last executing test programs: 20.544217596s ago: executing program 1 (id=7): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200004) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x2000051e2, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 19.93762262s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000400)=""/132, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x9}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 19.710616529s ago: executing program 3 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = syz_mount_image$vfat(&(0x7f0000019200), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mkdirat(r0, &(0x7f00000191c0)='./file0\x00', 0x184) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendto$inet(r3, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) 19.64902588s ago: executing program 5 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) 18.491536251s ago: executing program 3 (id=10): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 17.325075869s ago: executing program 1 (id=11): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x8, 0x1, &(0x7f0000000300)={0x4, "a094dba3e3c52efbb7fe4e6b4b4d462db166fda29f8fdadac6d53edf97f83e7927"}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d000700000011ff00000000000000000000000000000000000000070000000000000000000000014f194e2000"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x186, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0xfe, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef1a281b7b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x28}, [@mdlm_detail={0xed, 0x24, 0x13, 0x1, "b341959165db3eb23f78464bb7a5170e571f75340a1af2ed5d4564a33d77469bd78279406fecd1a418aaebd80fd0b658492a0bfdcf252a3e597f5d63c47652b4fecdad7ce8a819a62008779cf46ba8c4719af81c17094e4982567917fd54e40087bd80291582e59b2a4e4b67342fe94455aa523da21aee891017bfd450cbd16ad9a303f0b3b820041cacb95d87683e257b867147d993098072ecdc3d9a13a5f14b59a29fd1a011b34b5057988fa6f670a234a83998d721d09eaad3508cd2aa4248428e3b1f40e543c04c9d8643e155a973a104ab52b47b2b89ff4a73fd306fcbf8d13b503825a4979b"}, @country_functional={0xa, 0x24, 0x7, 0x54, 0x938f, [0x0, 0x0]}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x76}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x8, 0xb4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x47, 0x6, 0x9, 0x20, 0x71}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x1, 0xeb4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3c3e6990d31b33051f14f982d41a89d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0xb02}, @ptm_cap={0x3}]}, 0x4, [{0x7a, &(0x7f0000000600)=@lang_id={0x0, 0x3, 0x400a}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "f07ba636908de209f65bdfb257802081078d2c9dd948c97e1d1b0d1fb614a49c3fb6d24f310a68f1fe5a71c9dd4b6402b72a67007bab95555d8a100500ff061285be40081cb510065ae8f78807e8adf1659cfe7e4fbdc10dd31047d7b0257fa04299d97d0b8ef05c7f4ed49368d08b62f64f2c47bc8d82e4cd285f05023ab82b56cb8b3001307d83a4ab91bafc609b927d90956e0b85eb7f4a9170817e4b12ce735deb5b16e805de75b103fa212ef468dbdeee509abd6c1abffd7019b32f2b7ce7d191e0b820191596172c1c5ffba275b67761c814758eb9e06f5419fc3ebc53326cf85bcfd1e3f5"}}, {0x8a, &(0x7f0000000780)=@string={0x8a, 0x3, "4e4d619a1c8f2b01c76fe57df5ad59f17a6eea5eb54a1095a35a11f0a8cf6589b26e1ab6f73ea35d64a226163d3d1b543ee09ad7661dcac81b1e86943bf7bca3bfdda2ae4a2412f627ed7e2b43ad51174ddf3820b594b702e85102a6c7e3c2bea29a9db933904ec11029864ae2f22c4153c051d9accbf40a2cbfed91e2ae9ca7fd9a6408b827e0f5"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c00}}]}) 16.823837608s ago: executing program 0 (id=12): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000400)=""/132, 0x84) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 16.78885901s ago: executing program 4 (id=13): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x11, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) r8 = memfd_create(0x0, 0x7) io_submit(r5, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000bd6d569c99a28df61801b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.325860221s ago: executing program 4 (id=15): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d000700000011ff00000000000000000000000000000000000000070000000000000000000000014f194e2000"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x186, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0xfe, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef1a281b7b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x28}, [@mdlm_detail={0xed, 0x24, 0x13, 0x1, "b341959165db3eb23f78464bb7a5170e571f75340a1af2ed5d4564a33d77469bd78279406fecd1a418aaebd80fd0b658492a0bfdcf252a3e597f5d63c47652b4fecdad7ce8a819a62008779cf46ba8c4719af81c17094e4982567917fd54e40087bd80291582e59b2a4e4b67342fe94455aa523da21aee891017bfd450cbd16ad9a303f0b3b820041cacb95d87683e257b867147d993098072ecdc3d9a13a5f14b59a29fd1a011b34b5057988fa6f670a234a83998d721d09eaad3508cd2aa4248428e3b1f40e543c04c9d8643e155a973a104ab52b47b2b89ff4a73fd306fcbf8d13b503825a4979b"}, @country_functional={0xa, 0x24, 0x7, 0x54, 0x938f, [0x0, 0x0]}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x76}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x8, 0xb4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x47, 0x6, 0x9, 0x20, 0x71}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x1, 0xeb4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3c3e6990d31b33051f14f982d41a89d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0xb02}, @ptm_cap={0x3}]}, 0x4, [{0x7a, &(0x7f0000000600)=@lang_id={0x0, 0x3, 0x400a}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "f07ba636908de209f65bdfb257802081078d2c9dd948c97e1d1b0d1fb614a49c3fb6d24f310a68f1fe5a71c9dd4b6402b72a67007bab95555d8a100500ff061285be40081cb510065ae8f78807e8adf1659cfe7e4fbdc10dd31047d7b0257fa04299d97d0b8ef05c7f4ed49368d08b62f64f2c47bc8d82e4cd285f05023ab82b56cb8b3001307d83a4ab91bafc609b927d90956e0b85eb7f4a9170817e4b12ce735deb5b16e805de75b103fa212ef468dbdeee509abd6c1abffd7019b32f2b7ce7d191e0b820191596172c1c5ffba275b67761c814758eb9e06f5419fc3ebc53326cf85bcfd1e3f5"}}, {0x8a, &(0x7f0000000780)=@string={0x8a, 0x3, "4e4d619a1c8f2b01c76fe57df5ad59f17a6eea5eb54a1095a35a11f0a8cf6589b26e1ab6f73ea35d64a226163d3d1b543ee09ad7661dcac81b1e86943bf7bca3bfdda2ae4a2412f627ed7e2b43ad51174ddf3820b594b702e85102a6c7e3c2bea29a9db933904ec11029864ae2f22c4153c051d9accbf40a2cbfed91e2ae9ca7fd9a6408b827e0f5"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c00}}]}) 15.26009525s ago: executing program 3 (id=16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"], 0x0, 0x8001, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000240)='H', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 13.723522918s ago: executing program 3 (id=17): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, 0x0, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 13.534678334s ago: executing program 5 (id=18): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"], 0x0, 0x8001, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000240)='H', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 12.749635368s ago: executing program 2 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) 11.900747899s ago: executing program 5 (id=20): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x4d7f6084, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.869240818s ago: executing program 1 (id=21): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-9,shortname=winnt,codepage=1255,utf8=0,check=strict,uni_xlate=0,nonumtail\x000,iocharset=macgreek,uni_xlate=0,rodir,iocharset=iso8859-7,uni_xlate=1,\x00'], 0x1, 0x29b, &(0x7f0000000580)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, 0x0, 0x0) 11.706503932s ago: executing program 4 (id=22): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000400)=""/132, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x9}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 11.536894361s ago: executing program 0 (id=23): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x2000000, 0x80, 0x3000006}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(aegis128))\x00'}, 0x58) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x2d, 0x4}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 11.508018175s ago: executing program 2 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000400)=""/132, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x9}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 10.155714468s ago: executing program 2 (id=25): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000400)=""/132, 0x84) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 9.427442526s ago: executing program 5 (id=26): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x11, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r8 = memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r5, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000bd6d569c99a28df61801b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.396608733s ago: executing program 1 (id=27): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x2000000, 0x80, 0x3000006}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(aegis128))\x00'}, 0x58) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x2d, 0x4}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 8.454195558s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000480)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@discard_sync}, {@datacow}, {@ref_verify}, {@datacow}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@ssd_spread}, {@datasum}, {@barrier}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x18}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fallocate(r5, 0x0, 0x0, 0x1001f0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x12000) r7 = open(&(0x7f0000000040)='./bus\x00', 0x64142, 0xdd) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000400000000000007000000000400000000000008010000000000000001000085000000000000000002000000000000000000001f"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) sendfile(r7, r7, 0x0, 0x1000200201005) 8.377299014s ago: executing program 4 (id=29): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-9,shortname=winnt,codepage=1255,utf8=0,check=strict,uni_xlate=0,nonumtail\x000,iocharset=macgreek,uni_xlate=0,rodir,iocharset=iso8859-7,uni_xlate=1,\x00'], 0x1, 0x29b, &(0x7f0000000580)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, 0x0, 0x0) 7.803644114s ago: executing program 0 (id=30): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(0xffffffffffffffff, 0x4d7f6084, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000400)=""/132, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x9}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 6.080290514s ago: executing program 1 (id=31): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-9,shortname=winnt,codepage=1255,utf8=0,check=strict,uni_xlate=0,nonumtail\x000,iocharset=macgreek,uni_xlate=0,rodir,iocharset=iso8859-7,uni_xlate=1,\x00'], 0x1, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, 0x0, 0x0) 6.06728904s ago: executing program 2 (id=32): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0xe}, {0x18, 0x110, 0xe, "11"}], 0x28}, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf}, 0xa) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa00000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x57a, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x41a) 4.926509349s ago: executing program 3 (id=33): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000001f80)=""/4096, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa6181, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 3.170864013s ago: executing program 5 (id=34): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={0x0}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x8, 0x1, &(0x7f0000000300)={0x4, "a094dba3e3c52efbb7fe4e6b4b4d462db166fda29f8fdadac6d53edf97f83e7927"}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d000700000011ff00000000000000000000000000000000000000070000000000000000000000014f194e2000"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x186, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0xfe, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef1a281b7b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x28}, [@mdlm_detail={0xed, 0x24, 0x13, 0x1, "b341959165db3eb23f78464bb7a5170e571f75340a1af2ed5d4564a33d77469bd78279406fecd1a418aaebd80fd0b658492a0bfdcf252a3e597f5d63c47652b4fecdad7ce8a819a62008779cf46ba8c4719af81c17094e4982567917fd54e40087bd80291582e59b2a4e4b67342fe94455aa523da21aee891017bfd450cbd16ad9a303f0b3b820041cacb95d87683e257b867147d993098072ecdc3d9a13a5f14b59a29fd1a011b34b5057988fa6f670a234a83998d721d09eaad3508cd2aa4248428e3b1f40e543c04c9d8643e155a973a104ab52b47b2b89ff4a73fd306fcbf8d13b503825a4979b"}, @country_functional={0xa, 0x24, 0x7, 0x54, 0x938f, [0x0, 0x0]}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x76}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x8, 0xb4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x47, 0x6, 0x9, 0x20, 0x71}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x1, 0xeb4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3c3e6990d31b33051f14f982d41a89d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0xb02}, @ptm_cap={0x3}]}, 0x4, [{0x7a, &(0x7f0000000600)=@lang_id={0x0, 0x3, 0x400a}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "f07ba636908de209f65bdfb257802081078d2c9dd948c97e1d1b0d1fb614a49c3fb6d24f310a68f1fe5a71c9dd4b6402b72a67007bab95555d8a100500ff061285be40081cb510065ae8f78807e8adf1659cfe7e4fbdc10dd31047d7b0257fa04299d97d0b8ef05c7f4ed49368d08b62f64f2c47bc8d82e4cd285f05023ab82b56cb8b3001307d83a4ab91bafc609b927d90956e0b85eb7f4a9170817e4b12ce735deb5b16e805de75b103fa212ef468dbdeee509abd6c1abffd7019b32f2b7ce7d191e0b820191596172c1c5ffba275b67761c814758eb9e06f5419fc3ebc53326cf85bcfd1e3f5"}}, {0x8a, &(0x7f0000000780)=@string={0x8a, 0x3, "4e4d619a1c8f2b01c76fe57df5ad59f17a6eea5eb54a1095a35a11f0a8cf6589b26e1ab6f73ea35d64a226163d3d1b543ee09ad7661dcac81b1e86943bf7bca3bfdda2ae4a2412f627ed7e2b43ad51174ddf3820b594b702e85102a6c7e3c2bea29a9db933904ec11029864ae2f22c4153c051d9accbf40a2cbfed91e2ae9ca7fd9a6408b827e0f5"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c00}}]}) 2.849994061s ago: executing program 4 (id=35): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x2000000, 0x80, 0x3000006}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(aegis128))\x00'}, 0x58) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x2d, 0x4}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.706137876s ago: executing program 2 (id=36): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000400)=""/132, 0x84) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 2.680029686s ago: executing program 1 (id=37): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x2000051e2, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 2.638274781s ago: executing program 0 (id=38): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0xe}, {0x18, 0x110, 0xe, "11"}], 0x28}, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf}, 0xa) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa00000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x57a, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x41a) 275.132759ms ago: executing program 4 (id=39): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x401}}}, 0x7) 81.328828ms ago: executing program 0 (id=40): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0xe}, {0x18, 0x110, 0xe, "11"}], 0x28}, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf}, 0xa) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa00000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x57a, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x41a) 0s ago: executing program 2 (id=41): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x686, &(0x7f0000001240)="$eJzs3ctvXFcdB/DvnYwnmVBSt03aFFVK1EiAiEjsWCmYTQNCKIsKVWXB2kqcxMokLY6L3ApR8952kT+gLLJjgZDYR5QNG9h162UlBJuuzGrQvXNnPPFznNfY6ecTXd9z59xzzu/85j5mPLEmwJfW5bNp3k+Ry2ffWi63V+/NdFbvzdzql5McTtJImkOtup8ml9Jb8mqSoq4othvn7sLsO599sfp5b6tZL9X+jZ3ajWalXnI6yaF6/bj6u7Jbf0d2664YzLBM2Jl+4mDcJsqzufKfu71HfvaP5wY1Q9pbtd71yAcOgKJ339xkMjlan+jl64DeXbF3zz7QVsYdAAAAADwFz69lLcs5Nu44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CCpv/+/qJdGv3w6Rf39/0WrfqzUGnO4m53a2+73n1QcAAAAAAAAAPAUnVrLWpZzrL/dLarP/F+vNo5XP7+S93Mn81nMuSxnLktZymKmk0wOddRanltaWpwetOz/z4DNLS9s2fLCLoEertftxzFrAAAAAAAAAHjm/DqX1z//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/aBIDvVW1XK8X55Mo5nkSJJWud9K8q9++SC7P+4AAAAA4BF0R9zv+bWsZTnHBu2K6j3/y9X7/iN5P7ezlIUspZP5XK1+F9B7199YvTfTWb03c6tcNvf7/f/uKdyqx/R+97D1yCerPdq5loXqkXO5kndTFFfTqFqWTvbj2TquX5UxFW/2TIwY2dV6Xc7843q9yUd7mux29vjLlMkqIxODjEzVsZXZeGHnTOzx2dk40nQag2CPbxhpwyQeyPmbI453tF6X8/n9djkfi42ZuDB09L28c86Tb/z1Tz+90bl988a1O2f3z5RGc6he964r7c2ZmBnKxCvPciY2maoycWKwfTk/yk9yNqfzdhazkJ9nLkuZz+n8sCrN1cdzMXTKb5OpSw9svb1bJK36CO09WQ/GlF1ier1qeywL+XHezdXM543q34VM5zu5mIuZHXqGT4xwpW1sc9Z3v7pl8Ge+WRfaSf5QryvXmxt2LVZ2y8TjVeb1haG8Dl9zJ6u64UfWs/TiHu5H/Sz9eedQml+rC+UYv6nX+8PGTEwPZeKlnTPxx+qycqdz++bijbn3RhvuxY/rQnke/W5f3SXK4+XF8smqth48Osq6l+q6iWpZz1er/sSl166xqe7EoK53pq5se6a26tdwm3u6UNW9smXdTFV3cqhu4+utzuD10LPw4Q/AM+vot4622v9u/7P9Sfu37Rvtt4784PB3D7/WysTfJ77XnDr09cZrxV/ySX65/v4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4eHc++PDmXKczv7ih0O12P9qm6iAX+l9n9hQHffW5ZFxTbiXZH5n/X7fbrR8p9kM8Oxe6pcPpPmTzvyUZbedmkq2qTj1E8EUeaxLGfGECnrjzS7feO3/ngw+/vXBr7vr89fnbsxcvzk7NXnxj5vy1hc78VO/nuKMEnoT1m/6IDbr75+s2AQAAAAAAAAAA4MvqUf9UIJO7/4XJ9qMfeZpTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6oy2fTvJ8i01Pnpsrt1XsznXLpl9f3bCZpJCl+kRSfJpfSWzI51F2x3Th3F2bf+eyL1c/X+2r292/s1G40K/WS00kO1evH1d+VR+6vGMywTNiZfuJg3P4fAAD//1RuAhY=") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x7f, 0x7, 0xfffffffe, 0x0, 0x2, 0x2000000, 0x80, 0x3000006}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(echainiv(aegis128))\x00'}, 0x58) dup(r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x2d, 0x4}, &(0x7f0000000100)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) bind$bt_hci(r4, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 84.643677][ T5830] cgroup: Unknown subsys name 'net' [ 84.803638][ T5830] cgroup: Unknown subsys name 'cpuset' [ 84.813354][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.453315][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.315905][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.325417][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.333179][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.341333][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.360131][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.446228][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.454053][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.462815][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.499872][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.519715][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.530575][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.538707][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.569573][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.590272][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.595835][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.606380][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.613684][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.617271][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.623866][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.627780][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.635480][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.643258][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.651111][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.656006][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.664198][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.679358][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.688845][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.711188][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.719315][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.727152][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.137916][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.483699][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.491694][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.499070][ T5846] bridge_slave_0: entered allmulticast mode [ 90.506775][ T5846] bridge_slave_0: entered promiscuous mode [ 90.599009][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.606255][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.613760][ T5846] bridge_slave_1: entered allmulticast mode [ 90.621759][ T5846] bridge_slave_1: entered promiscuous mode [ 90.628891][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.732237][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.752176][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 90.779176][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.826918][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.902734][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 91.011973][ T5846] team0: Port device team_slave_0 added [ 91.021144][ T5846] team0: Port device team_slave_1 added [ 91.114660][ T43] cfg80211: failed to load regulatory.db [ 91.121497][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 91.222976][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.230606][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.237733][ T5851] bridge_slave_0: entered allmulticast mode [ 91.245786][ T5851] bridge_slave_0: entered promiscuous mode [ 91.254216][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.261194][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.287150][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.370703][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.377848][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.385385][ T5851] bridge_slave_1: entered allmulticast mode [ 91.393457][ T5851] bridge_slave_1: entered promiscuous mode [ 91.417561][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.424577][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.430081][ T5856] Bluetooth: hci0: command tx timeout [ 91.450673][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.467395][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.476787][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.484227][ T5852] bridge_slave_0: entered allmulticast mode [ 91.492370][ T5852] bridge_slave_0: entered promiscuous mode [ 91.500640][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.507766][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.514971][ T5852] bridge_slave_1: entered allmulticast mode [ 91.522782][ T5852] bridge_slave_1: entered promiscuous mode [ 91.565230][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.572617][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.579994][ T5861] bridge_slave_0: entered allmulticast mode [ 91.587414][ T5861] bridge_slave_0: entered promiscuous mode [ 91.619186][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.649334][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.656574][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.664091][ T5850] bridge_slave_0: entered allmulticast mode [ 91.672417][ T5850] bridge_slave_0: entered promiscuous mode [ 91.680943][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.688086][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.695441][ T5850] bridge_slave_1: entered allmulticast mode [ 91.702915][ T5850] bridge_slave_1: entered promiscuous mode [ 91.709992][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.717114][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.724585][ T5861] bridge_slave_1: entered allmulticast mode [ 91.732714][ T5861] bridge_slave_1: entered promiscuous mode [ 91.741948][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.751385][ T5856] Bluetooth: hci5: command tx timeout [ 91.751407][ T5860] Bluetooth: hci4: command tx timeout [ 91.751434][ T5864] Bluetooth: hci1: command tx timeout [ 91.762627][ T5860] Bluetooth: hci2: command tx timeout [ 91.762748][ T5860] Bluetooth: hci3: command tx timeout [ 91.878266][ T5851] team0: Port device team_slave_0 added [ 91.903619][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.917131][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.943625][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.956904][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.982959][ T5851] team0: Port device team_slave_1 added [ 91.992544][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.077833][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.094565][ T5846] hsr_slave_0: entered promiscuous mode [ 92.101156][ T5846] hsr_slave_1: entered promiscuous mode [ 92.123172][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.134249][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.141661][ T5859] bridge_slave_0: entered allmulticast mode [ 92.149067][ T5859] bridge_slave_0: entered promiscuous mode [ 92.174544][ T5850] team0: Port device team_slave_0 added [ 92.197139][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.204123][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.230287][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.261693][ T5852] team0: Port device team_slave_0 added [ 92.267927][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.275555][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.283069][ T5859] bridge_slave_1: entered allmulticast mode [ 92.290813][ T5859] bridge_slave_1: entered promiscuous mode [ 92.299106][ T5850] team0: Port device team_slave_1 added [ 92.315059][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.322295][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.348295][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.403436][ T5852] team0: Port device team_slave_1 added [ 92.453216][ T5861] team0: Port device team_slave_0 added [ 92.517508][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.546146][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.554337][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.580890][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.608712][ T5861] team0: Port device team_slave_1 added [ 92.639080][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.649264][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.656289][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.682541][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.730764][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.737724][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.764230][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.827182][ T5851] hsr_slave_0: entered promiscuous mode [ 92.834197][ T5851] hsr_slave_1: entered promiscuous mode [ 92.840623][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.848327][ T5851] Cannot create hsr debugfs directory [ 92.872661][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.879796][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.906125][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.934160][ T5859] team0: Port device team_slave_0 added [ 92.943577][ T5859] team0: Port device team_slave_1 added [ 92.966206][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.973538][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.999989][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.012738][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.020911][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.047477][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.165721][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.175862][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.202978][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.284197][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.291421][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.317802][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.370755][ T5852] hsr_slave_0: entered promiscuous mode [ 93.377191][ T5852] hsr_slave_1: entered promiscuous mode [ 93.384707][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.393138][ T5852] Cannot create hsr debugfs directory [ 93.410990][ T5850] hsr_slave_0: entered promiscuous mode [ 93.417401][ T5850] hsr_slave_1: entered promiscuous mode [ 93.424002][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.431652][ T5850] Cannot create hsr debugfs directory [ 93.508857][ T5861] hsr_slave_0: entered promiscuous mode [ 93.509995][ T5856] Bluetooth: hci0: command tx timeout [ 93.517312][ T5861] hsr_slave_1: entered promiscuous mode [ 93.525968][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.533733][ T5861] Cannot create hsr debugfs directory [ 93.589123][ T5859] hsr_slave_0: entered promiscuous mode [ 93.596036][ T5859] hsr_slave_1: entered promiscuous mode [ 93.602586][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.610199][ T5859] Cannot create hsr debugfs directory [ 93.829927][ T5860] Bluetooth: hci4: command tx timeout [ 93.829965][ T5865] Bluetooth: hci1: command tx timeout [ 93.835365][ T5860] Bluetooth: hci2: command tx timeout [ 93.841879][ T5864] Bluetooth: hci5: command tx timeout [ 93.846548][ T5856] Bluetooth: hci3: command tx timeout [ 94.126802][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.172979][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.222262][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.251662][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.311868][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.327824][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.349718][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.364773][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.448927][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.464339][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.511193][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.525473][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.629163][ T5852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.640135][ T5852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.654158][ T5852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.669101][ T5852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.792420][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.822197][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.837633][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.862443][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.875083][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.923486][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.984633][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.036286][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.061365][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.068572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.080297][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.091481][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.118087][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.133775][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.156403][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.166167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.173329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.213421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.220574][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.253865][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.261048][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.295114][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.396323][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.421653][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.433104][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.476778][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.483931][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.493904][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.501069][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.543117][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.550301][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.562242][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.569446][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.590123][ T5856] Bluetooth: hci0: command tx timeout [ 95.742694][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.806200][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.841682][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.910327][ T5856] Bluetooth: hci3: command tx timeout [ 95.915786][ T5856] Bluetooth: hci2: command tx timeout [ 95.921495][ T5864] Bluetooth: hci4: command tx timeout [ 95.921543][ T5864] Bluetooth: hci5: command tx timeout [ 95.921578][ T5864] Bluetooth: hci1: command tx timeout [ 95.922590][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.945085][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.005573][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.012753][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.036569][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.068094][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.098113][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.105310][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.166626][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.187209][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194378][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.452330][ T5851] veth0_vlan: entered promiscuous mode [ 96.485563][ T5846] veth0_vlan: entered promiscuous mode [ 96.524928][ T5851] veth1_vlan: entered promiscuous mode [ 96.586921][ T5846] veth1_vlan: entered promiscuous mode [ 96.672623][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.697254][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.798606][ T5851] veth0_macvtap: entered promiscuous mode [ 96.855440][ T5851] veth1_macvtap: entered promiscuous mode [ 96.905406][ T5846] veth0_macvtap: entered promiscuous mode [ 96.943542][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.973714][ T5846] veth1_macvtap: entered promiscuous mode [ 97.003409][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.082566][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.108179][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.168363][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.205119][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.216981][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228209][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.238711][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.248425][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.281797][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.290852][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.319462][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.328185][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.355219][ T5861] veth0_vlan: entered promiscuous mode [ 97.427057][ T5861] veth1_vlan: entered promiscuous mode [ 97.535925][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.548342][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.607933][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.618338][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.650120][ T5861] veth0_macvtap: entered promiscuous mode [ 97.671203][ T5856] Bluetooth: hci0: command tx timeout [ 97.703640][ T5852] veth0_vlan: entered promiscuous mode [ 97.733039][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.760877][ T5861] veth1_macvtap: entered promiscuous mode [ 97.846006][ T5859] veth0_vlan: entered promiscuous mode [ 97.866790][ T5850] veth0_vlan: entered promiscuous mode [ 97.888525][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.909149][ T5859] veth1_vlan: entered promiscuous mode [ 97.909628][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.932007][ T5852] veth1_vlan: entered promiscuous mode [ 97.944973][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.978875][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.988779][ T5850] veth1_vlan: entered promiscuous mode [ 97.999089][ T5856] Bluetooth: hci2: command tx timeout [ 97.999709][ T5865] Bluetooth: hci1: command tx timeout [ 98.004688][ T5856] Bluetooth: hci5: command tx timeout [ 98.010046][ T5864] Bluetooth: hci4: command tx timeout [ 98.015372][ T5860] Bluetooth: hci3: command tx timeout [ 98.075977][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.090139][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.105577][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.109617][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.118518][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.133755][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.143181][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.181397][ T5850] veth0_macvtap: entered promiscuous mode [ 98.198647][ T5859] veth0_macvtap: entered promiscuous mode [ 98.228967][ T5859] veth1_macvtap: entered promiscuous mode [ 98.270095][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 98.277927][ T5850] veth1_macvtap: entered promiscuous mode [ 98.301878][ T10] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 98.318024][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.328926][ T5989] loop1: detected capacity change from 0 to 16 [ 98.335481][ T10] usb 3-1: Product: syz [ 98.344445][ T10] usb 3-1: Manufacturer: syz [ 98.349069][ T10] usb 3-1: SerialNumber: syz [ 98.354573][ T5852] veth0_macvtap: entered promiscuous mode [ 98.362941][ T5989] erofs (device loop1): mounted with root inode @ nid 36. [ 98.394843][ T10] usb 3-1: config 0 descriptor?? [ 98.417392][ T5852] veth1_macvtap: entered promiscuous mode [ 98.465862][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.500736][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.516320][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.536013][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.617341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.623789][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.650955][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.659074][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.675487][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691261][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.723294][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.746516][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.778815][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.804231][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815928][ T5989] syz.1.2: attempt to access beyond end of device [ 98.815928][ T5989] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 98.831330][ T5989] erofs (device loop1): read error -5 @ 43 of nid 36 [ 98.842086][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 98.844015][ T5989] syz.1.2: attempt to access beyond end of device [ 98.844015][ T5989] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 98.863094][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.873343][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.875120][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.883152][ T5989] erofs (device loop1): read error -5 @ 43 of nid 36 [ 98.898296][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.922591][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.940379][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 98.956600][ T10] usb 3-1: media controller created [ 99.006242][ T5852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009654][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.021360][ T5852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.054083][ T5852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.063253][ T5852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.338079][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.365939][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.414672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.467817][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.506627][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.601085][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 99.601171][ T5987] dtv5100: wlen = 0, aborting. [ 99.613349][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 99.640161][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.648075][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.660837][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 99.706299][ T10] usb 3-1: USB disconnect, device number 2 [ 99.812371][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.822459][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.844146][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.895813][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 99.967108][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.982292][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.992712][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.997253][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.010017][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 100.060294][ T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 100.081718][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.098709][ T24] usb 2-1: Product: syz [ 100.112354][ T24] usb 2-1: Manufacturer: syz [ 100.117091][ T24] usb 2-1: SerialNumber: syz [ 100.124482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.177706][ T24] usb 2-1: config 0 descriptor?? [ 100.305205][ T6001] loop0: detected capacity change from 0 to 2048 [ 100.558873][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.580604][ T6003] loop3: detected capacity change from 0 to 256 [ 100.653025][ T6010] loop4: detected capacity change from 0 to 256 [ 100.676730][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 100.684955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.693583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.949973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.228244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.332310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.425797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.440071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.489986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.494615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.672627][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.049617][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.611856][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 102.619885][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 102.703421][ T5855] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 102.726123][ T24] usb 2-1: media controller created [ 102.733145][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.779495][ T5855] usb 3-1: Product: syz [ 102.783860][ T5855] usb 3-1: Manufacturer: syz [ 102.788467][ T5855] usb 3-1: SerialNumber: syz [ 102.800369][ T6008] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 102.817944][ T5855] usb 3-1: config 0 descriptor?? [ 102.949361][ T6014] dtv5100: wlen = 0, aborting. [ 102.998287][ T6018] loop3: detected capacity change from 0 to 2048 [ 103.011700][ T5855] usb 3-1: can't set config #0, error -71 [ 103.030179][ T6008] EXT4-fs (loop0): Remounting filesystem read-only [ 103.037028][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.125317][ T5855] usb 3-1: USB disconnect, device number 3 [ 103.140184][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 103.147285][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 103.224296][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 103.224598][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.282311][ T24] usb 2-1: USB disconnect, device number 2 [ 103.294693][ T5999] udevd[5999]: failed to send result of seq 11543 to main daemon: Connection refused [ 103.353882][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.390781][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 103.527185][ T6018] evm: overlay not supported [ 103.741644][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.193090][ T6032] loop0: detected capacity change from 0 to 2048 [ 104.230931][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 104.245568][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.264256][ T24] usb 2-1: config 0 has no interface number 0 [ 104.314051][ T6032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.331638][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 104.342938][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.350984][ T24] usb 2-1: Product: syz [ 104.355297][ T24] usb 2-1: Manufacturer: syz [ 104.359927][ T24] usb 2-1: SerialNumber: syz [ 104.368037][ T24] usb 2-1: config 0 descriptor?? [ 104.381960][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.393562][ T24] usb 2-1: selecting invalid altsetting 1 [ 104.399358][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.413658][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.426309][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.436151][ T24] usb 2-1: media controller created [ 104.489540][ T972] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.529147][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.741209][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 104.851720][ T5861] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.861525][ T6043] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 104.932824][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.999109][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.999142][ T972] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 105.053900][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.063208][ T972] usb 3-1: Product: syz [ 105.076510][ T972] usb 3-1: Manufacturer: syz [ 105.084897][ T972] usb 3-1: SerialNumber: syz [ 105.090300][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.129202][ T972] usb 3-1: config 0 descriptor?? [ 105.310002][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 105.397539][ T56] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.558013][ T972] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 106.092124][ T972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.104030][ T972] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 106.109589][ T56] usb 5-1: config 0 has no interface number 0 [ 106.112015][ T972] usb 3-1: media controller created [ 106.153674][ T972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.278347][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 106.292808][ T56] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 106.303323][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 106.312202][ T6020] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 106.319575][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.358752][ T56] usb 5-1: Product: syz [ 106.364677][ T6034] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 106.405494][ T972] zl10353_read_register: readreg error (reg=127, ret==0) [ 106.409411][ T56] usb 5-1: Manufacturer: syz [ 106.429496][ T972] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 106.459520][ T56] usb 5-1: SerialNumber: syz [ 106.465896][ T972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 106.495867][ T56] usb 5-1: config 0 descriptor?? [ 106.545281][ T56] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 106.550098][ T972] usb 3-1: USB disconnect, device number 4 [ 106.564640][ T6023] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 106.606396][ T56] usb 5-1: selecting invalid altsetting 1 [ 106.613394][ T56] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 106.651614][ T56] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.683377][ T6023] EXT4-fs (loop0): Remounting filesystem read-only [ 106.688428][ T56] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 106.726467][ T56] usb 5-1: media controller created [ 106.803135][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.842756][ T972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 106.852812][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.746805][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.939664][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.007131][ T24] usb 2-1: USB disconnect, device number 3 [ 108.159564][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 108.177863][ T5952] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 108.187314][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.214383][ T56] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 108.308394][ T56] zl10353_read_register: readreg error (reg=127, ret==-71) [ 108.325760][ T5952] usb 4-1: Product: syz [ 108.353313][ T5952] usb 4-1: Manufacturer: syz [ 108.357925][ T5952] usb 4-1: SerialNumber: syz [ 108.372322][ T56] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 108.393772][ T6065] loop1: detected capacity change from 0 to 256 [ 108.433282][ T5952] usb 4-1: config 0 descriptor?? [ 108.522026][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.567438][ T6069] loop4: detected capacity change from 0 to 2048 [ 108.570640][ T6071] overlayfs: failed to resolve './file0/../file0': -2 [ 108.592328][ T56] usb 5-1: USB disconnect, device number 2 [ 108.605270][ T6068] loop5: detected capacity change from 0 to 2048 [ 108.993077][ T5952] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 109.076137][ T6068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.583908][ T6069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.849017][ T24] usb 4-1: USB disconnect, device number 2 [ 110.364985][ T6087] loop0: detected capacity change from 0 to 1024 [ 110.520223][ T6086] loop2: detected capacity change from 0 to 2048 [ 111.423357][ T6086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.505467][ T30] audit: type=1800 audit(1752025105.639:2): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 111.542359][ T6098] loop1: detected capacity change from 0 to 1024 [ 111.593198][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.999993][ T6101] loop3: detected capacity change from 0 to 32768 [ 112.020950][ T6101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.28 (6101) [ 112.043753][ T6101] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.053999][ T6101] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 112.062816][ T6101] BTRFS info (device loop3): using free-space-tree [ 112.123238][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.151110][ T6098] hfsplus: xattr searching failed [ 113.156627][ T30] audit: type=1800 audit(1752025107.389:3): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.27" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 113.262547][ T6124] loop0: detected capacity change from 0 to 2048 [ 113.863636][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.943739][ T6133] loop4: detected capacity change from 0 to 256 [ 114.113061][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.974510][ T6141] loop1: detected capacity change from 0 to 256 [ 115.432730][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 115.444225][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 116.038549][ T6078] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 116.127289][ T6078] EXT4-fs (loop0): Remounting filesystem read-only [ 116.877415][ T6153] loop2: detected capacity change from 0 to 1024 [ 116.887562][ T6153] EXT4-fs: Ignoring removed nobh option [ 116.918563][ T5861] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.967759][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.300251][ T6166] loop4: detected capacity change from 0 to 1024 [ 117.332418][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.436758][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.462601][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.713143][ T5934] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.762897][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 117.997294][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 118.016199][ T6175] loop2: detected capacity change from 0 to 2048 [ 118.253717][ T5934] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 118.363814][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.478354][ T5934] usb 2-1: Product: syz [ 118.538543][ T5934] usb 2-1: Manufacturer: syz [ 118.561962][ T56] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.573335][ T5934] usb 2-1: SerialNumber: syz [ 118.579449][ T56] usb 6-1: config 0 has no interface number 0 [ 118.768573][ T5934] usb 2-1: config 0 descriptor?? [ 118.919061][ T6186] loop0: detected capacity change from 0 to 1024 [ 118.955087][ T6186] EXT4-fs: Ignoring removed nobh option [ 119.081176][ T6175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.110072][ T56] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 119.129452][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.152305][ T56] usb 6-1: Product: syz [ 119.164051][ T56] usb 6-1: Manufacturer: syz [ 119.178328][ T6186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.196162][ T56] usb 6-1: SerialNumber: syz [ 119.637027][ T5934] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 119.671869][ T56] usb 6-1: config 0 descriptor?? [ 119.689233][ T56] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 119.719149][ T56] usb 6-1: selecting invalid altsetting 1 [ 119.729273][ T56] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 119.737587][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.766405][ T56] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.778060][ T5934] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 119.828591][ T5934] usb 2-1: media controller created [ 119.838671][ T56] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 119.867021][ T56] usb 6-1: media controller created [ 119.911497][ T6164] ------------[ cut here ]------------ [ 119.917104][ T6164] usb 2-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 119.959216][ T5859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.019304][ T6164] WARNING: CPU: 1 PID: 6164 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 120.028648][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.029125][ T6164] Modules linked in: [ 120.041497][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.5.34 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 120.053342][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.063461][ T6164] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 120.070119][ T6164] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 120.090602][ T6164] RSP: 0018:ffffc9000217f570 EFLAGS: 00010246 [ 120.096692][ T6164] RAX: ce3d88391ab61100 RBX: ffff8880329f1900 RCX: 0000000000080000 [ 120.104746][ T6164] RDX: ffffc9000d57e000 RSI: 0000000000008a66 RDI: 0000000000008a67 [ 120.112779][ T6164] RBP: 1ffff110040d2748 R08: 0000000000000003 R09: 0000000000000004 [ 120.120818][ T6164] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff888020693a40 [ 120.128812][ T6164] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff8880568a7d80 [ 120.137154][ T6164] FS: 00007f7e9338a6c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 120.146419][ T6164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.153324][ T6164] CR2: 000020000001a000 CR3: 000000006fd50000 CR4: 0000000000350ef0 [ 120.161627][ T6164] Call Trace: [ 120.164913][ T6164] [ 120.167865][ T6164] usb_start_wait_urb+0x114/0x4c0 [ 120.173976][ T6164] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 120.180594][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.186257][ T6164] usb_control_msg+0x232/0x3e0 [ 120.191451][ T6164] dtv5100_i2c_msg+0x250/0x330 [ 120.196225][ T6164] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 120.202557][ T6164] __i2c_transfer+0x874/0x2170 [ 120.207325][ T6164] ? stack_depot_save_flags+0x40/0x900 [ 120.213220][ T6164] ? __entry_text_end+0x1020b5/0x1020b9 [ 120.218771][ T6164] ? __pfx___i2c_transfer+0x10/0x10 [ 120.224554][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.230496][ T6164] ? look_up_lock_class+0x74/0x170 [ 120.235620][ T6164] __i2c_smbus_xfer+0xfb0/0x1e50 [ 120.240571][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.246214][ T6164] ? __lock_acquire+0xab9/0xd20 [ 120.251108][ T6164] ? do_raw_spin_lock+0x121/0x290 [ 120.256140][ T6164] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 120.261532][ T6164] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 120.267443][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.273100][ T6164] ? __entry_text_end+0xfdfb5/0x1020b9 [ 120.279181][ T6164] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 120.285620][ T6164] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.291990][ T6164] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 120.297367][ T6164] i2c_smbus_xfer+0x275/0x3c0 [ 120.302078][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.307712][ T6164] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 120.312969][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.318598][ T6164] ? __lock_acquire+0xab9/0xd20 [ 120.323484][ T6164] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 120.328519][ T6164] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 120.334103][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.339798][ T6164] i2cdev_ioctl+0x5d3/0x7f0 [ 120.344305][ T6164] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.349331][ T6164] ? __fget_files+0x2a/0x420 [ 120.353960][ T6164] ? __fget_files+0x3a0/0x420 [ 120.358641][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.364290][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.370033][ T6164] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.375073][ T6164] __se_sys_ioctl+0xfc/0x170 [ 120.380306][ T6164] do_syscall_64+0xfa/0x3b0 [ 120.384810][ T6164] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.390500][ T6164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.396563][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.402230][ T6164] ? exc_page_fault+0x9f/0xf0 [ 120.406918][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.412846][ T6164] RIP: 0033:0x7f7e9258e929 [ 120.417259][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.436881][ T6164] RSP: 002b:00007f7e9338a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.445320][ T6164] RAX: ffffffffffffffda RBX: 00007f7e927b5fa0 RCX: 00007f7e9258e929 [ 120.453327][ T6164] RDX: 0000200000000340 RSI: 0000000000000720 RDI: 0000000000000004 [ 120.461328][ T6164] RBP: 00007f7e92610b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.469294][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.477358][ T6164] R13: 0000000000000000 R14: 00007f7e927b5fa0 R15: 00007ffd5c0e1348 [ 120.486014][ T6164] [ 120.489033][ T6164] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.496307][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.5.34 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 120.508109][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.518152][ T6164] Call Trace: [ 120.521421][ T6164] [ 120.524364][ T6164] dump_stack_lvl+0x99/0x250 [ 120.528953][ T6164] ? __asan_memcpy+0x40/0x70 [ 120.533537][ T6164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.538732][ T6164] ? __pfx__printk+0x10/0x10 [ 120.543330][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.548960][ T6164] panic+0x2db/0x790 [ 120.552853][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.558486][ T6164] ? __pfx_panic+0x10/0x10 [ 120.562914][ T6164] __warn+0x31b/0x4b0 [ 120.566891][ T6164] ? usb_submit_urb+0x115d/0x1890 [ 120.571961][ T6164] ? usb_submit_urb+0x115d/0x1890 [ 120.576985][ T6164] report_bug+0x2be/0x4f0 [ 120.581322][ T6164] ? usb_submit_urb+0x115d/0x1890 [ 120.586368][ T6164] ? usb_submit_urb+0x115d/0x1890 [ 120.591396][ T6164] ? usb_submit_urb+0x115f/0x1890 [ 120.596421][ T6164] handle_bug+0x84/0x160 [ 120.600658][ T6164] exc_invalid_op+0x1a/0x50 [ 120.605156][ T6164] asm_exc_invalid_op+0x1a/0x20 [ 120.609996][ T6164] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 120.615632][ T6164] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 120.635228][ T6164] RSP: 0018:ffffc9000217f570 EFLAGS: 00010246 [ 120.641288][ T6164] RAX: ce3d88391ab61100 RBX: ffff8880329f1900 RCX: 0000000000080000 [ 120.649252][ T6164] RDX: ffffc9000d57e000 RSI: 0000000000008a66 RDI: 0000000000008a67 [ 120.657211][ T6164] RBP: 1ffff110040d2748 R08: 0000000000000003 R09: 0000000000000004 [ 120.665187][ T6164] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff888020693a40 [ 120.673166][ T6164] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff8880568a7d80 [ 120.681157][ T6164] usb_start_wait_urb+0x114/0x4c0 [ 120.686200][ T6164] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 120.691753][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.697392][ T6164] usb_control_msg+0x232/0x3e0 [ 120.702157][ T6164] dtv5100_i2c_msg+0x250/0x330 [ 120.706927][ T6164] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 120.711789][ T6164] __i2c_transfer+0x874/0x2170 [ 120.716571][ T6164] ? stack_depot_save_flags+0x40/0x900 [ 120.722028][ T6164] ? __entry_text_end+0x1020b5/0x1020b9 [ 120.727579][ T6164] ? __pfx___i2c_transfer+0x10/0x10 [ 120.732774][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.738400][ T6164] ? look_up_lock_class+0x74/0x170 [ 120.743520][ T6164] __i2c_smbus_xfer+0xfb0/0x1e50 [ 120.748448][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.754093][ T6164] ? __lock_acquire+0xab9/0xd20 [ 120.758942][ T6164] ? do_raw_spin_lock+0x121/0x290 [ 120.763967][ T6164] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 120.769336][ T6164] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 120.775235][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.780864][ T6164] ? __entry_text_end+0xfdfb5/0x1020b9 [ 120.786321][ T6164] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 120.792229][ T6164] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.798565][ T6164] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 120.803942][ T6164] i2c_smbus_xfer+0x275/0x3c0 [ 120.808633][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.814263][ T6164] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 120.819461][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.825097][ T6164] ? __lock_acquire+0xab9/0xd20 [ 120.829961][ T6164] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 120.835009][ T6164] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 120.840557][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.846231][ T6164] i2cdev_ioctl+0x5d3/0x7f0 [ 120.850733][ T6164] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.855756][ T6164] ? __fget_files+0x2a/0x420 [ 120.860348][ T6164] ? __fget_files+0x3a0/0x420 [ 120.865043][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.870676][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.876299][ T6164] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 120.881320][ T6164] __se_sys_ioctl+0xfc/0x170 [ 120.885902][ T6164] do_syscall_64+0xfa/0x3b0 [ 120.890405][ T6164] ? lockdep_hardirqs_on+0x9c/0x150 [ 120.895622][ T6164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.901678][ T6164] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.907318][ T6164] ? exc_page_fault+0x9f/0xf0 [ 120.911995][ T6164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.917875][ T6164] RIP: 0033:0x7f7e9258e929 [ 120.922279][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.941871][ T6164] RSP: 002b:00007f7e9338a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.950278][ T6164] RAX: ffffffffffffffda RBX: 00007f7e927b5fa0 RCX: 00007f7e9258e929 [ 120.958239][ T6164] RDX: 0000200000000340 RSI: 0000000000000720 RDI: 0000000000000004 [ 120.966200][ T6164] RBP: 00007f7e92610b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.974162][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.982123][ T6164] R13: 0000000000000000 R14: 00007f7e927b5fa0 R15: 00007ffd5c0e1348 [ 120.990102][ T6164] [ 120.993313][ T6164] Kernel Offset: disabled [ 120.997635][ T6164] Rebooting in 86400 seconds..