last executing test programs: 10m37.645283315s ago: executing program 32 (id=335): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, r4, 0xf6466a61131948ab}, 0x38) recvfrom(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 9m55.274587019s ago: executing program 3 (id=514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004800003400000000000690780a010100ac1414aa860b000000030705e0f4930000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x7}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000400000000000900020073797a31000000000c00"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f00000000c0)={0x23, 0x7}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3272078b089b34373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d316d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3527138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aad66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 9m52.659284808s ago: executing program 3 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x14}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 9m51.849804131s ago: executing program 3 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) 9m48.832188217s ago: executing program 3 (id=528): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 9m48.282637437s ago: executing program 3 (id=530): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004800003400000000000690780a010100ac1414aa860b000000030705e0f4930000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x7}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000400000000000900020073797a31000000000c00"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f00000000c0)={0x23, 0x7}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 9m48.129665521s ago: executing program 2 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x14}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 9m47.72542158s ago: executing program 3 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) 9m47.22994227s ago: executing program 2 (id=535): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r3, 0x82e0, 0xff39, 0x3) 9m46.720645807s ago: executing program 33 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) 9m45.932943748s ago: executing program 2 (id=539): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 9m45.426484287s ago: executing program 2 (id=540): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 9m44.804450192s ago: executing program 2 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 9m44.256012547s ago: executing program 2 (id=543): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004800003400000000000690780a010100ac1414aa860b000000030705e0f4930000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x7}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000400000000000900020073797a31000000000c00078008001200000000000500050002000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f00000000c0)={0x23, 0x7}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 9m43.796642972s ago: executing program 34 (id=543): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004800003400000000000690780a010100ac1414aa860b000000030705e0f4930000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0xfffffffffffffc93, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x7}}}, 0x118) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000400000000000900020073797a31000000000c00078008001200000000000500050002000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f00000000c0)={0x23, 0x7}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 5m12.685963257s ago: executing program 5 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013700000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m10.777566233s ago: executing program 5 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa}, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="050f0c00e53cb308984fc777b300"], 0x1, [{0x32, &(0x7f0000000200)=@string={0x32, 0x3, "9c685afa5e7f7b60256296022dbf0c6ad17e486032001a5cf1b76e59dbcec64c65ae75bf30f96f0539ff247c87425e54"}}]}) 5m7.291339632s ago: executing program 5 (id=1293): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 5m6.649958751s ago: executing program 5 (id=1296): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 5m6.026269474s ago: executing program 5 (id=1297): r0 = syz_io_uring_setup(0x3332, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x299}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) memfd_create(0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80000021}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 5m4.824011236s ago: executing program 5 (id=1299): r0 = socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @private2, 0x4}, 0x1c) 5m4.801570481s ago: executing program 1 (id=1300): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 5m4.471232567s ago: executing program 35 (id=1299): r0 = socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @private2, 0x4}, 0x1c) 5m3.676889339s ago: executing program 1 (id=1304): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x408000, 0x0) r2 = socket(0x11, 0x80a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 5m2.187599944s ago: executing program 1 (id=1309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x801) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x11ff, 0x400080) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000840)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464d0, &(0x7f0000000140)=r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendto$inet6(r9, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000006280)=[{{0x0, 0x44, 0x0}}], 0x400000000000094, 0x10142, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000015000100000051028ffa1c5705"], 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES32=r9], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4040041) syz_open_dev$sndmidi(0x0, 0xffffffffffffff7f, 0x20000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090001000000050002"], 0x3c}}, 0x0) 5m1.060257254s ago: executing program 1 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x1a7, &(0x7f00008b5000/0x1000)=nil) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3400000040000900fffffffffddbdf250100000004001f001c0001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m59.896240863s ago: executing program 1 (id=1313): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 4m59.255879857s ago: executing program 1 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_io_uring_setup(0x50df, &(0x7f0000000080)={0x0, 0xf81e, 0x80, 0x2, 0x148}, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) 4m44.21897688s ago: executing program 36 (id=1316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_io_uring_setup(0x50df, &(0x7f0000000080)={0x0, 0xf81e, 0x80, 0x2, 0x148}, 0x0, &(0x7f00000001c0)) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) msgsnd(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) 1m36.315237698s ago: executing program 8 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x510c, 0x0, 0x0, 0x0, 0x56) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m35.230998136s ago: executing program 8 (id=1737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000599000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/140, 0x8c, 0x1, &(0x7f0000000580)=""/240, 0xf0}, &(0x7f0000000280)=0x40) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}, {0x3, &(0x7f0000000040)=0x2, 0x2}], 0x2, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x14, r9, r7}) 1m31.592690877s ago: executing program 8 (id=1742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000599000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/140, 0x8c, 0x1, &(0x7f0000000580)=""/240, 0xf0}, &(0x7f0000000280)=0x40) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}, {0x3, &(0x7f0000000040)=0x2, 0x2}], 0x2, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x14, r9, r7}) 1m30.451238416s ago: executing program 8 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x510c, 0x0, 0x0, 0x0, 0x56) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m29.068376568s ago: executing program 8 (id=1747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000599000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/140, 0x8c, 0x1, &(0x7f0000000580)=""/240, 0xf0}, &(0x7f0000000280)=0x40) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}, {0x3, &(0x7f0000000040)=0x2, 0x2}], 0x2, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r7}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x14, r9, r7}) 1m25.224094394s ago: executing program 8 (id=1752): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1952, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x5, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x240, 0xfd7d, 0x4, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x5, 0x1, 0x9, 0x6, 0x7, 0xc, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)) open(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 1m10.149568351s ago: executing program 37 (id=1752): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1952, 0x51d8, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x4, 0x1006, 0x5, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x240, 0xfd7d, 0x4, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x5, 0x1, 0x9, 0x6, 0x7, 0xc, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)) open(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) 15.397971588s ago: executing program 4 (id=1897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r2, 0x82e0, 0xff39, 0x3) 12.593571976s ago: executing program 7 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="9462172c"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f0000000280)) getsockopt$sock_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000380)=0x1000) close(r3) 12.406225261s ago: executing program 0 (id=1901): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) gettid() memfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x152}, &(0x7f0000000240)={0xc7, 0xda31, 0xa, 0x8, 0x6, 0x8, 0x7fff, 0x8000}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x8]}, 0x8}) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) mount$cgroup(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2fff, 0x2, &(0x7f0000000100)='\x00\x00'}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0xd}]}, 0x10) pipe(&(0x7f0000000080)) 12.376575457s ago: executing program 6 (id=1902): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b95cf30b0e56e9731595b21f5388813ff17e39e148c77bbc45c4b4fef0dc7f97936c45dff1ff3f5f94f0c5f4b5deada3f522dfdcc10c8bba318fe0ef10e36f481f8af4e231db8f622b5f008ec9568a77a050171cfb8b57effdb2843546154421798349f3625bd787a298e767289c1de4348c2b7dc3b4a39f0782c47a77eb7cfbad6e3ca3593dad8470ccb18becc85a11e2184fb6fe6f89a78389b72d", 0x9c}, {&(0x7f0000000180)="72900077649b3ed475d4a0", 0xb}, {&(0x7f0000000940)="d43145d2ba67abd2a975390617fc9c7df95444776fb1b98924c133d4fae1a473fce2c1a171b07c9a671a5acfc02874b72b8bee43f79acd120030ed9de7e9617cdc32b6553b4c0f445e8bbed86a72c9dbb2b2b3a477d3", 0x56}, {&(0x7f0000000280)="7fce65b5d044589d831b1cbf4c85642a00be86f319", 0x15}], 0x4, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58, 0x40}}, {{&(0x7f0000000d40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="3388f321db607daed736e7e89361e8a7065034c9ab9e0f3322601abd1d1f229060c8acaee71d85fde1997eb2fa88d3f5455d219e8764aed6e888e9a1964f82b3e32a1262e57d2bd4d47c8ce9b1fb26386b4301ae3cf41202bba1a6c4100e724e4580ab76da63a6c1f4df5f4db489571ddfc844bbf2417f89f510271fe4c0722c1399b1c37dc4551218ba2dc8cbe999732f54160f99e0a1e637e8655c034898d6cdc29cbc8fa7c420224c028361bed97d7c61cfec7cd42be962b9e7e7f4b95a366fcf8e6d015422be008498f5fad8b95ff56527fcc176768def0121255d", 0xdd}], 0x1, &(0x7f0000001740)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x78, 0x883}}], 0x2, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") fadvise64(0xffffffffffffffff, 0x82e0, 0xff39, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 10.305166825s ago: executing program 6 (id=1903): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x6827e, 0x124) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 9.99910429s ago: executing program 9 (id=1904): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b070000000011000106004a850001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000001c0), 0x0, 0x2b, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="f50200007d40000005b40100000000000b000200000007000000000000000000000001000080000000000500000000000000e000046e6f6465767b65766f6f7e0539c60005000037d93a8b9200000086124558d67f8c6cc71fa2e2a187e38a59a133dc3194fef6679be021f1ccb68f0bf73d62589bf1c98a501bbbffe468e11d96e77e9392843dcfbb1e5fb2ce0200673065a3aa1675bcff5dbb4861961a510349f8f4103d037110d1562f44203c6fcb287dbd82d1cd6b724a86d45555959fc908a60d14062620a7a432c0a1a70621ff7ef9c9c07986f064e748054ce60c8391a8034d166fbd7efbe2705282cb5db1869021492ccb992a48b801e0dc931a99224bdcddfae61fc9c2a4a5635c80ebb1a45e4c764b3800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11400cfc26dd7c500f04cd85f2a70f5e9930e3c5db45a5500f8f6fe66a20fb369fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f168a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4c0880e8e2892c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff000000000000000000000000000000000038a13ad38baba8087801ab4d0a322a404b33ecfe56b508abe3d6b8eda324f58bd41f579055d4b52c9fa75bb557b4fac88f38374297fbefdd9f3f08f87a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2f5) writev(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="82", 0x1}], 0x2) 8.937353606s ago: executing program 0 (id=1905): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) r0 = dup(0xffffffffffffffff) accept4$unix(r0, 0x0, 0x0, 0x80000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) 8.078201242s ago: executing program 9 (id=1906): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvfrom(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$netlink(0x10, 0x3, 0x0) 8.043559328s ago: executing program 4 (id=1907): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 8.012659795s ago: executing program 7 (id=1908): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.411429787s ago: executing program 4 (id=1909): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180700"/15, @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r6, 0xae9a) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.389028976s ago: executing program 0 (id=1910): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000006800010000000000000000000a00000000000000280008802400010000000000000000000000040000000000fe8000000000000000000000000000aa060007", @ANYRES32=r2], 0x50}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8100) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 7.350112912s ago: executing program 7 (id=1911): vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)}], 0x1, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@orlov}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c9002000c0000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004eaca39c0f5ca7db66294d397c0af0"]) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000000c0)='\xda+\x9d\x14\r\n', 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r8, 0x865bb16462a5ecb7, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x194}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '#,+[#&}\x98(\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080844}, 0xbc223884ca1f58c6) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002900), 0x1, 0x0) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r10) syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESOCT=r9]) write$tcp_mem(r6, &(0x7f00000001c0)={0xd, 0x2d, 0x6, 0x3a, 0x0, 0x2c}, 0x48) 7.053762438s ago: executing program 9 (id=1912): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x12040, &(0x7f00000000c0)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x5, 0x505, &(0x7f0000000a40)="$eJzs3cFvI1cZAPBvZjebdLttUqhUQECXUljQau2Nt42qnsoFhKpKiIoThzQk3iiKHUexU5qwUpP/AYlKHBCcOHNAcKjUE0cEN7j1Ug5IBVagBomD0YzHWXdjJ+mu11bt308azbx5k/neizXveT9v/AKYWlcj4iAiLkXEGxExX5xPii1e6WzZdR/dvbN6dPfOahLt9uv/TPL67Fz0/Ezm8eKecxHx/e9E/Cg5Gbe5t7+5UqtVd4pyuVXfLjf39m9s1FfWq+vVrUplaXHp5ku3XqwMra/P1n/z4bc3Xv3Bu7//0gd/PvjmT7JmXSnqevsxTJ2uzxzHyVyMiFcfRbAxuFD059K4G8IDSSPiMxHxXP78z8eF/NU8nz6PNQDwKdBuz0d7vrcMAEy6NM+BJWmpyAVciTQtlTo5vKfjclprNFvXbzd2t9Y6ubKFmElvb9SqN4tc4ULMJFl58e3s+F65Eh8v34qIpyLip7OP5eXS6vnzDADAcD1+3/z/n9nO/A8ATLi5sy5YHk07AIDROXP+BwAmjvkfAKaP+R8Apo/5HwCmj/kfAKbN+935/8K4WwIAjMT3Xnst29pHxfdfr725t7vZePPGWrW5WarvrpZWGzvbpfVGY71WLa026mfdr9ZobC++ELtvlVvVZqvc3Ntfrjd2t1rL+fd6L1dnRtIrAOA0Tz373l+TiDh4+bF8i561HMzVMNnScTcAGBs5f5hevoUbppd/4wNnreU58L8Iv/MAwdpvP8APAcN27fPy/zCt5P9hesn/w/SS/4fp1W4ng9b8T48vAQAmyifM8ftIACbQSD//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAlxJd8WesppWipFPBERCzGT3N6oVW9GxJMR8ZfZmdmsvDjWFgMADy/9e1Ks/3Vt/vkr99deSv47m+8j4sc/f/1nb620WjuL2fl/HZ9vvVOcr4yj/QDAWbrzdHce7/ro7p3V7jbK9nz4rc7iolnco2Lr1FyMi9nuT3P5osOX/510yoXs/cqFIcQ/OIyIz/Xrf5LnRhaKlU/vj5/FfmKk8dOPxU/zus4++1189sSdZwfGPGutV5gW72Xjzyv9nr80rub7ub6LH8/lI9TD645/RyfGv+7zPpePNf3Gv6vnjfHCH747sO4w4gsX+8VPjuMnA+I/f87473/xy88Nqmv/MuJa9I/fG6vcqm+Xm3v7NzbqK+vV9epWpbK0uHTzpVsvVsp5jrrczVT36swQ/3j5+pMD+//r3xUD5cn4c2f0/2un9rp9PAD/6n9v/PArg+IfRnzjq/1f/6dPiZ/NiV8/Nf49K5d/O3D57iz+Wuf3f/hJX//r54z/wd/21855KQAwAs29/c2VWq26M9SDmRjyDXsOkkfUZgcTfpC9H3/Y+zxTpMxWus9P7zV//MW7z2Tnxt7ToRyMb0wCRuPeQz/ulgAAAAAAAAAAAAAAAIM88j8nSsfdQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbZ/wMAAP//KbbGhA==") creat(&(0x7f0000000140)='./file1\x00', 0x150) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x3ff) accept4(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffd9, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9], [0x2b8, 0x0, 0x0, 0x56d]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 6.505044293s ago: executing program 0 (id=1913): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000200)='./bus\x00', 0x6000000b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 5.281719584s ago: executing program 7 (id=1914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x9, &(0x7f0000000700)={&(0x7f0000000680)="f3410f34c4834546930000802004c461fae65d8bc462cdbfc3f241adf2410f59afbbad0000c4c1da517ed5c441f45d6600660ff10cff46040d", 0x0, &(0x7f00000006c0)="2e470ff1cdc4a1bd56a2045b0000f30f1ee5c402d3f706f0183f660f5f9dcac10000460fdd6876c4c145573766660f73df006602b100000000", {[0xa2]}}, &(0x7f00000007c0)={&(0x7f0000000740)="c403016883008000000ec422c19f32405166450f38df27c4a22d0d77252e480fae0d000000008f4900015ff866647b00676740dbe066430f3a0c5b0400", 0x0, 0x0}, 0x8, &(0x7f0000000800)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$swradio(&(0x7f0000000580), 0x1, 0x2) sendmsg$netlink(r1, &(0x7f0000000640)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000300)={0x204, 0x3c, 0x300, 0x70bd29, 0x25dfdbfd, "", [@generic="10ba101176f0e0616977c238a58dafbd2fb79547e56b33f6407b15973ea20d7c677dde72ab698a74292d52563543bc40427ae827455b4feabac59c3405c492790c767c524825437e8fa540ee7835227e04c67c50879a7a3846330ae82fa56cdfd0a4b7b556f6888ba8fb011f4a025151c0a199d89d7902abcbccbc6f518211e2d374ac57122630b03e0ff2a18d35c3325fba2238eaed2f71264a841fe19e48cc723e8c07ab2a233de71653f3a14495b16359e3575e", @nested={0x7d, 0x109, 0x0, 0x1, [@typed={0xc, 0x103, 0x0, 0x0, @u64=0x3271}, @nested={0x4, 0x60}, @nested={0x4, 0x114}, @typed={0xc, 0xae, 0x0, 0x0, @str='syz_tun\x00'}, @generic="9b9523fce8ba194aaea831f36678e2412d2fb41944465f2c483676fecdaa9523eac908e8d766911ff3fef35b2325985d74caec667200dafe1c5b324ab479e8cc8fac8bfbb84a0f0a0a77e197dd24a395cd32803279a463e2cc"]}, @generic="04f22085b502b23df9946b083eb76ffff50f26646d952f17b7c3cb3e5201efbc3aa9c11f7f6550da4f3f8b7df08d40b2f46945c080797747ab048f5c43d06ff894e9a6fdc433ce44f77da721869acf0e0ec96edec22ac4f542d668f577ae153fe9e05d5c7a386a1c0ef75a1622b8804dbb50ba6955d967743d1cb9dee05e26b465527f7bf545efb5057fb6631ebba22d4af4c465ae655093038fd53753a44f6c97a1dc11540cd67a2067", @typed={0xc, 0x94, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x204}], 0x1, &(0x7f0000000840)=ANY=[], 0x78, 0x4000000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast1, @dev}}}], 0x20}, 0x0) socket$netlink(0x10, 0x3, 0x10) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r6) 4.723407071s ago: executing program 6 (id=1915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000400000000100000000000000000000000055400000000000"], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 4.722632116s ago: executing program 4 (id=1916): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(r0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, 0x0, 0x0}, 0x63) 3.287664787s ago: executing program 9 (id=1917): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_macvtap\x00', @random='\x00\x00\x00 \x00'}) 3.286180017s ago: executing program 4 (id=1918): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0xa00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e802000000000000290000000400000000"], 0x2e8}}], 0x2, 0x0) 3.233318928s ago: executing program 0 (id=1919): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0xa00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e802000000000000290000000400000000"], 0x2e8}}], 0x2, 0x0) 3.010747471s ago: executing program 6 (id=1920): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.792429333s ago: executing program 9 (id=1921): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.567949277s ago: executing program 6 (id=1922): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvfrom(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$netlink(0x10, 0x3, 0x0) 2.349279768s ago: executing program 4 (id=1923): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvfrom(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 1.267760536s ago: executing program 7 (id=1924): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x88) close(r0) socket$inet_dccp(0x2, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 915.414223ms ago: executing program 0 (id=1925): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000240)) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvfrom(r2, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 564.442024ms ago: executing program 9 (id=1926): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) 563.769405ms ago: executing program 7 (id=1927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) 0s ago: executing program 6 (id=1928): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x12040, &(0x7f00000000c0)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x5, 0x505, &(0x7f0000000a40)="$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") creat(&(0x7f0000000140)='./file1\x00', 0x150) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x3ff) accept4(r1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xffffffffffffffd9, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9], [0x2b8, 0x0, 0x0, 0x56d]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) kernel console output (not intermixed with test programs): 033901][ T7562] hsr_slave_1: entered promiscuous mode [ 236.052866][ T7562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.064699][ T7622] loop1: detected capacity change from 0 to 512 [ 236.079302][ T7562] Cannot create hsr debugfs directory [ 236.086073][ T7622] EXT4-fs: Ignoring removed orlov option [ 236.102194][ T7622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.159344][ T7622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.170836][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.255864][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.281167][ T7622] EXT4-fs (loop1): 1 truncate cleaned up [ 236.290313][ T7622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.349462][ T5843] Bluetooth: hci1: command tx timeout [ 237.761344][ T5843] Bluetooth: hci2: command tx timeout [ 238.092817][ T7574] team0: Port device team_slave_0 added [ 238.106597][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.131041][ T7574] team0: Port device team_slave_1 added [ 238.731207][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.749320][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.775236][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.790628][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.866657][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.885916][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.945507][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.131606][ T7648] overlayfs: failed to resolve './file0': -2 [ 239.238406][ T7574] hsr_slave_0: entered promiscuous mode [ 239.267728][ T7574] hsr_slave_1: entered promiscuous mode [ 239.288265][ T7574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.307346][ T7574] Cannot create hsr debugfs directory [ 239.341248][ T7562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.361526][ T7562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.371592][ T7562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 239.413276][ T7562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.444458][ T5843] Bluetooth: hci1: command tx timeout [ 239.850552][ T5843] Bluetooth: hci2: command tx timeout [ 240.425611][ T7658] Process accounting resumed [ 240.492152][ T7562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.508813][ T7562] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.543969][ T7562] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.554896][ T7562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.645227][ T7574] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.676549][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.684774][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.722023][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.729207][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.382953][ T7574] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.462235][ T7574] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.676332][ T7574] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 242.185018][ T7562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.223085][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.261003][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.310449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.317608][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.357930][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.365215][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.781445][ T7562] veth0_vlan: entered promiscuous mode [ 242.820407][ T7562] veth1_vlan: entered promiscuous mode [ 242.925816][ T7562] veth0_macvtap: entered promiscuous mode [ 242.999771][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.008863][ T7562] veth1_macvtap: entered promiscuous mode [ 243.664630][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.734912][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.786657][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.797240][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.807254][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.818626][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.828509][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.849449][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.865432][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.887043][ T7695] overlayfs: failed to resolve './file0': -2 [ 243.890448][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.914209][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.926308][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.100262][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.134234][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.145604][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.155610][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.166590][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.176533][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.187027][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.196916][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.208295][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.221139][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.232602][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.253727][ T7562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.277401][ T7562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.301499][ T7562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.321152][ T7562] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.339205][ T7562] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.358277][ T7562] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.387298][ T7562] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.653726][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.661773][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.158516][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.356355][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.571235][ T7574] veth0_vlan: entered promiscuous mode [ 245.643722][ T7574] veth1_vlan: entered promiscuous mode [ 245.729915][ T7574] veth0_macvtap: entered promiscuous mode [ 245.789770][ T7574] veth1_macvtap: entered promiscuous mode [ 245.822219][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.835329][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.846111][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.857670][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.876935][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.891993][ T7725] loop6: detected capacity change from 0 to 512 [ 245.900432][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.944634][ T7728] overlayfs: failed to resolve './file1': -2 [ 245.966878][ T7725] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 245.967633][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.997797][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.019332][ T7725] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 246.020556][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.050976][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.075760][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.097444][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.222296][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.234666][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.315177][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.505038][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.515681][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.526624][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.537221][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.547222][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.558398][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.568351][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.584322][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.601262][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.620166][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.679864][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.748162][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.822702][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.953574][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.026067][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.054005][ T7574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.062992][ T7574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.071890][ T7574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.080861][ T7574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.755131][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.828496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.224888][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.276966][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.361767][ T7754] loop7: detected capacity change from 0 to 512 [ 249.793603][ T7763] overlayfs: failed to resolve './file1': -2 [ 251.693682][ T7790] loop7: detected capacity change from 0 to 512 [ 251.730488][ T7790] EXT4-fs: Ignoring removed orlov option [ 251.766888][ T7790] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.897628][ T7793] loop5: detected capacity change from 0 to 16 [ 251.923448][ T7793] erofs (device loop5): mounted with root inode @ nid 36. [ 251.932770][ T7793] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 251.950114][ T7793] erofs (device loop5): failed to decompress -18 in[46, 4050] out[1851] [ 251.959007][ T7793] erofs (device loop5): read error -117 @ 43 of nid 36 [ 251.995684][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 252.010330][ T7790] EXT4-fs (loop7): 1 truncate cleaned up [ 252.030965][ T7790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.629433][ T7797] 9pnet_fd: Insufficient options for proto=fd [ 253.637370][ T7797] kernel profiling enabled (shift: 13) [ 254.325454][ T7574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.114329][ T7811] overlayfs: failed to resolve './file1': -2 [ 256.318336][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.655519][ T7843] loop6: detected capacity change from 0 to 16 [ 257.665035][ T7843] erofs (device loop6): mounted with root inode @ nid 36. [ 257.673999][ T7843] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 257.692552][ T7843] erofs (device loop6): failed to decompress -18 in[46, 4050] out[1851] [ 257.701361][ T7843] erofs (device loop6): read error -117 @ 43 of nid 36 [ 257.758735][ T7844] loop5: detected capacity change from 0 to 512 [ 257.785101][ T7844] EXT4-fs: Ignoring removed orlov option [ 257.817191][ T7844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.905313][ T7844] EXT4-fs (loop5): 1 truncate cleaned up [ 257.917589][ T7816] loop0: detected capacity change from 0 to 32768 [ 257.976333][ T7844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.277196][ T7842] 9pnet_fd: Insufficient options for proto=fd [ 258.344945][ T7816] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 258.380716][ T7816] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 258.700541][ T7856] overlayfs: failed to resolve './file1': -2 [ 258.931392][ T7816] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 259.320435][ T5881] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 259.490054][ T5881] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 259.638782][ T7074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.738837][ T5881] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 248ms [ 259.747041][ T5881] gfs2: fsid=syz:syz.0: jid=0: Done [ 259.759916][ T7816] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 261.821839][ T7902] loop0: detected capacity change from 0 to 16 [ 262.791253][ T7902] erofs (device loop0): mounted with root inode @ nid 36. [ 262.805463][ T7900] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 263.198415][ T7900] erofs (device loop0): failed to decompress -18 in[46, 4050] out[1851] [ 263.208896][ T7900] erofs (device loop0): read error -117 @ 43 of nid 36 [ 263.535820][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 264.560349][ T7934] netlink: 'syz.0.646': attribute type 11 has an invalid length. [ 265.664944][ T7931] loop7: detected capacity change from 0 to 32768 [ 265.702541][ T7951] trusted_key: encrypted_key: insufficient parameters specified [ 265.725781][ T7931] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.644 (7931) [ 265.869493][ T7931] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 265.950274][ T7931] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 265.993031][ T7931] BTRFS info (device loop7): using free-space-tree [ 266.953540][ T7983] kvm: pic: level sensitive irq not supported [ 266.964549][ T7983] kvm: pic: non byte read [ 267.051677][ T7983] kvm: pic: level sensitive irq not supported [ 267.057692][ T7983] kvm: pic: non byte read [ 267.100700][ T7983] kvm: pic: level sensitive irq not supported [ 267.100840][ T7983] kvm: pic: non byte read [ 267.143678][ T7983] kvm: pic: level sensitive irq not supported [ 267.144480][ T7983] kvm: pic: non byte read [ 267.168064][ T7574] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 267.892514][ T7992] 9pnet_fd: Insufficient options for proto=fd [ 268.020399][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.657'. [ 269.953059][ T8022] loop6: detected capacity change from 0 to 32768 [ 269.971310][ T8022] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.667 (8022) [ 270.907250][ T8037] 9pnet_fd: Insufficient options for proto=fd [ 270.954858][ T8022] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 271.008524][ T8022] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 271.049416][ T8022] BTRFS info (device loop6): using free-space-tree [ 273.086241][ T7562] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 273.498639][ T8084] 9pnet_fd: Insufficient options for proto=fd [ 274.639321][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 276.368933][ T8106] Process accounting resumed [ 276.709467][ T5883] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 276.869908][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 276.962834][ T5883] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 277.055708][ T5883] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.148244][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.491135][ T5883] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.585155][ T5883] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.635271][ T5883] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.652741][ T8122] 9pnet_fd: Insufficient options for proto=fd [ 277.655303][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.132563][ T5883] usb 8-1: usb_control_msg returned -32 [ 279.138205][ T5883] usbtmc 8-1:16.0: can't read capabilities [ 280.604882][ T5906] usb 8-1: USB disconnect, device number 2 [ 280.682009][ T8143] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 282.679185][ T8166] netlink: 'syz.7.708': attribute type 4 has an invalid length. [ 285.059402][ T8193] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 288.334846][ T8210] netlink: 'syz.5.721': attribute type 4 has an invalid length. [ 292.339343][ T5146] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 292.422604][ T5843] Bluetooth: hci4: command 0x1003 tx timeout [ 292.501055][ T8260] netlink: 'syz.7.737': attribute type 4 has an invalid length. [ 294.104554][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.741'. [ 295.204388][ T8290] overlayfs: missing 'lowerdir' [ 295.452857][ T5146] Bluetooth: hci4: sending frame failed (-49) [ 295.462487][ T5843] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 296.225059][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.753'. [ 297.057374][ T8309] netlink: 'syz.6.751': attribute type 4 has an invalid length. [ 297.811780][ T8316] netlink: 'syz.6.757': attribute type 11 has an invalid length. [ 298.023733][ T8327] overlayfs: missing 'lowerdir' [ 298.035968][ T8329] overlayfs: missing 'lowerdir' [ 298.210661][ T8308] loop1: detected capacity change from 0 to 16 [ 298.239959][ T8308] erofs (device loop1): mounted with root inode @ nid 36. [ 298.520624][ T29] audit: type=1804 audit(1734818195.269:2): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.764" name="/newroot/38/bus/bus" dev="overlay" ino=241 res=1 errno=0 [ 298.537762][ T8337] Invalid ELF header magic: != ELF [ 300.579372][ T5843] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 301.120348][ T8356] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 301.330705][ T8361] netlink: 'syz.6.771': attribute type 11 has an invalid length. [ 301.334066][ T8362] overlayfs: missing 'lowerdir' [ 302.166655][ T8376] overlayfs: missing 'lowerdir' [ 305.110870][ T8409] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 305.122725][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 305.211147][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 305.316259][ T5906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.411505][ T5906] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.485095][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.671318][ T5906] usb 6-1: Product: syz [ 305.675536][ T5906] usb 6-1: Manufacturer: syz [ 305.690549][ T5906] usb 6-1: SerialNumber: syz [ 305.813192][ T8410] loop0: detected capacity change from 0 to 16 [ 305.832582][ T5146] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 305.835632][ T8410] erofs (device loop0): mounted with root inode @ nid 36. [ 306.183394][ T8397] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 306.242987][ T8397] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 306.343046][ T8420] overlayfs: missing 'lowerdir' [ 306.977088][ T8397] erofs (device loop0): readahead error at folio 13 @ nid 36 [ 307.059378][ T8397] erofs (device loop0): readahead error at folio 8 @ nid 36 [ 307.062100][ T5906] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 307.077761][ T8397] syz.0.780: attempt to access beyond end of device [ 307.077761][ T8397] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 307.077986][ T5906] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 307.142408][ T8397] syz.0.780: attempt to access beyond end of device [ 307.142408][ T8397] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 307.157216][ T5906] cdc_ncm 6-1:1.0: bind() failure [ 307.166250][ T5906] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 307.183662][ T5906] cdc_ncm 6-1:1.1: bind() failure [ 307.428518][ T5906] usb 6-1: USB disconnect, device number 2 [ 307.658246][ T8433] overlayfs: missing 'lowerdir' [ 309.402986][ T8448] loop1: detected capacity change from 0 to 256 [ 309.418904][ T8448] exfat: Deprecated parameter 'utf8' [ 309.424553][ T8448] exfat: Deprecated parameter 'utf8' [ 309.444895][ T8448] exfat: Deprecated parameter 'namecase' [ 309.464122][ T8448] exfat: Deprecated parameter 'utf8' [ 309.507647][ T8448] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 310.398145][ T8455] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 310.931061][ T8460] overlayfs: missing 'lowerdir' [ 312.740315][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.804'. [ 313.489277][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 313.638905][ T8484] overlayfs: missing 'lowerdir' [ 313.807397][ T8489] netlink: 172 bytes leftover after parsing attributes in process `syz.5.809'. [ 314.295128][ T8499] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 314.892045][ T8501] overlayfs: missing 'workdir' [ 315.123070][ T8504] loop6: detected capacity change from 0 to 16 [ 315.132774][ T8504] erofs (device loop6): mounted with root inode @ nid 36. [ 315.142194][ T8504] erofs (device loop6): readahead error at folio 24 @ nid 36 [ 315.232117][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'. [ 315.550301][ T8504] erofs (device loop6): readahead error at folio 19 @ nid 36 [ 315.956083][ T8504] erofs (device loop6): readahead error at folio 13 @ nid 36 [ 316.019485][ T8504] erofs (device loop6): readahead error at folio 8 @ nid 36 [ 316.027437][ T8504] syz.6.808: attempt to access beyond end of device [ 316.027437][ T8504] loop6: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 316.041621][ T8504] syz.6.808: attempt to access beyond end of device [ 316.041621][ T8504] loop6: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 316.456957][ T8524] overlayfs: missing 'lowerdir' [ 317.600480][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.952290][ T8557] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 318.988235][ T8559] overlayfs: missing 'lowerdir' [ 321.254046][ T8588] overlayfs: missing 'lowerdir' [ 322.357560][ T8603] loop0: detected capacity change from 0 to 16 [ 322.439084][ T8603] erofs (device loop0): mounted with root inode @ nid 36. [ 322.448273][ T8603] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 322.455958][ T8603] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 322.465133][ T8603] erofs (device loop0): readahead error at folio 13 @ nid 36 [ 322.472759][ T8603] erofs (device loop0): readahead error at folio 8 @ nid 36 [ 322.480360][ T8603] syz.0.840: attempt to access beyond end of device [ 322.480360][ T8603] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 322.494198][ T8603] syz.0.840: attempt to access beyond end of device [ 322.494198][ T8603] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 323.282359][ T8616] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 326.560129][ T57] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 326.836656][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.864516][ T57] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.880226][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.899347][ T57] usb 8-1: Product: syz [ 326.909237][ T57] usb 8-1: Manufacturer: syz [ 326.929295][ T57] usb 8-1: SerialNumber: syz [ 327.072658][ T8637] loop1: detected capacity change from 0 to 256 [ 327.109770][ T8637] exfat: Deprecated parameter 'utf8' [ 327.115151][ T8637] exfat: Deprecated parameter 'utf8' [ 327.120798][ T8637] exfat: Deprecated parameter 'namecase' [ 327.126969][ T8637] exfat: Deprecated parameter 'utf8' [ 327.144340][ T8637] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 329.062792][ T8648] loop1: detected capacity change from 0 to 512 [ 329.073735][ T8648] EXT4-fs: Ignoring removed orlov option [ 329.090865][ T8649] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 329.098781][ T8648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 329.133285][ T8648] EXT4-fs (loop1): 1 truncate cleaned up [ 329.143197][ T8648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.461479][ T57] cdc_ncm 8-1:1.0: SET_CRC_MODE failed [ 329.467441][ T57] cdc_ncm 8-1:1.0: SET_NTB_FORMAT failed [ 329.628876][ T5906] kernel write not supported for file /register (pid: 5906 comm: kworker/0:6) [ 330.155918][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.169557][ T57] cdc_ncm 8-1:1.0: bind() failure [ 330.182482][ T57] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 330.189639][ T57] cdc_ncm 8-1:1.1: bind() failure [ 330.213497][ T57] usb 8-1: USB disconnect, device number 3 [ 330.803400][ T8668] fuse: Bad value for 'fd' [ 330.919300][ T8666] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 331.509694][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 331.659292][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 331.680623][ T57] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 331.690018][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.708942][ T57] usb 8-1: config 0 descriptor?? [ 331.716661][ T8673] netlink: 172 bytes leftover after parsing attributes in process `syz.1.866'. [ 331.727978][ T57] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 332.028275][ T57] usb 8-1: Detected FT232A [ 332.034430][ T57] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 332.044305][ T57] usb 8-1: USB disconnect, device number 4 [ 332.055693][ T57] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 332.065679][ T57] ftdi_sio 8-1:0.0: device disconnected [ 333.486869][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.7.869'. [ 334.429377][ T8689] loop7: detected capacity change from 0 to 256 [ 334.436701][ T8689] exfat: Deprecated parameter 'utf8' [ 334.452631][ T8689] exfat: Deprecated parameter 'utf8' [ 334.465907][ T8689] exfat: Deprecated parameter 'namecase' [ 334.477448][ T8689] exfat: Deprecated parameter 'utf8' [ 334.497720][ T8689] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 336.531124][ T8698] loop1: detected capacity change from 0 to 512 [ 336.538156][ T8698] EXT4-fs: Ignoring removed orlov option [ 336.786794][ T8698] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.830648][ T8698] EXT4-fs (loop1): 1 truncate cleaned up [ 336.850324][ T8698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.938711][ T8708] 9pnet_fd: Insufficient options for proto=fd [ 338.766224][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.944792][ T8736] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 341.939454][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.101161][ T5833] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.124753][ T5833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.134174][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.151532][ T5833] usb 6-1: Product: syz [ 342.166028][ T5833] usb 6-1: Manufacturer: syz [ 342.176006][ T5833] usb 6-1: SerialNumber: syz [ 343.479782][ T5833] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 343.497652][ T5833] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 343.721325][ T5833] cdc_ncm 6-1:1.0: bind() failure [ 343.730067][ T5833] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 343.737440][ T5833] cdc_ncm 6-1:1.1: bind() failure [ 343.747224][ T5833] usb 6-1: USB disconnect, device number 3 [ 343.872868][ T8762] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 343.881880][ T8762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.063361][ T8771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.890'. [ 345.680108][ T8774] overlayfs: failed to resolve './file1': -2 [ 345.708203][ T8774] Process accounting resumed [ 346.227593][ T8760] loop6: detected capacity change from 0 to 32768 [ 346.276694][ T8760] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.887 (8760) [ 346.369945][ T8760] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 346.400497][ T8760] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 346.412705][ T8760] BTRFS info (device loop6): using free-space-tree [ 346.499597][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 346.516935][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 346.834897][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 346.856677][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 347.629428][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 347.641791][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 347.757475][ T8799] loop7: detected capacity change from 0 to 16 [ 347.808914][ T8799] erofs (device loop7): mounted with root inode @ nid 36. [ 347.825132][ T8799] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 347.835684][ T8799] erofs (device loop7): failed to decompress -18 in[46, 4050] out[1851] [ 347.844267][ T8799] erofs (device loop7): read error -117 @ 43 of nid 36 [ 348.029769][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 348.030030][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 348.069863][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 348.127838][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 348.179725][ T8760] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 348.282964][ T8760] BTRFS error (device loop6): open_ctree failed: -12 [ 349.013792][ T8817] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 349.681004][ T8825] loop6: detected capacity change from 0 to 16 [ 349.705536][ T8825] erofs (device loop6): mounted with root inode @ nid 36. [ 349.724533][ T8825] erofs (device loop6): readahead error at folio 24 @ nid 36 [ 349.733095][ T8825] erofs (device loop6): readahead error at folio 19 @ nid 36 [ 349.741503][ T8825] erofs (device loop6): readahead error at folio 13 @ nid 36 [ 349.750208][ T8825] erofs (device loop6): readahead error at folio 8 @ nid 36 [ 349.758590][ T8825] syz.6.901: attempt to access beyond end of device [ 349.758590][ T8825] loop6: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 349.773303][ T8825] syz.6.901: attempt to access beyond end of device [ 349.773303][ T8825] loop6: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 350.119345][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 350.488135][ T5906] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.519244][ T5906] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.547901][ T5906] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.567233][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.619025][ T8823] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 350.654815][ T5906] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.061677][ T5881] usb 6-1: USB disconnect, device number 4 [ 354.177593][ T8855] netlink: 68 bytes leftover after parsing attributes in process `syz.1.911'. [ 355.362635][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'. [ 355.749560][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 355.756138][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 356.123097][ T8847] loop5: detected capacity change from 0 to 32768 [ 356.131049][ T8847] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.909 (8847) [ 356.299403][ T8847] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 356.350004][ T8847] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 356.790857][ T8847] BTRFS info (device loop5): using free-space-tree [ 356.835524][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 356.836437][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 356.889983][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 356.934703][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 356.976771][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 357.039639][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 357.048822][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 357.157270][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 357.220904][ T8847] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 357.258035][ T8893] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 357.388271][ T8847] BTRFS error (device loop5): open_ctree failed: -12 [ 358.599872][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.6.920'. [ 360.734141][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.927'. [ 363.954129][ T8948] overlayfs: missing 'lowerdir' [ 364.814819][ T8937] loop0: detected capacity change from 0 to 32768 [ 364.841498][ T8937] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.931 (8937) [ 364.909606][ T8937] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 365.009366][ T8937] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 365.019091][ T8937] BTRFS info (device loop0): using free-space-tree [ 365.059667][ T8937] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 365.067482][ T8937] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 365.230550][ T8937] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 365.866413][ T8937] BTRFS error (device loop0): open_ctree failed: -12 [ 366.003703][ T8974] loop5: detected capacity change from 0 to 256 [ 366.020767][ T8974] exfat: Deprecated parameter 'utf8' [ 366.026147][ T8974] exfat: Deprecated parameter 'utf8' [ 366.039842][ T8974] exfat: Deprecated parameter 'namecase' [ 366.045630][ T8974] exfat: Deprecated parameter 'utf8' [ 366.066961][ T8974] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 367.251949][ T8979] loop6: detected capacity change from 0 to 16 [ 367.300044][ T8979] erofs (device loop6): mounted with root inode @ nid 36. [ 367.431639][ T8979] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 367.505963][ T8979] erofs (device loop6): failed to decompress -18 in[46, 4050] out[1851] [ 367.590790][ T8979] erofs (device loop6): read error -117 @ 43 of nid 36 [ 368.489958][ T8993] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 369.969545][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 370.260782][ T5881] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.290689][ T5881] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.320583][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.339296][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.369997][ T9000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 370.383888][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.630889][ T9007] overlayfs: missing 'lowerdir' [ 371.872221][ T5906] usb 2-1: USB disconnect, device number 4 [ 371.928195][ T9016] loop5: detected capacity change from 0 to 256 [ 371.966607][ T9016] exfat: Deprecated parameter 'utf8' [ 372.002365][ T9016] exfat: Deprecated parameter 'utf8' [ 372.007729][ T9016] exfat: Deprecated parameter 'namecase' [ 372.056888][ T9016] exfat: Deprecated parameter 'utf8' [ 372.085126][ T9016] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 373.306487][ T9013] loop0: detected capacity change from 0 to 32768 [ 373.314696][ T9013] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.949 (9013) [ 373.368332][ T9013] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 373.378638][ T9013] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 373.388357][ T9013] BTRFS info (device loop0): using free-space-tree [ 374.151230][ T9050] overlayfs: failed to resolve './file0': -2 [ 374.301497][ T9052] loop5: detected capacity change from 0 to 16 [ 374.348222][ T9052] erofs (device loop5): mounted with root inode @ nid 36. [ 374.416650][ T9052] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.487475][ T9052] erofs (device loop5): failed to decompress -18 in[46, 4050] out[1851] [ 374.649355][ T9052] erofs (device loop5): read error -117 @ 43 of nid 36 [ 376.225579][ T9013] syz.0.949 (9013) used greatest stack depth: 17968 bytes left [ 376.297035][ T5829] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 376.582264][ T9072] overlayfs: missing 'workdir' [ 379.184491][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.591497][ T9103] overlayfs: failed to resolve './file0': -2 [ 379.604172][ T9103] Invalid ELF header magic: != ELF [ 380.975698][ T9114] overlayfs: missing 'workdir' [ 383.216928][ T9128] loop6: detected capacity change from 0 to 512 [ 384.710437][ T5146] Bluetooth: hci2: command 0x0405 tx timeout [ 384.938691][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.983'. [ 387.832386][ T9164] overlayfs: missing 'workdir' [ 392.446778][ T9205] loop0: detected capacity change from 0 to 512 [ 398.696000][ T9269] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 399.130634][ T57] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 399.309688][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 399.318387][ T57] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 399.337670][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.935064][ T57] usb 2-1: config 0 descriptor?? [ 400.049896][ T57] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 400.537462][ T57] usb 2-1: Detected FT232A [ 400.548221][ T57] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 400.561325][ T57] usb 2-1: USB disconnect, device number 5 [ 400.569808][ T57] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 400.579445][ T57] ftdi_sio 2-1:0.0: device disconnected [ 400.949100][ T9306] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1034'. [ 404.136386][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1041'. [ 405.778229][ T9334] overlayfs: failed to resolve './file1': -2 [ 406.437389][ T9341] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 406.459039][ T9342] loop5: detected capacity change from 0 to 512 [ 406.473595][ T9342] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 406.549046][ T9342] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 406.779615][ T5881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 406.969463][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 407.872915][ T5881] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 407.937308][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.958935][ T5881] usb 8-1: config 0 descriptor?? [ 407.969546][ T5881] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 408.182660][ T9346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.291014][ T5881] usb 8-1: Detected FT232A [ 409.300441][ T5881] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 409.408809][ T9371] overlayfs: failed to resolve './file1': -2 [ 410.133758][ T5881] usb 8-1: USB disconnect, device number 5 [ 410.226799][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 410.236681][ T5881] ftdi_sio 8-1:0.0: device disconnected [ 410.366889][ T9382] loop0: detected capacity change from 0 to 512 [ 410.434521][ T9385] loop6: detected capacity change from 0 to 512 [ 410.466515][ T9385] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 410.501309][ T9385] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 410.798821][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 412.606912][ T9403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.057756][ T9413] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 413.333502][ T5881] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 413.527711][ T9415] overlayfs: missing 'lowerdir' [ 413.546417][ T9415] Invalid ELF header magic: != ELF [ 413.660493][ T5881] usb 6-1: Using ep0 maxpacket: 16 [ 413.692768][ T5881] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 413.775691][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.171919][ T5881] usb 6-1: config 0 descriptor?? [ 414.280595][ T5881] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 415.590950][ T9434] loop0: detected capacity change from 0 to 512 [ 415.658717][ T9434] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 415.697762][ T5881] usb 6-1: Detected FT232A [ 415.723384][ T5881] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.726931][ T9434] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 415.754661][ T5881] usb 6-1: USB disconnect, device number 5 [ 415.953338][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 416.697671][ T5881] ftdi_sio 6-1:0.0: device disconnected [ 416.715393][ T9430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.098893][ T9452] overlayfs: failed to resolve './file1': -2 [ 417.755180][ T9449] tmpfs: Bad value for 'mpol' [ 417.855809][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 419.536774][ T9464] loop0: detected capacity change from 0 to 512 [ 420.124683][ T9471] loop7: detected capacity change from 0 to 512 [ 424.271300][ T9506] loop1: detected capacity change from 0 to 512 [ 424.304170][ T9506] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 424.333434][ T9506] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 425.407651][ T9516] loop0: detected capacity change from 0 to 256 [ 425.521954][ T9516] exfat: Deprecated parameter 'utf8' [ 425.527558][ T9516] exfat: Deprecated parameter 'utf8' [ 425.565504][ T9516] exfat: Deprecated parameter 'namecase' [ 425.631435][ T9516] exfat: Deprecated parameter 'utf8' [ 425.816515][ T9516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 428.155160][ T9531] tty tty21: ldisc open failed (-12), clearing slot 20 [ 428.167522][ T5881] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 428.451247][ T5881] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.463956][ T5881] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 428.516019][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 428.549337][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.577161][ T9528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 428.592649][ T5881] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.116657][ T9528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.267878][ T9528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.076876][ T5881] usb 2-1: USB disconnect, device number 6 [ 430.961191][ T9553] loop6: detected capacity change from 0 to 512 [ 430.971540][ T9553] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 430.980446][ T9553] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 432.236023][ T9558] loop0: detected capacity change from 0 to 512 [ 432.909935][ T9574] overlayfs: failed to resolve './file1': -2 [ 433.075111][ T9575] tmpfs: Bad value for 'mpol' [ 433.990074][ T9577] tty tty33: ldisc open failed (-12), clearing slot 32 [ 435.668007][ T9604] loop7: detected capacity change from 0 to 512 [ 435.725326][ T9604] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 435.750216][ T9604] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 438.264560][ T9625] overlayfs: failed to resolve './file1': -2 [ 438.422427][ T9625] tmpfs: Bad value for 'mpol' [ 439.243401][ T9630] loop0: detected capacity change from 0 to 512 [ 439.513480][ T9621] loop1: detected capacity change from 0 to 32768 [ 439.627279][ T9621] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1125 (9621) [ 439.906006][ T9621] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 440.150822][ T9621] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 440.182083][ T9621] BTRFS info (device loop1): using free-space-tree [ 440.506940][ T9646] overlayfs: failed to resolve './file1': -2 [ 440.515409][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.596068][ T9646] tmpfs: Bad value for 'mpol' [ 440.639779][ T9621] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 440.646491][ T9621] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 440.857613][ T9621] BTRFS error (device loop1): open_ctree failed: -12 [ 441.401304][ T1207] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 441.637433][ T9664] loop0: detected capacity change from 0 to 16 [ 442.455123][ T9664] erofs (device loop0): mounted with root inode @ nid 36. [ 442.460857][ T1207] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.477660][ T1207] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 442.488015][ T1207] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.497099][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.511013][ T9658] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 442.521132][ T1207] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.546866][ T9644] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 442.583207][ T9644] erofs (device loop0): failed to decompress -18 in[46, 4050] out[1851] [ 442.633430][ T9644] erofs (device loop0): read error -117 @ 43 of nid 36 [ 443.507076][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.540151][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.689573][ T1207] usb 6-1: USB disconnect, device number 6 [ 444.037499][ T9679] loop1: detected capacity change from 0 to 16 [ 444.045151][ T9679] erofs (device loop1): mounted with root inode @ nid 36. [ 444.055685][ T9679] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 444.066918][ T9679] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 444.074486][ T9679] erofs (device loop1): readahead error at folio 13 @ nid 36 [ 444.082191][ T9679] erofs (device loop1): readahead error at folio 8 @ nid 36 [ 444.089785][ T9679] syz.1.1138: attempt to access beyond end of device [ 444.089785][ T9679] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 444.103837][ T9679] syz.1.1138: attempt to access beyond end of device [ 444.103837][ T9679] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 446.162018][ T9709] overlayfs: failed to resolve './file1': -2 [ 446.230665][ T9709] tmpfs: Bad value for 'mpol' [ 446.560238][ T9718] loop5: detected capacity change from 0 to 16 [ 446.563123][ T9718] erofs (device loop5): mounted with root inode @ nid 36. [ 446.565753][ T9718] erofs (device loop5): readahead error at folio 24 @ nid 36 [ 446.566002][ T9718] erofs (device loop5): readahead error at folio 19 @ nid 36 [ 446.566168][ T9718] erofs (device loop5): readahead error at folio 13 @ nid 36 [ 446.566343][ T9718] erofs (device loop5): readahead error at folio 8 @ nid 36 [ 446.566575][ T9718] syz.5.1151: attempt to access beyond end of device [ 446.566575][ T9718] loop5: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 446.567623][ T9718] syz.5.1151: attempt to access beyond end of device [ 446.567623][ T9718] loop5: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 447.367939][ T9725] loop1: detected capacity change from 0 to 16 [ 447.369315][ T9725] erofs (device loop1): mounted with root inode @ nid 36. [ 447.370566][ T9725] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 447.370878][ T9725] erofs (device loop1): failed to decompress -18 in[46, 4050] out[1851] [ 447.370919][ T9725] erofs (device loop1): read error -117 @ 43 of nid 36 [ 447.820352][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.326263][ T9732] syz.0.1155 uses obsolete (PF_INET,SOCK_PACKET) [ 452.509539][ T1207] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 452.740924][ T1207] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 452.757945][ T1207] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 452.778363][ T1207] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 452.778398][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.781637][ T9756] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 452.796041][ T1207] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 453.600276][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.600626][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.679949][ T5883] usb 6-1: USB disconnect, device number 7 [ 453.946606][ T9762] overlayfs: failed to resolve './file1': -2 [ 454.935743][ T9762] tmpfs: Bad value for 'mpol' [ 463.454911][ T9864] loop7: detected capacity change from 0 to 512 [ 465.792012][ T9891] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 473.314328][ T9954] overlayfs: failed to resolve './file1': -2 [ 480.145184][T10016] loop5: detected capacity change from 0 to 16 [ 480.157008][T10016] erofs (device loop5): mounted with root inode @ nid 36. [ 480.165685][T10016] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 480.174444][T10016] erofs (device loop5): failed to decompress -18 in[46, 4050] out[1851] [ 480.182897][T10016] erofs (device loop5): read error -117 @ 43 of nid 36 [ 484.052364][T10044] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 485.839438][ T5833] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 486.219239][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 486.230585][ T5833] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 486.240506][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.267748][T10062] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 486.283318][ T5833] usb 6-1: config 0 descriptor?? [ 486.302791][ T5833] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 489.038719][ T5833] usb 6-1: Detected FT232A [ 489.044292][ T5833] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 489.055546][ T5833] usb 6-1: USB disconnect, device number 8 [ 489.068007][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 489.077755][ T5833] ftdi_sio 6-1:0.0: device disconnected [ 491.252509][T10094] overlayfs: failed to resolve './file0': -2 [ 493.776467][T10111] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 495.372768][ T5833] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 495.886775][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 495.894034][ T5833] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 495.903246][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.921100][ T5833] usb 2-1: config 0 descriptor?? [ 495.933860][ T5833] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 497.373434][ T5833] usb 2-1: Detected FT232A [ 497.920567][ T5833] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 498.004715][ T5833] usb 2-1: USB disconnect, device number 7 [ 498.043294][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 498.053261][ T5833] ftdi_sio 2-1:0.0: device disconnected [ 499.432001][T10146] overlayfs: failed to resolve './file0': -2 [ 501.929902][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.661031][T10165] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 502.977725][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1277'. [ 505.613536][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1283'. [ 506.201973][T10202] loop6: detected capacity change from 0 to 16 [ 506.203241][T10202] erofs (device loop6): mounted with root inode @ nid 36. [ 506.204382][T10202] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 506.204666][T10202] erofs (device loop6): failed to decompress -18 in[46, 4050] out[1851] [ 506.204697][T10202] erofs (device loop6): read error -117 @ 43 of nid 36 [ 506.535608][T10212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1290'. [ 509.305251][T10237] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 509.598604][ T5146] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 510.967245][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 510.993223][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 511.036965][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 511.050955][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 511.061174][ T5146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 511.068507][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.342677][T10247] chnl_net:caif_netlink_parms(): no params data found [ 513.455592][ T5146] Bluetooth: hci4: command tx timeout [ 514.323791][T10283] ALSA: mixer_oss: invalid OSS volume '' [ 514.873216][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.880771][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.888360][T10247] bridge_slave_0: entered allmulticast mode [ 514.897708][T10247] bridge_slave_0: entered promiscuous mode [ 514.908250][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.915773][T10247] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.924554][T10247] bridge_slave_1: entered allmulticast mode [ 515.043371][T10247] bridge_slave_1: entered promiscuous mode [ 515.101707][T10247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.123016][T10247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.204536][T10289] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1314'. [ 515.237519][T10247] team0: Port device team_slave_0 added [ 515.252541][T10247] team0: Port device team_slave_1 added [ 515.345250][T10247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.369513][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.419209][T10247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.462849][T10247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.479732][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.512551][ T5146] Bluetooth: hci4: command tx timeout [ 515.529226][T10247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.896872][T10247] hsr_slave_0: entered promiscuous mode [ 515.928447][T10247] hsr_slave_1: entered promiscuous mode [ 515.934888][T10247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.944334][T10247] Cannot create hsr debugfs directory [ 517.620243][ T5146] Bluetooth: hci4: command tx timeout [ 517.825497][T10247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 518.884090][T10247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 518.973903][T10247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 518.988835][T10247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 519.298687][T10318] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 520.045105][T10247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.054951][ T5146] Bluetooth: hci4: command tx timeout [ 520.063273][T10247] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.081019][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.088145][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.170168][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.177369][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.364844][T10316] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 521.381877][T10247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.601379][T10329] loop7: detected capacity change from 0 to 512 [ 521.619064][T10329] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 521.640933][T10329] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 522.620125][T10247] veth0_vlan: entered promiscuous mode [ 522.638234][T10337] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1325'. [ 522.692358][T10247] veth1_vlan: entered promiscuous mode [ 522.784816][T10247] veth0_macvtap: entered promiscuous mode [ 522.827520][T10247] veth1_macvtap: entered promiscuous mode [ 522.912486][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.178928][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.188970][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.199896][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.209834][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.229103][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.179681][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.190583][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.200844][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.211316][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.496219][T10346] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 524.554608][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.582396][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.621523][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.648628][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.671581][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.702530][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.724700][T10247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.753441][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.787085][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.811657][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.832840][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.848693][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.870769][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.885012][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.897326][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.914244][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.925159][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.946071][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.963859][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.985183][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.006463][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.017912][T10247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.038193][T10247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.066419][T10247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.217638][T10247] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.229277][T10247] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.238021][T10247] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.246819][T10247] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.250406][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.258330][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.266009][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.273970][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.596714][T10368] loop6: detected capacity change from 0 to 512 [ 526.672020][T10368] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 526.706830][T10368] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 526.868409][T10370] loop8: detected capacity change from 0 to 16 [ 526.916765][T10370] erofs (device loop8): mounted with root inode @ nid 36. [ 526.927040][T10370] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 526.941058][T10370] erofs (device loop8): failed to decompress -18 in[46, 4050] out[1851] [ 526.951066][T10370] erofs (device loop8): read error -117 @ 43 of nid 36 [ 527.895695][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 528.387518][T10385] loop8: detected capacity change from 0 to 16 [ 528.687628][T10385] erofs (device loop8): mounted with root inode @ nid 36. [ 528.979558][T10388] capability: warning: `syz.6.1340' uses deprecated v2 capabilities in a way that may be insecure [ 529.020792][T10388] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 529.122118][T10391] loop7: detected capacity change from 0 to 512 [ 529.804925][T10406] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 530.425141][T10407] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 531.208303][T10420] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 532.779677][ T5883] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 532.818946][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.843236][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.876126][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 532.918434][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.059534][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.069231][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 533.074863][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.086409][ T5883] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 533.096305][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.106872][ T5883] usb 8-1: config 0 descriptor?? [ 533.124189][ T5883] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 534.104324][T10421] chnl_net:caif_netlink_parms(): no params data found [ 534.225296][T10437] loop8: detected capacity change from 0 to 16 [ 534.287612][T10437] erofs (device loop8): mounted with root inode @ nid 36. [ 534.907961][ T5883] usb 8-1: Detected FT232A [ 534.919457][ T5883] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 534.928964][ T5883] usb 8-1: USB disconnect, device number 6 [ 535.059237][ T5883] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 535.108796][ T5883] ftdi_sio 8-1:0.0: device disconnected [ 535.250756][T10445] 9pnet_fd: Insufficient options for proto=fd [ 535.381060][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.407218][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.442341][T10421] bridge_slave_0: entered allmulticast mode [ 535.514267][T10421] bridge_slave_0: entered promiscuous mode [ 535.543534][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.565784][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.574324][T10421] bridge_slave_1: entered allmulticast mode [ 535.584568][T10421] bridge_slave_1: entered promiscuous mode [ 535.640775][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.663464][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.911660][ T5146] Bluetooth: hci3: command tx timeout [ 536.354287][T10421] team0: Port device team_slave_0 added [ 536.457606][T10421] team0: Port device team_slave_1 added [ 536.563772][T10459] loop0: detected capacity change from 0 to 512 [ 536.612010][T10421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.628958][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.657280][T10421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.672242][T10421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.683577][T10421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.710406][T10421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.830639][T10421] hsr_slave_0: entered promiscuous mode [ 536.858227][T10421] hsr_slave_1: entered promiscuous mode [ 536.884477][T10421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.903572][T10421] Cannot create hsr debugfs directory [ 537.750828][T10473] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 538.289270][ T5146] Bluetooth: hci3: command tx timeout [ 538.382234][T10421] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 538.402762][T10421] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 538.604785][T10477] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 539.153518][T10421] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 539.191749][T10421] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 539.516555][T10421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.602933][T10421] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.632317][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.639522][ T9966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.652195][T10487] loop0: detected capacity change from 0 to 16 [ 539.678288][T10487] erofs (device loop0): mounted with root inode @ nid 36. [ 539.687089][T10487] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 539.712144][T10487] erofs (device loop0): failed to decompress -18 in[46, 4050] out[1851] [ 539.720718][T10487] erofs (device loop0): read error -117 @ 43 of nid 36 [ 539.793194][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.800426][ T9966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.389780][ T5146] Bluetooth: hci3: command tx timeout [ 540.554055][ T5843] Bluetooth: hci5: sending frame failed (-49) [ 540.562861][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 540.579900][ T1207] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 540.621846][T10421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.450761][ T1207] usb 9-1: Using ep0 maxpacket: 16 [ 541.461934][ T1207] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 541.471452][ T1207] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.500263][ T1207] usb 9-1: config 0 descriptor?? [ 541.513412][ T1207] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 542.394784][T10421] veth0_vlan: entered promiscuous mode [ 542.473721][T10421] veth1_vlan: entered promiscuous mode [ 542.499831][ T5146] Bluetooth: hci3: command tx timeout [ 543.125171][T10421] veth0_macvtap: entered promiscuous mode [ 543.136725][T10421] veth1_macvtap: entered promiscuous mode [ 543.155358][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.165961][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.175940][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.186565][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.196559][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.207307][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.217283][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.227924][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.238783][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.250181][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.260136][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.270904][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.280773][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.291458][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.301369][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.311893][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.321792][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.332327][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.345167][T10421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.355513][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.366057][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.375981][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.386612][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.396528][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.469436][T10519] loop7: detected capacity change from 0 to 512 [ 543.490034][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.499978][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.510969][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.520918][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.531470][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.542224][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.553861][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.563812][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.574514][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.587523][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.598102][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.608108][T10421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.618662][T10421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.629825][T10421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.638488][ T1207] usb 9-1: Detected FT232A [ 544.695063][ T1207] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 544.833241][T10421] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.190973][T10421] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.322572][ T1207] usb 9-1: USB disconnect, device number 2 [ 545.456968][T10421] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.472678][T10421] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.660118][ T1207] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 545.672341][ T1207] ftdi_sio 9-1:0.0: device disconnected [ 545.915869][ T6276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.923916][ T6276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.932058][ T6276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.939961][ T6276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.960675][T10548] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 549.626225][ T6106] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 550.077687][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 550.162989][ T6106] usb 9-1: Using ep0 maxpacket: 16 [ 550.258170][ T6106] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 550.262542][T10564] loop6: detected capacity change from 0 to 512 [ 550.468768][ T6106] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.487578][ T6106] usb 9-1: config 0 descriptor?? [ 550.527329][ T6106] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 552.933437][T10578] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 554.395474][ T6106] usb 9-1: Detected FT232A [ 554.401095][ T6106] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 554.411003][ T6106] usb 9-1: USB disconnect, device number 3 [ 554.419538][ T6106] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 554.435559][ T6106] ftdi_sio 9-1:0.0: device disconnected [ 554.770889][T10588] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 555.759874][ T5833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 555.959927][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 556.060210][ T5833] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 556.105100][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.122402][ T5833] usb 8-1: config 0 descriptor?? [ 556.161885][ T5833] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 556.799590][T10598] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 557.915521][ T5833] usb 8-1: Detected FT232A [ 557.924871][ T5833] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 557.943185][ T5833] usb 8-1: USB disconnect, device number 7 [ 557.952301][ T5833] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 557.962017][ T5833] ftdi_sio 8-1:0.0: device disconnected [ 558.756736][T10612] loop9: detected capacity change from 0 to 512 [ 562.314034][T10635] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 562.856604][ T1222] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 563.205885][ T1222] usb 9-1: Using ep0 maxpacket: 16 [ 563.213754][ T1222] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 563.222938][ T1222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.270787][ T1222] usb 9-1: config 0 descriptor?? [ 563.285863][ T1222] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 563.352997][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.170704][T10656] loop0: detected capacity change from 0 to 512 [ 564.198708][T10657] loop7: detected capacity change from 0 to 16 [ 564.209761][T10657] erofs (device loop7): mounted with root inode @ nid 36. [ 564.218555][T10657] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 564.230011][T10657] erofs (device loop7): failed to decompress -18 in[46, 4050] out[1851] [ 564.239025][T10657] erofs (device loop7): read error -117 @ 43 of nid 36 [ 565.150497][ T1222] usb 9-1: Detected FT232A [ 565.189951][ T1222] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 565.209538][ T1222] usb 9-1: USB disconnect, device number 4 [ 565.244402][ T1222] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 565.269859][ T1222] ftdi_sio 9-1:0.0: device disconnected [ 565.612182][T10671] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 568.607490][ T1222] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 569.844526][T10690] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 571.135632][T10708] loop9: detected capacity change from 0 to 16 [ 571.687534][T10708] erofs (device loop9): mounted with root inode @ nid 36. [ 571.699245][T10708] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 571.712334][T10708] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 571.720992][T10708] erofs (device loop9): read error -117 @ 43 of nid 36 [ 572.451941][T10717] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 575.576697][T10735] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 576.122679][T10742] loop9: detected capacity change from 0 to 16 [ 576.187861][T10742] erofs (device loop9): mounted with root inode @ nid 36. [ 576.223373][T10742] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 576.537284][T10742] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 576.736054][T10742] erofs (device loop9): read error -117 @ 43 of nid 36 [ 578.929849][T10762] netlink: 'syz.8.1441': attribute type 4 has an invalid length. [ 579.930472][T10771] loop0: detected capacity change from 0 to 512 [ 582.000595][T10787] netlink: 'syz.6.1447': attribute type 4 has an invalid length. [ 583.069487][ T1222] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 583.096951][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1450'. [ 583.657695][T10799] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 583.784450][ T1222] usb 8-1: Using ep0 maxpacket: 16 [ 584.515238][ T1222] usb 8-1: device descriptor read/all, error -71 [ 588.590648][T10831] loop0: detected capacity change from 0 to 512 [ 589.930052][T10832] netlink: 'syz.7.1458': attribute type 4 has an invalid length. [ 590.477957][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1463'. [ 595.222788][T10877] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 596.611523][T10892] loop6: detected capacity change from 0 to 16 [ 596.619109][T10892] erofs (device loop6): mounted with root inode @ nid 36. [ 596.627973][T10892] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 596.643090][T10892] erofs (device loop6): failed to decompress -18 in[46, 4050] out[1851] [ 596.651831][T10892] erofs (device loop6): read error -117 @ 43 of nid 36 [ 599.079697][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1481'. [ 601.660885][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1486'. [ 605.533616][T10946] tty tty37: ldisc open failed (-12), clearing slot 36 [ 605.760643][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1493'. [ 607.372495][T10960] loop9: detected capacity change from 0 to 16 [ 607.691130][T10960] erofs (device loop9): mounted with root inode @ nid 36. [ 607.711378][T10960] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 607.763241][T10960] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 607.771842][T10960] erofs (device loop9): read error -117 @ 43 of nid 36 [ 609.020583][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1499'. [ 612.301296][T10995] tty tty39: ldisc open failed (-12), clearing slot 38 [ 612.674975][T11001] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 613.440053][T10993] netlink: 'syz.8.1504': attribute type 4 has an invalid length. [ 616.714995][T11036] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 616.872942][T11038] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 618.391554][T11045] overlayfs: failed to resolve './file1': -2 [ 619.930017][ T5146] Bluetooth: hci5: command 0x1003 tx timeout [ 619.938156][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 620.393665][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1525'. [ 622.571690][T11083] loop8: detected capacity change from 0 to 16 [ 623.148497][T11083] erofs (device loop8): mounted with root inode @ nid 36. [ 623.162790][T11082] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 623.229275][T11082] erofs (device loop8): failed to decompress -18 in[46, 4050] out[1851] [ 623.237701][T11082] erofs (device loop8): read error -117 @ 43 of nid 36 [ 623.687051][T11089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 625.112783][T11099] openvswitch: netlink: Flow actions attr not present in new flow. [ 625.179645][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.619102][T11115] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 628.509501][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 628.820121][T11121] loop7: detected capacity change from 0 to 16 [ 628.829243][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 628.835585][T11121] erofs (device loop7): mounted with root inode @ nid 36. [ 628.845953][T11121] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 628.857788][ T25] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 628.867379][T11121] erofs (device loop7): failed to decompress -18 in[46, 4050] out[1851] [ 628.876195][T11121] erofs (device loop7): read error -117 @ 43 of nid 36 [ 628.883446][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.893606][ T25] usb 9-1: config 0 descriptor?? [ 628.905681][ T25] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 630.072338][T11133] netlink: 'syz.7.1546': attribute type 4 has an invalid length. [ 630.342019][ T25] usb 9-1: Detected FT232A [ 630.356298][ T25] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 630.378517][ T25] usb 9-1: USB disconnect, device number 6 [ 630.404149][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 630.418161][ T25] ftdi_sio 9-1:0.0: device disconnected [ 632.089529][T11141] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.096813][T11141] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.106384][T11141] bridge0: entered allmulticast mode [ 633.522920][T11150] openvswitch: netlink: Flow actions attr not present in new flow. [ 634.540885][T11167] loop9: detected capacity change from 0 to 16 [ 634.593187][T11167] erofs (device loop9): mounted with root inode @ nid 36. [ 634.612906][T11172] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 634.643086][T11167] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 634.660524][T11167] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 634.669362][T11167] erofs (device loop9): read error -117 @ 43 of nid 36 [ 635.185644][T11175] netlink: 'syz.8.1557': attribute type 4 has an invalid length. [ 637.241181][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 637.487484][T11188] netlink: 'syz.8.1561': attribute type 4 has an invalid length. [ 637.904782][T11182] netlink: 'syz.9.1559': attribute type 4 has an invalid length. [ 639.229751][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.238572][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.246414][T11201] bridge0: entered allmulticast mode [ 639.649891][T11203] netlink: 'syz.0.1564': attribute type 4 has an invalid length. [ 641.284019][T11211] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.291402][T11211] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.298966][T11211] bridge0: entered allmulticast mode [ 641.870640][T11221] loop9: detected capacity change from 0 to 16 [ 641.898487][T11221] erofs (device loop9): mounted with root inode @ nid 36. [ 641.907304][T11218] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 641.918404][T11218] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 641.928476][T11218] erofs (device loop9): read error -117 @ 43 of nid 36 [ 641.997040][T11223] openvswitch: netlink: Flow key attr not present in new flow. [ 642.899971][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 644.469388][T11237] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 645.289444][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 645.297728][ T25] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 645.307269][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.332690][ T25] usb 8-1: config 0 descriptor?? [ 645.346691][ T25] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 645.611097][ T6106] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 645.807604][T11247] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 646.409865][ T6106] usb 9-1: Using ep0 maxpacket: 16 [ 646.418152][ T6106] usb 9-1: device descriptor read/all, error -71 [ 646.675013][ T25] usb 8-1: Detected FT232A [ 646.689642][ T25] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 646.717237][ T25] usb 8-1: USB disconnect, device number 10 [ 646.744044][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 646.755892][ T25] ftdi_sio 8-1:0.0: device disconnected [ 646.997619][T11256] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1577'. [ 649.417437][T11259] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 649.851984][T11276] loop0: detected capacity change from 0 to 16 [ 649.860022][T11276] erofs (device loop0): mounted with root inode @ nid 36. [ 649.869005][T11276] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 649.877870][T11276] erofs (device loop0): failed to decompress -18 in[46, 4050] out[1851] [ 649.886450][T11276] erofs (device loop0): read error -117 @ 43 of nid 36 [ 650.048320][T11280] mkiss: ax0: crc mode is auto. [ 652.889349][T11310] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 653.535817][T11312] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1594'. [ 654.679986][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 654.951262][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 654.960405][ T25] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 654.989755][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.013848][ T25] usb 10-1: config 0 descriptor?? [ 655.041365][ T25] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 656.529892][ T25] usb 10-1: Detected FT232A [ 656.535389][ T25] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 656.545731][T11327] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 656.555287][ T25] usb 10-1: USB disconnect, device number 2 [ 656.568722][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 656.578524][ T25] ftdi_sio 10-1:0.0: device disconnected [ 658.454351][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 658.464681][ T5146] CPU: 1 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 658.464715][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 658.464729][ T5146] Workqueue: hci3 hci_rx_work [ 658.464772][ T5146] Call Trace: [ 658.464780][ T5146] [ 658.464788][ T5146] dump_stack_lvl+0x241/0x360 [ 658.464814][ T5146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.464841][ T5146] ? __wake_up_klogd+0xcc/0x110 [ 658.464869][ T5146] sysfs_create_dir_ns+0x2ce/0x3a0 [ 658.464897][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 658.464939][ T5146] kobject_add_internal+0x435/0x8d0 [ 658.464969][ T5146] kobject_add+0x152/0x220 [ 658.464989][ T5146] ? preempt_schedule_thunk+0x1a/0x30 [ 658.465013][ T5146] ? device_add+0x3e7/0xbf0 [ 658.465037][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 658.465057][ T5146] ? _raw_spin_unlock+0x3e/0x50 [ 658.465084][ T5146] ? get_device_parent+0x165/0x410 [ 658.465111][ T5146] device_add+0x4e5/0xbf0 [ 658.465140][ T5146] hci_conn_add_sysfs+0xe8/0x200 [ 658.465167][ T5146] le_conn_complete_evt+0xc9f/0x12e0 [ 658.465200][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 658.465228][ T5146] ? __mutex_unlock_slowpath+0x21e/0x790 [ 658.465254][ T5146] ? __pfx___mutex_lock+0x10/0x10 [ 658.465271][ T5146] ? skb_pull_data+0x112/0x230 [ 658.465300][ T5146] hci_le_enh_conn_complete_evt+0x185/0x420 [ 658.465331][ T5146] hci_event_packet+0xa55/0x1540 [ 658.465362][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 658.465388][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 658.465418][ T5146] ? mark_lock+0x9a/0x360 [ 658.465446][ T5146] ? hci_send_to_monitor+0xd8/0x7f0 [ 658.465467][ T5146] ? kcov_remote_start+0x97/0x7d0 [ 658.465495][ T5146] hci_rx_work+0x3f3/0xdb0 [ 658.465528][ T5146] ? process_scheduled_works+0x976/0x1840 [ 658.465551][ T5146] process_scheduled_works+0xa66/0x1840 [ 658.465599][ T5146] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.465627][ T5146] ? assign_work+0x364/0x3d0 [ 658.465652][ T5146] worker_thread+0x870/0xd30 [ 658.465681][ T5146] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 658.465709][ T5146] ? __kthread_parkme+0x169/0x1d0 [ 658.465736][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 658.465758][ T5146] kthread+0x7a9/0x920 [ 658.465779][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.465804][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 658.465826][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.465847][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.465875][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.465896][ T5146] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.465919][ T5146] ? lockdep_hardirqs_on+0x99/0x150 [ 658.465943][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.465966][ T5146] ret_from_fork+0x4b/0x80 [ 658.465988][ T5146] ? __pfx_kthread+0x10/0x10 [ 658.466012][ T5146] ret_from_fork_asm+0x1a/0x30 [ 658.466048][ T5146] [ 658.466234][ T5146] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 658.580818][T11343] netlink: 'syz.7.1604': attribute type 4 has an invalid length. [ 658.583255][ T5146] Bluetooth: hci3: failed to register connection device [ 658.780322][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 660.733262][T11363] netlink: 'syz.6.1611': attribute type 4 has an invalid length. [ 660.934740][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 661.592162][T11364] overlayfs: missing 'lowerdir' [ 665.629584][T11396] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 666.980399][T11400] netlink: 'syz.6.1621': attribute type 4 has an invalid length. [ 671.005542][T11435] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 672.511740][T11425] netlink: 'syz.8.1632': attribute type 4 has an invalid length. [ 673.289842][T11450] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 674.528928][ T5843] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 677.545534][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 679.129604][T11492] loop9: detected capacity change from 0 to 16 [ 679.168472][T11492] erofs (device loop9): mounted with root inode @ nid 36. [ 679.191704][T11492] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 679.208039][T11492] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 679.216594][T11492] erofs (device loop9): read error -117 @ 43 of nid 36 [ 681.438672][T11513] loop9: detected capacity change from 0 to 512 [ 683.133271][T11525] netlink: 'syz.6.1659': attribute type 4 has an invalid length. [ 685.033786][T11547] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 685.503074][T11543] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 686.149387][ T6106] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 686.235172][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.383711][ T6106] usb 10-1: Using ep0 maxpacket: 16 [ 686.740064][ T6106] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 686.749926][ T6106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.780146][ T6106] usb 10-1: config 0 descriptor?? [ 687.054032][ T6106] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 687.280229][ T6106] usb 10-1: Detected FT232A [ 687.546086][ T6106] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 687.884510][ T6106] usb 10-1: USB disconnect, device number 3 [ 687.896848][ T6106] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 687.906590][ T6106] ftdi_sio 10-1:0.0: device disconnected [ 687.913748][T11571] loop8: detected capacity change from 0 to 512 [ 692.056825][T11595] 9pnet_fd: Insufficient options for proto=fd [ 692.540385][T11594] netlink: 'syz.9.1678': attribute type 4 has an invalid length. [ 693.967573][T11606] netlink: 'syz.0.1680': attribute type 4 has an invalid length. [ 696.849546][ T5146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 696.859593][ T5146] CPU: 0 UID: 0 PID: 5146 Comm: kworker/u9:1 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 696.859620][ T5146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 696.859633][ T5146] Workqueue: hci4 hci_rx_work [ 696.859664][ T5146] Call Trace: [ 696.859670][ T5146] [ 696.859678][ T5146] dump_stack_lvl+0x241/0x360 [ 696.859704][ T5146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.859724][ T5146] ? __pfx__printk+0x10/0x10 [ 696.859755][ T5146] ? __kmalloc_cache_noprof+0x243/0x390 [ 696.859773][ T5146] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 696.859818][ T5146] sysfs_create_dir_ns+0x2ce/0x3a0 [ 696.859844][ T5146] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 696.859878][ T5146] kobject_add_internal+0x435/0x8d0 [ 696.859909][ T5146] kobject_add+0x152/0x220 [ 696.859928][ T5146] ? do_raw_spin_unlock+0x13c/0x8b0 [ 696.859948][ T5146] ? device_add+0x3e7/0xbf0 [ 696.859975][ T5146] ? __pfx_kobject_add+0x10/0x10 [ 696.859995][ T5146] ? _raw_spin_unlock+0x28/0x50 [ 696.860022][ T5146] ? get_device_parent+0x165/0x410 [ 696.860048][ T5146] device_add+0x4e5/0xbf0 [ 696.860077][ T5146] hci_conn_add_sysfs+0xe8/0x200 [ 696.860105][ T5146] le_conn_complete_evt+0xc9f/0x12e0 [ 696.860139][ T5146] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 696.860160][ T5146] ? __mutex_unlock_slowpath+0x21e/0x790 [ 696.860189][ T5146] ? __pfx___mutex_lock+0x10/0x10 [ 696.860216][ T5146] ? skb_pull_data+0x112/0x230 [ 696.860244][ T5146] hci_le_enh_conn_complete_evt+0x185/0x420 [ 696.860274][ T5146] hci_event_packet+0xa55/0x1540 [ 696.860304][ T5146] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 696.860331][ T5146] ? __pfx_hci_event_packet+0x10/0x10 [ 696.860355][ T5146] ? do_raw_spin_unlock+0x13c/0x8b0 [ 696.860382][ T5146] ? hci_send_to_monitor+0xd8/0x7f0 [ 696.860403][ T5146] ? kcov_remote_start+0x97/0x7d0 [ 696.860429][ T5146] hci_rx_work+0x3f3/0xdb0 [ 696.860462][ T5146] ? process_scheduled_works+0x976/0x1840 [ 696.860484][ T5146] process_scheduled_works+0xa66/0x1840 [ 696.860533][ T5146] ? __pfx_process_scheduled_works+0x10/0x10 [ 696.860564][ T5146] ? assign_work+0x364/0x3d0 [ 696.860589][ T5146] worker_thread+0x870/0xd30 [ 696.860618][ T5146] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 696.860646][ T5146] ? __kthread_parkme+0x169/0x1d0 [ 696.860671][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 696.860692][ T5146] kthread+0x7a9/0x920 [ 696.860713][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860738][ T5146] ? __pfx_worker_thread+0x10/0x10 [ 696.860761][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860781][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860809][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860830][ T5146] ? _raw_spin_unlock_irq+0x23/0x50 [ 696.860852][ T5146] ? lockdep_hardirqs_on+0x99/0x150 [ 696.860875][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860900][ T5146] ret_from_fork+0x4b/0x80 [ 696.860921][ T5146] ? __pfx_kthread+0x10/0x10 [ 696.860945][ T5146] ret_from_fork_asm+0x1a/0x30 [ 696.860981][ T5146] [ 697.877709][ T5146] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 697.891902][ T5146] Bluetooth: hci4: failed to register connection device [ 699.293672][T11622] netlink: 'syz.6.1687': attribute type 4 has an invalid length. [ 699.347232][T11634] loop8: detected capacity change from 0 to 512 [ 700.315940][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 701.402077][T11656] netlink: 'syz.7.1695': attribute type 4 has an invalid length. [ 705.082942][T11679] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 705.118492][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 709.515635][T11702] netlink: 'syz.6.1707': attribute type 4 has an invalid length. [ 711.859223][T11734] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 713.943084][T11754] netlink: 'syz.7.1723': attribute type 4 has an invalid length. [ 714.441729][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 714.960273][T11762] random: crng reseeded on system resumption [ 715.348078][T11766] Unrecognized hibernate image header format! [ 715.354536][T11766] PM: hibernation: Image mismatch: architecture specific data [ 716.124640][T11767] netlink: 'syz.8.1725': attribute type 4 has an invalid length. [ 717.566962][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1731'. [ 718.989209][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1732'. [ 723.525075][ T6276] Bluetooth: Error in BCSP hdr checksum [ 723.614452][T10806] Bluetooth: Error in BCSP hdr checksum [ 723.881496][T11502] Bluetooth: Error in BCSP hdr checksum [ 725.362610][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 725.371529][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 733.321248][ T5843] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 733.756659][T11886] Bluetooth: hci5: command 0x1003 tx timeout [ 733.798505][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 736.444998][T11905] loop7: detected capacity change from 0 to 512 [ 736.481173][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1765'. [ 736.706322][ T5146] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 740.645916][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1773'. [ 743.333957][T11960] loop9: detected capacity change from 0 to 16 [ 743.462145][T11960] erofs (device loop9): mounted with root inode @ nid 36. [ 743.479577][T11960] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 743.489730][T11960] erofs (device loop9): failed to decompress -18 in[46, 4050] out[1851] [ 743.498192][T11960] erofs (device loop9): read error -117 @ 43 of nid 36 [ 744.260697][T11968] loop7: detected capacity change from 0 to 512 [ 747.728399][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.783688][T11999] netlink: 'syz.0.1787': attribute type 4 has an invalid length. [ 750.233478][T12009] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 750.406506][T12010] loop7: detected capacity change from 0 to 16 [ 751.094630][T12010] erofs (device loop7): mounted with root inode @ nid 36. [ 751.110958][T12008] erofs (device loop7): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 751.130900][T12008] erofs (device loop7): failed to decompress -18 in[46, 4050] out[1851] [ 751.139425][T12008] erofs (device loop7): read error -117 @ 43 of nid 36 [ 752.867714][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 752.893198][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 752.917054][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 752.945750][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 752.966081][ T5146] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 752.973733][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 755.535139][T11886] Bluetooth: hci5: command tx timeout [ 756.113472][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1799'. [ 758.099308][T11886] Bluetooth: hci5: command tx timeout [ 758.348307][T12063] overlayfs: failed to resolve './file0': -2 [ 758.856608][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1804'. [ 759.148178][T12020] chnl_net:caif_netlink_parms(): no params data found [ 760.371457][T11886] Bluetooth: hci5: command tx timeout [ 761.018048][T12020] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.025739][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.173592][T12020] bridge_slave_0: entered allmulticast mode [ 761.181312][T12020] bridge_slave_0: entered promiscuous mode [ 761.190685][T12020] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.198047][T12020] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.205710][T12020] bridge_slave_1: entered allmulticast mode [ 761.215835][T12020] bridge_slave_1: entered promiscuous mode [ 761.485979][T12020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.660316][T12020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.287389][T11886] Bluetooth: hci5: command tx timeout [ 763.495541][T12020] team0: Port device team_slave_0 added [ 763.504662][T12020] team0: Port device team_slave_1 added [ 763.735366][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1818'. [ 763.774569][T12110] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1818'. [ 763.803644][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1818'. [ 764.693087][T12020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.723759][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.749679][ C1] vkms_vblank_simulate: vblank timer overrun [ 764.799236][T12020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.830837][T12020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.848188][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.924198][T12020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.163575][T12020] hsr_slave_0: entered promiscuous mode [ 766.209965][T12020] hsr_slave_1: entered promiscuous mode [ 767.513242][T12020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 767.521187][T12020] Cannot create hsr debugfs directory [ 768.683500][T12138] loop6: detected capacity change from 0 to 16 [ 768.724322][T12138] erofs (device loop6): mounted with root inode @ nid 36. [ 768.735674][T12138] erofs (device loop6): readahead error at folio 24 @ nid 36 [ 768.743401][T12138] erofs (device loop6): readahead error at folio 19 @ nid 36 [ 768.751024][T12138] erofs (device loop6): readahead error at folio 13 @ nid 36 [ 768.758635][T12138] erofs (device loop6): readahead error at folio 8 @ nid 36 [ 768.766280][T12138] syz.6.1825: attempt to access beyond end of device [ 768.766280][T12138] loop6: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 768.781704][T12138] syz.6.1825: attempt to access beyond end of device [ 768.781704][T12138] loop6: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 769.267306][T12020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.494339][T12020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.335787][T12020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.880340][T12164] loop0: detected capacity change from 0 to 512 [ 771.929961][T12164] EXT4-fs: Ignoring removed orlov option [ 771.957109][T12164] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 771.979679][T12164] EXT4-fs (loop0): 1 truncate cleaned up [ 771.985885][T12164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.056790][T12020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.520304][T12189] 9pnet_fd: Insufficient options for proto=fd [ 774.894976][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.005258][ T29] audit: type=1800 audit(1734818671.749:3): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1837" name="/" dev="9p" ino=2 res=0 errno=0 [ 775.529483][T12020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 775.562642][T12020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 775.596292][T12020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 775.797291][T12020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 776.065418][T12020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.095794][T12208] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 776.825314][T12020] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.858785][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.866030][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.876772][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.883992][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.148705][T12020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.692209][T12225] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 779.099367][ T6106] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 779.757516][T12221] netlink: 'syz.6.1842': attribute type 4 has an invalid length. [ 779.799683][ T6106] usb 10-1: Using ep0 maxpacket: 16 [ 780.622946][ T6106] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 780.632433][ T6106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.642796][ T6106] usb 10-1: config 0 descriptor?? [ 780.650265][ T6106] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 780.877060][T12020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.923169][T12246] loop6: detected capacity change from 0 to 512 [ 781.941811][T12246] EXT4-fs: Ignoring removed orlov option [ 781.961881][T12246] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 781.981272][T12246] EXT4-fs (loop6): 1 truncate cleaned up [ 781.990230][T12246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.217005][T12020] veth0_vlan: entered promiscuous mode [ 782.275688][T12020] veth1_vlan: entered promiscuous mode [ 782.479495][ T5833] kernel write not supported for file /register (pid: 5833 comm: kworker/1:3) [ 782.874859][T12020] veth0_macvtap: entered promiscuous mode [ 782.931059][T12020] veth1_macvtap: entered promiscuous mode [ 782.994968][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.108747][ T6106] usb 10-1: Detected FT232A [ 783.167722][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.178759][ T6106] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 783.198114][ T6106] usb 10-1: USB disconnect, device number 4 [ 783.233415][ T6106] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 783.233625][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.253714][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.265774][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.276846][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.287020][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.304917][ T6106] ftdi_sio 10-1:0.0: device disconnected [ 783.327557][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.343793][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.373867][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.386904][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.609993][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.620703][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.639378][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.904634][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.916336][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.996469][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.009282][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.021405][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.032410][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.060390][T12020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.261328][ T7562] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.460660][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.471481][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.481911][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.493857][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.504574][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.515133][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.525011][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.535585][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.545661][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.556296][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.566295][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.576838][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.586728][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.598415][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.609199][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.619820][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.629836][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.640455][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.650361][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.660914][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.674120][T12020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.713872][T12275] loop9: detected capacity change from 0 to 512 [ 784.722661][T12020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.731898][T12020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.741271][T12020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.750339][T12020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.152703][T11824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.161178][T11824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.086238][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.094331][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.257375][T12292] loop0: detected capacity change from 0 to 512 [ 786.280135][T12292] EXT4-fs: Ignoring removed orlov option [ 786.287648][T12292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.351609][T12292] EXT4-fs (loop0): 1 truncate cleaned up [ 786.358263][T12292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.373006][T12309] 9pnet_fd: Insufficient options for proto=fd [ 788.639062][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.210047][T12317] ALSA: mixer_oss: invalid OSS volume '00000000000000000' [ 791.052558][T12332] random: crng reseeded on system resumption [ 792.565372][T12343] Unrecognized hibernate image header format! [ 792.571715][T12343] PM: hibernation: Image mismatch: architecture specific data [ 792.836020][T12347] loop0: detected capacity change from 0 to 512 [ 792.901081][T12347] EXT4-fs: Ignoring removed orlov option [ 792.940013][T12347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 792.967319][T12349] loop6: detected capacity change from 0 to 512 [ 793.011156][T12347] EXT4-fs (loop0): 1 truncate cleaned up [ 793.061737][T12347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.389651][T12366] 9pnet_fd: Insufficient options for proto=fd [ 794.720569][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.872869][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 800.072190][T12417] loop0: detected capacity change from 0 to 512 [ 800.106100][T12417] EXT4-fs: Ignoring removed orlov option [ 800.130150][T12417] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 800.214686][T12417] EXT4-fs (loop0): 1 truncate cleaned up [ 800.225092][T12417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.507430][T11625] kernel write not supported for file /register (pid: 11625 comm: kworker/0:0) [ 801.705187][T12428] loop4: detected capacity change from 0 to 16 [ 802.111773][T12428] erofs (device loop4): mounted with root inode @ nid 36. [ 802.253789][T12428] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 802.335446][T12428] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 802.392929][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.466820][T12428] erofs (device loop4): readahead error at folio 13 @ nid 36 [ 802.529612][T12428] erofs (device loop4): readahead error at folio 8 @ nid 36 [ 802.538253][T12428] syz.4.1897: attempt to access beyond end of device [ 802.538253][T12428] loop4: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 803.519484][T12428] syz.4.1897: attempt to access beyond end of device [ 803.519484][T12428] loop4: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 803.684690][T12441] loop6: detected capacity change from 0 to 16 [ 803.693592][T12441] erofs: Unknown parameter '' [ 804.470107][T12446] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 805.123591][T12450] random: crng reseeded on system resumption [ 805.328801][T12444] loop6: detected capacity change from 0 to 32768 [ 805.350869][T12444] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1903 (12444) [ 805.460725][ T6106] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 805.784081][T12452] Unrecognized hibernate image header format! [ 805.791340][T12452] PM: hibernation: Image mismatch: architecture specific data [ 806.625510][T12444] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 806.662237][T12444] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 806.687070][T12444] BTRFS info (device loop6): using free-space-tree [ 806.971534][ T6106] usb 8-1: device not accepting address 11, error -71 [ 807.350044][T12472] loop7: detected capacity change from 0 to 512 [ 807.486844][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 807.487105][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 807.496607][T12472] EXT4-fs: Ignoring removed orlov option [ 807.527482][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 807.527773][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 807.540126][T12472] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 807.560103][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 807.560236][T12444] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 807.693338][T12472] EXT4-fs (loop7): 1 truncate cleaned up [ 807.773694][T12487] loop9: detected capacity change from 0 to 512 [ 807.793453][T12472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.107586][T12444] BTRFS error (device loop6): open_ctree failed: -12 [ 809.025136][ T5833] kernel write not supported for file /register (pid: 5833 comm: kworker/1:3) [ 809.377045][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.400410][ T7574] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.989601][T12532] 9pnet_fd: Insufficient options for proto=fd [ 814.223757][T12535] netlink: 'syz.4.1923': attribute type 4 has an invalid length. [ 814.673255][T12542] loop6: detected capacity change from 0 to 512 [ 814.836830][T12539] ------------[ cut here ]------------ [ 814.879455][T12539] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait+0x186/0x210 [ 814.948686][T12539] WARNING: CPU: 0 PID: 12539 at kernel/sched/core.c:8687 __might_sleep+0xb9/0xe0 [ 814.969236][T12539] Modules linked in: [ 814.983648][T12539] CPU: 0 UID: 0 PID: 12539 Comm: syz.9.1926 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 814.999298][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 815.025776][T12539] RIP: 0010:__might_sleep+0xb9/0xe0 [ 815.103371][T12539] Code: 75 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ce 82 96 00 48 8b 4d 00 48 c7 c7 80 30 0a 8c 44 89 ee 48 89 ca e8 28 cb f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 815.254997][T12539] RSP: 0018:ffffc90010f365c8 EFLAGS: 00010246 [ 815.261383][T12539] RAX: 6e905c9aaff05400 RBX: 1ffff11005f9c6ae RCX: 0000000000080000 [ 815.270134][T12539] RDX: ffffc9001d54e000 RSI: 00000000000085cc RDI: 00000000000085cd [ 815.278261][T12539] RBP: ffff88802fce3570 R08: ffffffff817feaa2 R09: fffffbfff1cfa1a8 [ 815.288810][T12539] R10: dffffc0000000000 R11: fffffbfff1cfa1a8 R12: dffffc0000000000 [ 815.298224][T12539] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ccf40 [ 815.307260][T12539] FS: 00007f196eff16c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 815.317817][T12539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.325895][T12539] CR2: 000000110c3195b6 CR3: 0000000064e8c000 CR4: 00000000003526f0 [ 815.334275][T12539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 815.342799][T12539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 815.351723][T12539] Call Trace: [ 815.355022][T12539] [ 815.358034][T12539] ? __warn+0x165/0x4d0 [ 815.362936][T12539] ? __might_sleep+0xb9/0xe0 [ 815.368478][T12539] ? report_bug+0x2b3/0x500 [ 815.373185][T12539] ? __might_sleep+0xb9/0xe0 [ 815.378048][T12539] ? handle_bug+0x60/0x90 [ 815.383341][T12539] ? exc_invalid_op+0x1a/0x50 [ 815.388511][T12539] ? asm_exc_invalid_op+0x1a/0x20 [ 815.393654][T12539] ? __warn_printk+0x292/0x360 [ 815.398648][T12539] ? __might_sleep+0xb9/0xe0 [ 815.403758][T12539] ? __might_sleep+0xb8/0xe0 [ 815.408594][T12539] netfs_retry_reads+0xde/0x1e10 [ 815.414514][T12539] ? __lock_acquire+0x1397/0x2100 [ 815.420216][T12539] ? __pfx_netfs_retry_reads+0x10/0x10 [ 815.425784][T12539] netfs_read_collection+0x2e01/0x3ab0 [ 815.431613][T12539] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 815.437793][T12539] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 815.444246][T12539] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 815.450324][T12539] netfs_wait_for_read+0x2ba/0x4e0 [ 815.455912][T12539] ? trace_netfs_sreq_ref+0x94/0x230 [ 815.461390][T12539] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 815.467227][T12539] ? __pfx_autoremove_wake_function+0x10/0x10 [ 815.474063][T12539] ? __pfx_v9fs_issue_read+0x10/0x10 [ 815.479707][T12539] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 815.485536][T12539] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 815.492773][T12539] netfs_unbuffered_read_iter+0xbf/0xe0 [ 815.498372][T12539] __kernel_read+0x52e/0xa00 [ 815.503087][T12539] ? do_sys_openat2+0x13e/0x1d0 [ 815.507954][T12539] ? __pfx___kernel_read+0x10/0x10 [ 815.516380][T12539] integrity_kernel_read+0xb0/0x100 [ 815.523174][T12539] ? __pfx_integrity_kernel_read+0x10/0x10 [ 815.529647][T12539] ? __kmalloc_cache_noprof+0x243/0x390 [ 815.535597][T12539] ? ima_calc_file_hash+0xaae/0x1b30 [ 815.541920][T12539] ima_calc_file_hash+0xae6/0x1b30 [ 815.547448][T12539] ? p9_client_stat+0x1be/0x280 [ 815.552618][T12539] ? v9fs_vfs_getattr+0x1c0/0x370 [ 815.557936][T12539] ? ima_collect_measurement+0x2b1/0xb10 [ 815.563768][T12539] ? process_measurement+0x1351/0x1fb0 [ 815.570183][T12539] ? ima_file_check+0xd9/0x120 [ 815.575316][T12539] ? security_file_post_open+0xb9/0x280 [ 815.581728][T12539] ? path_openat+0x2cbd/0x3580 [ 815.586877][T12539] ? do_filp_open+0x27f/0x4e0 [ 815.592116][T12539] ? __x64_sys_open+0x225/0x270 [ 815.597078][T12539] ? do_syscall_64+0xf3/0x230 [ 815.602507][T12539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.608870][T12539] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 815.615842][T12539] ? p9_client_stat+0x1be/0x280 [ 815.622408][T12539] ? kfree+0x196/0x430 [ 815.626754][T12539] ? p9_client_stat+0x1be/0x280 [ 815.632644][T12539] ? p9_client_stat+0x1be/0x280 [ 815.637768][T12539] ? __pfx_p9_client_stat+0x10/0x10 [ 815.644134][T12539] ? v9fs_fid_lookup+0x1b2/0xf30 [ 815.649384][T12539] ? v9fs_vfs_getattr+0x2eb/0x370 [ 815.654528][T12539] ima_collect_measurement+0x520/0xb10 [ 815.660478][T12539] ? __pfx_ima_collect_measurement+0x10/0x10 [ 815.666793][T12539] ? rcu_is_watching+0x15/0xb0 [ 815.673091][T12539] ? trace_contention_end+0x3c/0x120 [ 815.678899][T12539] ? __asan_memset+0x23/0x50 [ 815.684141][T12539] ? ima_get_hash_algo+0x156/0x4d0 [ 815.689323][T12539] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 815.695229][T12539] process_measurement+0x1351/0x1fb0 [ 815.703016][T12539] ? __pfx_process_measurement+0x10/0x10 [ 815.709122][T12539] ? __pfx_lock_release+0x10/0x10 [ 815.715451][T12539] ? do_raw_spin_lock+0x14f/0x370 [ 815.722064][T12539] ? lockdep_hardirqs_on+0x99/0x150 [ 815.727865][T12539] ? apparmor_current_getlsmprop_subj+0x88/0x160 [ 815.735540][T12539] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 815.742692][T12539] ima_file_check+0xd9/0x120 [ 815.749092][T12539] ? __pfx_ima_file_check+0x10/0x10 [ 815.754844][T12539] security_file_post_open+0xb9/0x280 [ 815.761037][T12539] path_openat+0x2cbd/0x3580 [ 815.766483][T12539] ? __pfx_path_openat+0x10/0x10 [ 815.771640][T12539] do_filp_open+0x27f/0x4e0 [ 815.776269][T12539] ? __pfx_do_filp_open+0x10/0x10 [ 815.781662][T12539] ? do_raw_spin_lock+0x14f/0x370 [ 815.786922][T12539] do_sys_openat2+0x13e/0x1d0 [ 815.791907][T12539] ? __pfx_do_sys_openat2+0x10/0x10 [ 815.797236][T12539] __x64_sys_open+0x225/0x270 [ 815.802206][T12539] ? __pfx___x64_sys_open+0x10/0x10 [ 815.808065][T12539] ? do_syscall_64+0x100/0x230 [ 815.813115][T12539] ? do_syscall_64+0xb6/0x230 [ 815.818092][T12539] do_syscall_64+0xf3/0x230 [ 815.824195][T12539] ? clear_bhb_loop+0x35/0x90 [ 815.830116][T12539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.836413][T12539] RIP: 0033:0x7f196e185d29 [ 815.841475][T12539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.861917][T12539] RSP: 002b:00007f196eff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 815.870687][T12539] RAX: ffffffffffffffda RBX: 00007f196e375fa0 RCX: 00007f196e185d29 [ 815.879042][T12539] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 815.888421][T12539] RBP: 00007f196e201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 815.896551][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.904773][T12539] R13: 0000000000000000 R14: 00007f196e375fa0 R15: 00007ffc7d72e7c8 [ 815.912930][T12539] [ 815.915983][T12539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 815.923655][T12539] CPU: 0 UID: 0 PID: 12539 Comm: syz.9.1926 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 815.934589][T12539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 815.945488][T12539] Call Trace: [ 815.948851][T12539] [ 815.951795][T12539] dump_stack_lvl+0x241/0x360 [ 815.956492][T12539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.961913][T12539] ? __pfx__printk+0x10/0x10 [ 815.966660][T12539] ? _printk+0xd5/0x120 [ 815.970833][T12539] ? __init_begin+0x41000/0x41000 [ 815.975971][T12539] ? vscnprintf+0x5d/0x90 [ 815.980335][T12539] panic+0x349/0x880 [ 815.984601][T12539] ? __warn+0x174/0x4d0 [ 815.989664][T12539] ? __pfx_panic+0x10/0x10 [ 815.994744][T12539] __warn+0x344/0x4d0 [ 815.999714][T12539] ? __might_sleep+0xb9/0xe0 [ 816.004471][T12539] report_bug+0x2b3/0x500 [ 816.008828][T12539] ? __might_sleep+0xb9/0xe0 [ 816.013491][T12539] handle_bug+0x60/0x90 [ 816.017720][T12539] exc_invalid_op+0x1a/0x50 [ 816.022405][T12539] asm_exc_invalid_op+0x1a/0x20 [ 816.027364][T12539] RIP: 0010:__might_sleep+0xb9/0xe0 [ 816.032656][T12539] Code: 75 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ce 82 96 00 48 8b 4d 00 48 c7 c7 80 30 0a 8c 44 89 ee 48 89 ca e8 28 cb f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 816.054345][T12539] RSP: 0018:ffffc90010f365c8 EFLAGS: 00010246 [ 816.062281][T12539] RAX: 6e905c9aaff05400 RBX: 1ffff11005f9c6ae RCX: 0000000000080000 [ 816.070938][T12539] RDX: ffffc9001d54e000 RSI: 00000000000085cc RDI: 00000000000085cd [ 816.080622][T12539] RBP: ffff88802fce3570 R08: ffffffff817feaa2 R09: fffffbfff1cfa1a8 [ 816.090170][T12539] R10: dffffc0000000000 R11: fffffbfff1cfa1a8 R12: dffffc0000000000 [ 816.100091][T12539] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ccf40 [ 816.109245][T12539] ? __warn_printk+0x292/0x360 [ 816.114525][T12539] ? __might_sleep+0xb8/0xe0 [ 816.119267][T12539] netfs_retry_reads+0xde/0x1e10 [ 816.124270][T12539] ? __lock_acquire+0x1397/0x2100 [ 816.129676][T12539] ? __pfx_netfs_retry_reads+0x10/0x10 [ 816.135576][T12539] netfs_read_collection+0x2e01/0x3ab0 [ 816.141419][T12539] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 816.147750][T12539] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 816.155235][T12539] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 816.161364][T12539] netfs_wait_for_read+0x2ba/0x4e0 [ 816.167199][T12539] ? trace_netfs_sreq_ref+0x94/0x230 [ 816.172627][T12539] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 816.178437][T12539] ? __pfx_autoremove_wake_function+0x10/0x10 [ 816.184969][T12539] ? __pfx_v9fs_issue_read+0x10/0x10 [ 816.190559][T12539] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 816.196509][T12539] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 816.203276][T12539] netfs_unbuffered_read_iter+0xbf/0xe0 [ 816.210354][T12539] __kernel_read+0x52e/0xa00 [ 816.215291][T12539] ? do_sys_openat2+0x13e/0x1d0 [ 816.220261][T12539] ? __pfx___kernel_read+0x10/0x10 [ 816.226122][T12539] integrity_kernel_read+0xb0/0x100 [ 816.231511][T12539] ? __pfx_integrity_kernel_read+0x10/0x10 [ 816.237366][T12539] ? __kmalloc_cache_noprof+0x243/0x390 [ 816.243036][T12539] ? ima_calc_file_hash+0xaae/0x1b30 [ 816.248463][T12539] ima_calc_file_hash+0xae6/0x1b30 [ 816.253883][T12539] ? p9_client_stat+0x1be/0x280 [ 816.258767][T12539] ? v9fs_vfs_getattr+0x1c0/0x370 [ 816.264202][T12539] ? ima_collect_measurement+0x2b1/0xb10 [ 816.269861][T12539] ? process_measurement+0x1351/0x1fb0 [ 816.275882][T12539] ? ima_file_check+0xd9/0x120 [ 816.281208][T12539] ? security_file_post_open+0xb9/0x280 [ 816.287945][T12539] ? path_openat+0x2cbd/0x3580 [ 816.293150][T12539] ? do_filp_open+0x27f/0x4e0 [ 816.298635][T12539] ? __x64_sys_open+0x225/0x270 [ 816.303786][T12539] ? do_syscall_64+0xf3/0x230 [ 816.308711][T12539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.316210][T12539] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 816.322775][T12539] ? p9_client_stat+0x1be/0x280 [ 816.327715][T12539] ? kfree+0x196/0x430 [ 816.331857][T12539] ? p9_client_stat+0x1be/0x280 [ 816.337192][T12539] ? p9_client_stat+0x1be/0x280 [ 816.342209][T12539] ? __pfx_p9_client_stat+0x10/0x10 [ 816.347533][T12539] ? v9fs_fid_lookup+0x1b2/0xf30 [ 816.353371][T12539] ? v9fs_vfs_getattr+0x2eb/0x370 [ 816.358431][T12539] ima_collect_measurement+0x520/0xb10 [ 816.365183][T12539] ? __pfx_ima_collect_measurement+0x10/0x10 [ 816.371629][T12539] ? rcu_is_watching+0x15/0xb0 [ 816.376412][T12539] ? trace_contention_end+0x3c/0x120 [ 816.381840][T12539] ? __asan_memset+0x23/0x50 [ 816.386629][T12539] ? ima_get_hash_algo+0x156/0x4d0 [ 816.391879][T12539] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 816.397419][T12539] process_measurement+0x1351/0x1fb0 [ 816.403101][T12539] ? __pfx_process_measurement+0x10/0x10 [ 816.409000][T12539] ? __pfx_lock_release+0x10/0x10 [ 816.414217][T12539] ? do_raw_spin_lock+0x14f/0x370 [ 816.419594][T12539] ? lockdep_hardirqs_on+0x99/0x150 [ 816.425011][T12539] ? apparmor_current_getlsmprop_subj+0x88/0x160 [ 816.431536][T12539] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 816.438352][T12539] ima_file_check+0xd9/0x120 [ 816.443516][T12539] ? __pfx_ima_file_check+0x10/0x10 [ 816.449362][T12539] security_file_post_open+0xb9/0x280 [ 816.456667][T12539] path_openat+0x2cbd/0x3580 [ 816.461818][T12539] ? __pfx_path_openat+0x10/0x10 [ 816.467073][T12539] do_filp_open+0x27f/0x4e0 [ 816.471966][T12539] ? __pfx_do_filp_open+0x10/0x10 [ 816.477503][T12539] ? do_raw_spin_lock+0x14f/0x370 [ 816.483041][T12539] do_sys_openat2+0x13e/0x1d0 [ 816.489118][T12539] ? __pfx_do_sys_openat2+0x10/0x10 [ 816.495421][T12539] __x64_sys_open+0x225/0x270 [ 816.500427][T12539] ? __pfx___x64_sys_open+0x10/0x10 [ 816.505955][T12539] ? do_syscall_64+0x100/0x230 [ 816.511475][T12539] ? do_syscall_64+0xb6/0x230 [ 816.516687][T12539] do_syscall_64+0xf3/0x230 [ 816.521592][T12539] ? clear_bhb_loop+0x35/0x90 [ 816.526647][T12539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.533753][T12539] RIP: 0033:0x7f196e185d29 [ 816.538794][T12539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.559215][T12539] RSP: 002b:00007f196eff1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 816.567797][T12539] RAX: ffffffffffffffda RBX: 00007f196e375fa0 RCX: 00007f196e185d29 [ 816.575958][T12539] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 816.583949][T12539] RBP: 00007f196e201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 816.592067][T12539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.600613][T12539] R13: 0000000000000000 R14: 00007f196e375fa0 R15: 00007ffc7d72e7c8 [ 816.608709][T12539] [ 816.612100][T12539] Kernel Offset: disabled [ 816.616586][T12539] Rebooting in 86400 seconds..