loop2): Test dummy encryption mode enabled [ 239.771664][ T6818] Invalid ELF section header size [ 239.791681][ T28] audit: type=1800 audit(1760477109.287:6): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.225" name="bus" dev="overlay" ino=377 res=0 errno=0 [ 242.198430][ T6810] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 242.290326][ T6810] System zones: 0-5 [ 242.627007][ T6810] EXT4-fs: error -4 creating inode table initialization thread [ 242.644877][ T6810] EXT4-fs (loop2): mount failed [ 244.956483][ T6854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.231'. [ 244.975165][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 245.208414][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 245.507330][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 248.624390][ T6889] binder: 6888:6889 ioctl c0306201 0 returned -14 [ 249.764709][ T6899] overlayfs: failed to resolve './file1': -2 [ 256.181000][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.187631][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.685429][ T6928] fuse: Bad value for 'fd' [ 260.765057][ T6962] overlayfs: failed to resolve './file1': -2 [ 265.875840][ T6991] Invalid ELF section header size [ 267.482380][ T7018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.266'. [ 267.522805][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 267.763060][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 269.299934][ T28] audit: type=1800 audit(1760477138.747:7): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.271" name="bus" dev="overlay" ino=413 res=0 errno=0 [ 269.799850][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 270.089859][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 270.105010][ T787] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 270.114205][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.889776][ T787] usb 4-1: Product: syz [ 270.906618][ T787] usb 4-1: Manufacturer: syz [ 270.912708][ T787] usb 4-1: SerialNumber: syz [ 270.919379][ T787] usb 4-1: config 0 descriptor?? [ 271.577179][ T787] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 271.793968][ T7036] Cannot find add_set index 0 as target [ 271.801543][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.941622][ T787] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 271.995229][ T7053] Invalid ELF section header size [ 272.015625][ T787] usb 4-1: media controller created [ 272.320038][ T5862] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 272.509943][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 272.564553][ T5862] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 272.673273][ T5862] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 272.694713][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.699931][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.762665][ T5862] usb 2-1: Product: syz [ 272.771180][ T5862] usb 2-1: Manufacturer: syz [ 272.779274][ T5862] usb 2-1: SerialNumber: syz [ 273.359948][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 273.367125][ T787] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 273.810639][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 273.828081][ T787] usb 4-1: USB disconnect, device number 9 [ 277.706237][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 278.891357][ T5862] usb 2-1: USB disconnect, device number 5 [ 279.974816][ T28] audit: type=1800 audit(1760477149.447:8): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.283" name="bus" dev="overlay" ino=467 res=0 errno=0 [ 288.072895][ T28] audit: type=1800 audit(1760477157.567:9): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.299" name="bus" dev="overlay" ino=462 res=0 errno=0 [ 288.902391][ T7150] binder: BINDER_SET_CONTEXT_MGR already set [ 288.917449][ T7150] binder: 7149:7150 ioctl 4018620d 200000000040 returned -16 [ 294.356349][ T28] audit: type=1800 audit(1760477163.817:10): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="bus" dev="overlay" ino=491 res=0 errno=0 [ 300.661455][ T5879] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 300.961122][ T7239] Invalid ELF section header size [ 301.218661][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 301.330456][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.519777][ T5879] usb 1-1: config 0 has no interfaces? [ 301.541800][ T5879] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 301.553849][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.569935][ T5879] usb 1-1: Product: syz [ 301.574160][ T5879] usb 1-1: Manufacturer: syz [ 301.578787][ T5879] usb 1-1: SerialNumber: syz [ 301.633484][ T5879] usb 1-1: config 0 descriptor?? [ 301.997106][ T7228] loop1: detected capacity change from 0 to 40427 [ 302.015763][ T7228] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 302.095994][ T5843] usb 1-1: USB disconnect, device number 5 [ 302.180210][ T7228] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 302.616202][ T7228] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 309.114200][ T28] audit: type=1800 audit(1760477178.587:11): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.339" name="bus" dev="overlay" ino=537 res=0 errno=0 [ 309.469000][ T7290] loop0: detected capacity change from 0 to 40427 [ 309.503900][ T7290] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 309.519877][ T7290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 309.588940][ T7290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 309.813632][ T7290] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 309.841692][ T7290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 313.447021][ T7330] loop3: detected capacity change from 0 to 4096 [ 313.655652][ T7330] EXT4-fs (loop3): Test dummy encryption mode enabled [ 313.783998][ T7330] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 313.826302][ T7330] System zones: 0-5 [ 313.862376][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.487711][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.850988][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.858960][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.910684][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.918361][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.926005][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.933871][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.944150][ T5792] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 316.986483][ T28] audit: type=1800 audit(1760477186.467:12): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.349" name="bus" dev="overlay" ino=544 res=0 errno=0 [ 317.498182][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.505070][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.540180][ T5879] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 317.806288][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 317.871972][ T5879] usb 4-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac [ 318.028898][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.207874][ T5879] usb 4-1: config 0 descriptor?? [ 318.588332][ T5862] usb 4-1: USB disconnect, device number 10 [ 318.710055][ T5890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 318.980696][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 319.066327][ T5890] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 319.209525][ T5890] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 319.229453][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.248376][ T5890] usb 2-1: Product: syz [ 319.288973][ T5890] usb 2-1: Manufacturer: syz [ 319.301272][ T5890] usb 2-1: SerialNumber: syz [ 322.131735][ T5890] usb 2-1: USB disconnect, device number 6 [ 323.970280][ T28] audit: type=1800 audit(1760477193.447:13): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.362" name="bus" dev="overlay" ino=531 res=0 errno=0 [ 324.696547][ T7388] loop0: detected capacity change from 0 to 40427 [ 324.755044][ T7388] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 324.804593][ T7388] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 324.841462][ T7388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 324.955135][ T7388] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 324.974270][ T7388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 330.210229][ T5836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 330.430067][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 330.525719][ T5836] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 330.556793][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.598295][ T5836] usb 4-1: Product: syz [ 330.635936][ T5836] usb 4-1: Manufacturer: syz [ 330.663703][ T5836] usb 4-1: SerialNumber: syz [ 331.067575][ T5836] usb 4-1: config 0 descriptor?? [ 331.597366][ T5836] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 331.812542][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.827349][ T5836] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 331.852066][ T5836] usb 4-1: media controller created [ 331.881719][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.917463][ T7434] Cannot find add_set index 0 as target [ 331.971392][ T7436] Invalid ELF section header size [ 332.136930][ T7438] program syz.1.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.461281][ T5836] zl10353_read_register: readreg error (reg=127, ret==0) [ 332.469076][ T5836] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 332.477215][ T5836] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 332.905916][ T787] usb 4-1: USB disconnect, device number 11 [ 332.993466][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 333.651087][ T7439] loop2: detected capacity change from 0 to 40427 [ 333.676199][ T7439] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 333.709905][ T7439] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 334.760823][ T7439] F2FS-fs (loop2): Found nat_bits in checkpoint [ 334.966251][ T7439] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 335.005481][ T7439] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 342.239981][ T5879] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 342.405014][ T7497] loop2: detected capacity change from 0 to 40427 [ 342.420057][ T7497] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 342.429769][ T7497] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 342.441545][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 342.447561][ T5879] usb 4-1: no configurations [ 342.454377][ T5879] usb 4-1: can't read configurations, error -22 [ 342.477717][ T7497] F2FS-fs (loop2): Found nat_bits in checkpoint [ 342.581132][ T7497] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 342.588324][ T7497] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 342.620897][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 342.810091][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 342.816974][ T5879] usb 4-1: no configurations [ 342.833432][ T5879] usb 4-1: can't read configurations, error -22 [ 342.873506][ T5879] usb usb4-port1: attempt power cycle [ 343.790024][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 343.808121][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.826251][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.835100][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.848165][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.856003][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.863931][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.871573][ T5791] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 343.871984][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 343.915914][ T5879] usb 4-1: no configurations [ 343.929837][ T5879] usb 4-1: can't read configurations, error -22 [ 344.100008][ T5879] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 344.140492][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 344.148388][ T5879] usb 4-1: no configurations [ 344.161925][ T5879] usb 4-1: can't read configurations, error -22 [ 344.168489][ T5879] usb usb4-port1: unable to enumerate USB device [ 344.179948][ T5836] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 344.389925][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 344.402041][ T5836] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 344.418384][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 344.427756][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.435975][ T5836] usb 2-1: Product: syz [ 344.440362][ T5836] usb 2-1: Manufacturer: syz [ 344.444998][ T5836] usb 2-1: SerialNumber: syz [ 349.583784][ T7536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'. [ 349.593642][ T5836] usb 2-1: USB disconnect, device number 7 [ 350.476691][ T7536] netlink: set zone limit has 8 unknown bytes [ 354.109890][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 354.989752][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 355.002637][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 355.010769][ T5836] usb 2-1: can't read configurations, error -61 [ 355.210285][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 355.559747][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 357.067580][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 357.080004][ T5836] usb 2-1: can't read configurations, error -71 [ 357.090394][ T5836] usb usb2-port1: attempt power cycle [ 359.254209][ T7610] Invalid ELF section header size [ 359.795894][ T7593] loop3: detected capacity change from 0 to 40427 [ 360.040315][ T7593] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 360.048160][ T7593] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 360.138929][ T7593] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 362.245929][ T7636] Invalid ELF section header size [ 363.214687][ T7639] program syz.2.423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.877677][ T7642] Invalid ELF section header size [ 364.190429][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 364.452437][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 364.499146][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 364.507126][ T786] usb 1-1: can't read configurations, error -61 [ 364.660128][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 364.850104][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 364.866671][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 364.874799][ T786] usb 1-1: can't read configurations, error -61 [ 364.981802][ T786] usb usb1-port1: attempt power cycle [ 365.070297][ T7650] binder_alloc: 7649: binder_alloc_buf, no vma [ 365.208949][ T7655] Invalid ELF section header size [ 365.450232][ T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.511289][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 365.526563][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 365.534802][ T786] usb 1-1: can't read configurations, error -61 [ 365.730361][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.747044][ T5843] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 365.771422][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 365.796019][ T786] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 365.804938][ T786] usb 1-1: can't read configurations, error -61 [ 365.811820][ T786] usb usb1-port1: unable to enumerate USB device [ 365.950071][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 366.005097][ T7660] Invalid ELF section header size [ 366.015496][ T5843] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 366.603007][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 366.612309][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.632300][ T5843] usb 4-1: Product: syz [ 366.650190][ T5843] usb 4-1: Manufacturer: syz [ 366.659891][ T5843] usb 4-1: SerialNumber: syz [ 367.028813][ T5836] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 367.496786][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 367.674070][ T5836] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 367.781781][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.851067][ T5836] usb 2-1: Product: syz [ 368.083603][ T5836] usb 2-1: Manufacturer: syz [ 368.091553][ T5836] usb 2-1: SerialNumber: syz [ 368.099093][ T5836] usb 2-1: config 0 descriptor?? [ 368.543557][ T5836] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 369.918884][ T5843] usb 4-1: USB disconnect, device number 16 [ 370.139297][ T5836] gspca_topro: Sensor soi763a [ 371.007704][ T5836] usb 2-1: USB disconnect, device number 11 [ 371.683883][ T7698] Invalid ELF section header size [ 372.610208][ T5879] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 372.851224][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 372.944676][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 373.574640][ T5879] usb 4-1: can't read configurations, error -61 [ 373.753126][ T5879] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 373.971026][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 374.799181][ T28] audit: type=1800 audit(1760477244.287:14): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.447" name="bus" dev="overlay" ino=679 res=0 errno=0 [ 374.908244][ T5879] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 374.916741][ T5879] usb 4-1: can't read configurations, error -61 [ 374.930050][ T5879] usb usb4-port1: attempt power cycle [ 375.516691][ T5879] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 375.929859][ T5879] usb 4-1: device not accepting address 19, error -71 [ 375.958306][ T7737] Invalid ELF section header size [ 378.981663][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987986][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.159873][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 380.341650][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 380.360983][ T8] usb 3-1: config 0 has no interfaces? [ 380.369163][ T8] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 380.408923][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.451576][ T8] usb 3-1: Product: syz [ 380.470928][ T8] usb 3-1: Manufacturer: syz [ 380.494425][ T8] usb 3-1: SerialNumber: syz [ 380.507309][ T8] usb 3-1: config 0 descriptor?? [ 380.840545][ T8] usb 3-1: USB disconnect, device number 4 [ 382.257471][ T28] audit: type=1800 audit(1760477251.747:15): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.469" name="bus" dev="overlay" ino=721 res=0 errno=0 [ 383.189517][ T7791] loop3: detected capacity change from 0 to 40427 [ 383.267343][ T7791] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 383.345769][ T7791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 383.433048][ T7791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 386.720672][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.909915][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 386.974415][ T5836] usb 1-1: config 0 has no interfaces? [ 387.021488][ T5836] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 387.036067][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.044339][ T5836] usb 1-1: Product: syz [ 387.049194][ T5836] usb 1-1: Manufacturer: syz [ 387.053982][ T5836] usb 1-1: SerialNumber: syz [ 387.081248][ T5836] usb 1-1: config 0 descriptor?? [ 387.421518][ T8] usb 1-1: USB disconnect, device number 10 [ 388.774674][ T28] audit: type=1800 audit(1760477258.267:16): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.484" name="bus" dev="overlay" ino=751 res=0 errno=0 [ 390.660793][ T7848] loop3: detected capacity change from 0 to 40427 [ 390.679834][ T7848] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 390.704540][ T7848] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 390.754361][ T7848] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.898712][ T7848] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 390.909841][ T7848] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 392.483815][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 392.539905][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 393.193209][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 393.200946][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 393.208538][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 393.243591][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 393.284432][ T5787] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 394.210107][ T5862] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 394.419733][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 394.434325][ T5862] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 394.470156][ T5862] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 394.479288][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.502913][ T5862] usb 3-1: Product: syz [ 394.509990][ T5862] usb 3-1: Manufacturer: syz [ 394.514649][ T5862] usb 3-1: SerialNumber: syz [ 394.790045][ T5890] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 395.042874][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 395.144809][ T5890] usb 4-1: config 0 has no interfaces? [ 395.241018][ T5890] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 395.306268][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.387636][ T5890] usb 4-1: Product: syz [ 395.453490][ T5890] usb 4-1: Manufacturer: syz [ 395.507220][ T5890] usb 4-1: SerialNumber: syz [ 395.653762][ T5890] usb 4-1: config 0 descriptor?? [ 396.887093][ T5836] usb 4-1: USB disconnect, device number 21 [ 397.133365][ T5862] usb 3-1: USB disconnect, device number 5 [ 397.874853][ T28] audit: type=1800 audit(1760477267.367:17): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="bus" dev="overlay" ino=792 res=0 errno=0 [ 400.563684][ T28] audit: type=1800 audit(1760477270.057:18): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="bus" dev="overlay" ino=628 res=0 errno=0 [ 403.019925][ T5879] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 403.199757][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 403.215458][ T5879] usb 4-1: config 0 has no interfaces? [ 403.229312][ T5879] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 403.252583][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.262173][ T5879] usb 4-1: Product: syz [ 403.266591][ T5879] usb 4-1: Manufacturer: syz [ 403.271942][ T5879] usb 4-1: SerialNumber: syz [ 403.286948][ T5879] usb 4-1: config 0 descriptor?? [ 403.591855][ T5879] usb 4-1: USB disconnect, device number 22 [ 404.169825][ T5879] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 404.711851][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.001704][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.019989][ T5879] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 405.185424][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.379303][ T7960] binder: 7955:7960 ioctl 40189206 200000000340 returned -22 [ 405.604236][ T5879] usb 2-1: config 0 descriptor?? [ 407.689339][ T5879] usbhid 2-1:0.0: can't add hid device: -71 [ 407.711321][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.515'. [ 407.722410][ T5879] usbhid: probe of 2-1:0.0 failed with error -71 [ 407.736871][ T5879] usb 2-1: USB disconnect, device number 12 [ 407.898341][ T28] audit: type=1800 audit(1760477277.387:19): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.517" name="bus" dev="overlay" ino=842 res=0 errno=0 [ 409.280326][ T7985] fuse: Unknown parameter 'group_i00000000000000000000' [ 410.474150][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 410.690056][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 410.704563][ T5879] usb 1-1: config 0 has no interfaces? [ 410.713982][ T5879] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 410.728622][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.836469][ T5879] usb 1-1: Product: syz [ 410.847683][ T5879] usb 1-1: Manufacturer: syz [ 410.896805][ T5879] usb 1-1: SerialNumber: syz [ 411.642671][ T5879] usb 1-1: config 0 descriptor?? [ 412.044421][ T5843] usb 1-1: USB disconnect, device number 11 [ 412.159802][ T5879] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 412.350217][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 412.357663][ T5879] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 412.370693][ T5879] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 412.380141][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.388278][ T5879] usb 4-1: Product: syz [ 412.394116][ T5879] usb 4-1: Manufacturer: syz [ 412.398853][ T5879] usb 4-1: SerialNumber: syz [ 415.903275][ T5879] usb 4-1: USB disconnect, device number 23 [ 418.962332][ T28] audit: type=1800 audit(1760477286.037:20): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.529" name="bus" dev="overlay" ino=871 res=0 errno=0 [ 419.436466][ T5879] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.360321][ T28] audit: type=1800 audit(1760477290.857:21): pid=8040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.533" name="bus" dev="overlay" ino=885 res=0 errno=0 [ 424.411417][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 428.769809][ T787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 428.949850][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 429.544643][ T787] usb 1-1: config 0 has no interfaces? [ 429.641430][ T787] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 429.651541][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.661676][ T787] usb 1-1: Product: syz [ 429.665908][ T787] usb 1-1: Manufacturer: syz [ 429.671096][ T787] usb 1-1: SerialNumber: syz [ 429.681133][ T787] usb 1-1: config 0 descriptor?? [ 429.950290][ T787] usb 1-1: USB disconnect, device number 13 [ 430.082736][ T28] audit: type=1800 audit(1760477299.577:22): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.548" name="bus" dev="overlay" ino=849 res=0 errno=0 [ 430.139676][ C1] ------------[ cut here ]------------ [ 430.145682][ C1] ODEBUG: free active (active state 0) object: ffff88805e644090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 430.159203][ C1] WARNING: CPU: 1 PID: 8084 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 430.169289][ C1] Modules linked in: [ 430.173230][ C1] CPU: 1 PID: 8084 Comm: syz.2.548 Not tainted syzkaller #0 [ 430.180546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.190851][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 430.197222][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 430.216903][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 430.223061][ C1] RAX: 21ad1cf8769da300 RBX: ffffffff970d6b30 RCX: ffff88801f6b0000 [ 430.231074][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 430.239236][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 430.247247][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805e644200 [ 430.255263][ C1] R13: ffffffff89673230 R14: ffff88805e644000 R15: ffff88805e644090 [ 430.263296][ C1] FS: 00007fc7b0aac6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 430.272346][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.278978][ C1] CR2: 000000110c303946 CR3: 0000000026ddd000 CR4: 00000000003506e0 [ 430.287069][ C1] Call Trace: [ 430.290391][ C1] [ 430.293265][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 430.298677][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 430.303979][ C1] __kmem_cache_free+0xba/0x1f0 [ 430.308873][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 430.313981][ C1] ? call_timer_fn+0x15a/0x530 [ 430.318772][ C1] call_timer_fn+0x16e/0x530 [ 430.323399][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 430.328445][ C1] ? call_timer_fn+0xbf/0x530 [ 430.333160][ C1] ? __run_timers+0x7d0/0x7d0 [ 430.337871][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.343118][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 430.348343][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 430.353416][ C1] __run_timers+0x52d/0x7d0 [ 430.357982][ C1] ? detach_timer+0x2b0/0x2b0 [ 430.362740][ C1] ? lock_chain_count+0x20/0x20 [ 430.367628][ C1] run_timer_softirq+0x67/0xf0 [ 430.372440][ C1] handle_softirqs+0x280/0x820 [ 430.377227][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 430.382054][ C1] ? do_softirq+0x180/0x180 [ 430.386583][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 430.391849][ C1] __irq_exit_rcu+0xc7/0x190 [ 430.396491][ C1] ? irq_exit_rcu+0x20/0x20 [ 430.401037][ C1] irq_exit_rcu+0x9/0x20 [ 430.405319][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 430.411026][ C1] [ 430.413994][ C1] [ 430.416960][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.422993][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 430.429601][ C1] Code: 74 05 e8 3a dc 13 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e2 5a e3 f6 65 8b 05 c3 a5 8b 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 430.449304][ C1] RSP: 0018:ffffc900190a77c0 EFLAGS: 00000206 [ 430.455413][ C1] RAX: 21ad1cf8769da300 RBX: 0000000000000a06 RCX: 21ad1cf8769da300 [ 430.463418][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 430.471443][ C1] RBP: ffffc900190a7858 R08: ffffffff8e4a83af R09: 1ffffffff1c95075 [ 430.479440][ C1] R10: dffffc0000000000 R11: fffffbfff1c95076 R12: dffffc0000000000 [ 430.487480][ C1] R13: ffffc900190a7920 R14: ffff8880b8f29580 R15: 1ffff92003214ef8 [ 430.495514][ C1] ? _raw_spin_unlock+0x40/0x40 [ 430.500414][ C1] ? rcu_is_watching+0x15/0xb0 [ 430.505207][ C1] ? enqueue_timer+0x225/0x530 [ 430.510025][ C1] __mod_timer+0x984/0xdb0 [ 430.514492][ C1] schedule_timeout+0x15b/0x280 [ 430.519378][ C1] ? console_conditional_schedule+0x40/0x40 [ 430.525349][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 430.531372][ C1] ? update_process_times+0x1b0/0x1b0 [ 430.536774][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.542099][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 430.547330][ C1] ? snd_rawmidi_write+0x34d/0xb10 [ 430.552492][ C1] snd_rawmidi_write+0x398/0xb10 [ 430.557463][ C1] ? snd_rawmidi_read+0x6c0/0x6c0 [ 430.562534][ C1] ? do_task_dead+0xd0/0xd0 [ 430.567054][ C1] ? end_current_label_crit_section+0x149/0x170 [ 430.573357][ C1] ? common_file_perm+0x198/0x1f0 [ 430.578433][ C1] ? fsnotify_perm+0x5d/0x5e0 [ 430.583351][ C1] ? security_file_permission+0x79/0xa0 [ 430.588928][ C1] do_iter_write+0x50e/0xc70 [ 430.593573][ C1] ? snd_rawmidi_read+0x6c0/0x6c0 [ 430.598619][ C1] ? vfs_iter_write+0xa0/0xa0 [ 430.603346][ C1] ? __import_iovec+0x3fa/0x860 [ 430.608227][ C1] ? import_iovec+0x73/0xa0 [ 430.612791][ C1] do_writev+0x252/0x410 [ 430.617083][ C1] ? do_readv+0x3e0/0x3e0 [ 430.621506][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 430.627521][ C1] ? lock_chain_count+0x20/0x20 [ 430.632425][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 430.637668][ C1] do_syscall_64+0x55/0xb0 [ 430.642163][ C1] ? clear_bhb_loop+0x40/0x90 [ 430.646859][ C1] ? clear_bhb_loop+0x40/0x90 [ 430.651619][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.657532][ C1] RIP: 0033:0x7fc7afb8eec9 [ 430.662017][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.681693][ C1] RSP: 002b:00007fc7b0aac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 430.690153][ C1] RAX: ffffffffffffffda RBX: 00007fc7afde5fa0 RCX: 00007fc7afb8eec9 [ 430.698151][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 430.706169][ C1] RBP: 00007fc7afc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 430.714201][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.722230][ C1] R13: 00007fc7afde6038 R14: 00007fc7afde5fa0 R15: 00007ffd79a54df8 [ 430.730263][ C1] [ 430.733319][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 430.740600][ C1] CPU: 1 PID: 8084 Comm: syz.2.548 Not tainted syzkaller #0 [ 430.747894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.757973][ C1] Call Trace: [ 430.761263][ C1] [ 430.764146][ C1] dump_stack_lvl+0x16c/0x230 [ 430.768854][ C1] ? show_regs_print_info+0x20/0x20 [ 430.774095][ C1] ? load_image+0x3b0/0x3b0 [ 430.778627][ C1] panic+0x2c0/0x710 [ 430.782552][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 430.787091][ C1] __warn+0x2e0/0x470 [ 430.791082][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 430.796817][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 430.802554][ C1] report_bug+0x2be/0x4f0 [ 430.806919][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 430.812662][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 430.818433][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 430.824171][ C1] handle_bug+0xcf/0x120 [ 430.828450][ C1] exc_invalid_op+0x1a/0x50 [ 430.832966][ C1] asm_exc_invalid_op+0x1a/0x20 [ 430.837825][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 430.844169][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 430.863790][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 430.869894][ C1] RAX: 21ad1cf8769da300 RBX: ffffffff970d6b30 RCX: ffff88801f6b0000 [ 430.877902][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 430.885983][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 430.893971][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805e644200 [ 430.901958][ C1] R13: ffffffff89673230 R14: ffff88805e644000 R15: ffff88805e644090 [ 430.909966][ C1] ? rose_transmit_link+0x740/0x740 [ 430.915198][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 430.920593][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 430.925727][ C1] __kmem_cache_free+0xba/0x1f0 [ 430.930627][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 430.935601][ C1] ? call_timer_fn+0x15a/0x530 [ 430.940374][ C1] call_timer_fn+0x16e/0x530 [ 430.944972][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 430.950028][ C1] ? call_timer_fn+0xbf/0x530 [ 430.954733][ C1] ? __run_timers+0x7d0/0x7d0 [ 430.959425][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.964635][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 430.969849][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 430.974923][ C1] __run_timers+0x52d/0x7d0 [ 430.979445][ C1] ? detach_timer+0x2b0/0x2b0 [ 430.984131][ C1] ? lock_chain_count+0x20/0x20 [ 430.988996][ C1] run_timer_softirq+0x67/0xf0 [ 430.993780][ C1] handle_softirqs+0x280/0x820 [ 430.998563][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 431.003379][ C1] ? do_softirq+0x180/0x180 [ 431.007893][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 431.013115][ C1] __irq_exit_rcu+0xc7/0x190 [ 431.017724][ C1] ? irq_exit_rcu+0x20/0x20 [ 431.022266][ C1] irq_exit_rcu+0x9/0x20 [ 431.026531][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 431.032223][ C1] [ 431.035165][ C1] [ 431.038122][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.044152][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 431.050670][ C1] Code: 74 05 e8 3a dc 13 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e2 5a e3 f6 65 8b 05 c3 a5 8b 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 431.070381][ C1] RSP: 0018:ffffc900190a77c0 EFLAGS: 00000206 [ 431.076467][ C1] RAX: 21ad1cf8769da300 RBX: 0000000000000a06 RCX: 21ad1cf8769da300 [ 431.084538][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 431.092524][ C1] RBP: ffffc900190a7858 R08: ffffffff8e4a83af R09: 1ffffffff1c95075 [ 431.100520][ C1] R10: dffffc0000000000 R11: fffffbfff1c95076 R12: dffffc0000000000 [ 431.108529][ C1] R13: ffffc900190a7920 R14: ffff8880b8f29580 R15: 1ffff92003214ef8 [ 431.116542][ C1] ? _raw_spin_unlock+0x40/0x40 [ 431.121414][ C1] ? rcu_is_watching+0x15/0xb0 [ 431.126221][ C1] ? enqueue_timer+0x225/0x530 [ 431.131038][ C1] __mod_timer+0x984/0xdb0 [ 431.135486][ C1] schedule_timeout+0x15b/0x280 [ 431.140365][ C1] ? console_conditional_schedule+0x40/0x40 [ 431.146288][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 431.152323][ C1] ? update_process_times+0x1b0/0x1b0 [ 431.157839][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.163053][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 431.168277][ C1] ? snd_rawmidi_write+0x34d/0xb10 [ 431.173508][ C1] snd_rawmidi_write+0x398/0xb10 [ 431.178603][ C1] ? snd_rawmidi_read+0x6c0/0x6c0 [ 431.183655][ C1] ? do_task_dead+0xd0/0xd0 [ 431.188191][ C1] ? end_current_label_crit_section+0x149/0x170 [ 431.194474][ C1] ? common_file_perm+0x198/0x1f0 [ 431.199523][ C1] ? fsnotify_perm+0x5d/0x5e0 [ 431.204228][ C1] ? security_file_permission+0x79/0xa0 [ 431.209810][ C1] do_iter_write+0x50e/0xc70 [ 431.214448][ C1] ? snd_rawmidi_read+0x6c0/0x6c0 [ 431.219489][ C1] ? vfs_iter_write+0xa0/0xa0 [ 431.224265][ C1] ? __import_iovec+0x3fa/0x860 [ 431.229163][ C1] ? import_iovec+0x73/0xa0 [ 431.233688][ C1] do_writev+0x252/0x410 [ 431.237964][ C1] ? do_readv+0x3e0/0x3e0 [ 431.242322][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 431.248491][ C1] ? lock_chain_count+0x20/0x20 [ 431.253389][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 431.258630][ C1] do_syscall_64+0x55/0xb0 [ 431.263089][ C1] ? clear_bhb_loop+0x40/0x90 [ 431.267880][ C1] ? clear_bhb_loop+0x40/0x90 [ 431.272587][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.278507][ C1] RIP: 0033:0x7fc7afb8eec9 [ 431.282945][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.302590][ C1] RSP: 002b:00007fc7b0aac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 431.311020][ C1] RAX: ffffffffffffffda RBX: 00007fc7afde5fa0 RCX: 00007fc7afb8eec9 [ 431.319071][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005 [ 431.327076][ C1] RBP: 00007fc7afc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.335068][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.343064][ C1] R13: 00007fc7afde6038 R14: 00007fc7afde5fa0 R15: 00007ffd79a54df8 [ 431.351067][ C1] [ 431.354382][ C1] Kernel Offset: disabled [ 431.358808][ C1] Rebooting in 86400 seconds..