last executing test programs: 18.005975763s ago: executing program 1 (id=162): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000880)={0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$media(0x0, 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp(r0, r0, 0x5, r2, r2) 16.787775785s ago: executing program 1 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 14.508488988s ago: executing program 2 (id=171): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 13.463005957s ago: executing program 4 (id=173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700"], 0x0, 0x8001, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000240)='H', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 13.286982433s ago: executing program 0 (id=174): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x401}}}, 0x7) 13.250415625s ago: executing program 2 (id=176): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2, 0x0, 0x1, {r1, r2/1000+10000}, {0x0, 0xea60}, {0x3, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "b6828178925a2239"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) ppoll(&(0x7f0000000380), 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={[0x3]}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000280)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 9.978130968s ago: executing program 1 (id=178): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-9,shortname=winnt,codepage=1255,utf8=0,check=strict,uni_xlate=0,nonumtail\x000,iocharset=macgreek,uni_xlate=0,rodir,iocharset=iso8859-7,uni_xlate=1,\x00'], 0x1, 0x29b, &(0x7f0000000580)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, 0x0, 0x0) 9.002375762s ago: executing program 4 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r6, &(0x7f00000133c0)=""/4090, 0xffa) 8.880679941s ago: executing program 0 (id=180): socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 8.69865328s ago: executing program 2 (id=182): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x0) getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d000700000011ff00000000000000000000000000000000000000070000000000000000000000014f194e2000"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x186, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0xfe, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef1a281b7b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x28}, [@mdlm_detail={0xed, 0x24, 0x13, 0x1, "b341959165db3eb23f78464bb7a5170e571f75340a1af2ed5d4564a33d77469bd78279406fecd1a418aaebd80fd0b658492a0bfdcf252a3e597f5d63c47652b4fecdad7ce8a819a62008779cf46ba8c4719af81c17094e4982567917fd54e40087bd80291582e59b2a4e4b67342fe94455aa523da21aee891017bfd450cbd16ad9a303f0b3b820041cacb95d87683e257b867147d993098072ecdc3d9a13a5f14b59a29fd1a011b34b5057988fa6f670a234a83998d721d09eaad3508cd2aa4248428e3b1f40e543c04c9d8643e155a973a104ab52b47b2b89ff4a73fd306fcbf8d13b503825a4979b"}, @country_functional={0xa, 0x24, 0x7, 0x54, 0x938f, [0x0, 0x0]}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x76}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x8, 0xb4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x47, 0x6, 0x9, 0x20, 0x71}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x1, 0xeb4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3c3e6990d31b33051f14f982d41a89d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0xb02}, @ptm_cap={0x3}]}, 0x4, [{0x7a, &(0x7f0000000600)=@lang_id={0x0, 0x3, 0x400a}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "f07ba636908de209f65bdfb257802081078d2c9dd948c97e1d1b0d1fb614a49c3fb6d24f310a68f1fe5a71c9dd4b6402b72a67007bab95555d8a100500ff061285be40081cb510065ae8f78807e8adf1659cfe7e4fbdc10dd31047d7b0257fa04299d97d0b8ef05c7f4ed49368d08b62f64f2c47bc8d82e4cd285f05023ab82b56cb8b3001307d83a4ab91bafc609b927d90956e0b85eb7f4a9170817e4b12ce735deb5b16e805de75b103fa212ef468dbdeee509abd6c1abffd7019b32f2b7ce7d191e0b820191596172c1c5ffba275b67761c814758eb9e06f5419fc3ebc53326cf85bcfd1e3f5"}}, {0x8a, &(0x7f0000000780)=@string={0x8a, 0x3, "4e4d619a1c8f2b01c76fe57df5ad59f17a6eea5eb54a1095a35a11f0a8cf6589b26e1ab6f73ea35d64a226163d3d1b543ee09ad7661dcac81b1e86943bf7bca3bfdda2ae4a2412f627ed7e2b43ad51174ddf3820b594b702e85102a6c7e3c2bea29a9db933904ec11029864ae2f22c4153c051d9accbf40a2cbfed91e2ae9ca7fd9a6408b827e0f5"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c00}}]}) 7.996933519s ago: executing program 0 (id=184): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x2000051e2, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 7.825598763s ago: executing program 1 (id=185): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x21, 0x2f1, &(0x7f00000001c0)="$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") bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="820446836f7f3f5fcd4c7580a65bfad4d6d7ca3c48c1044dbc392e4f0ea842f4360d527c9c6037863dba7445238a8aed2f0a3b4c725a2a4fc670f172dd787d5c6145dd0b6ab6155b699dbc3e55c544d9f87345d24659d8c73407b6c88d9e5b903f4e95fe25", 0x65}, {&(0x7f0000000080)="c334be36", 0x4}, {&(0x7f0000000180)="ee91da5276ab5f906d3dc1284326b674856f4c3f85aa110f8b2d19a1750ac799268d3bd3d97328e6969ed413387142d7fa74b6df4de9c22fe64c7e356e834195ddcea7112f82fe838e796e0240da771e7d4742398f2eccd59e07dfeb2ef507f0480357ac984d88e6ba027c4830915dcaa65f72caf3efe443d64416b07a2dc0c60d8e80aedb73fc4d6a1c2ca7007531b0e67ca0b81ce21aad7d7c061a1e", 0x9d}, {&(0x7f0000000240)="d1bbc90f4d8dc264fbc761021c9cbdf8", 0x10}, {&(0x7f0000000280)="a40d762fc2541d53bce1503d340d19393564fad408786b8a5104ce095c71c8dcea9e7eb5c7583c2c4dbd0d7e6a8a8992c9eba46ec774eac7bd89c7ea0ba70cfc26203fe474aff56731846ce6eabd626129347711d180ef20e43369574482fe2cf959eae81e9bbf3eaff65ef43fa2931541626343cd381e09d49b4ebb7a9692722444bf62c261c818d03a92d2aee639ac426ebd5c", 0x94}, {&(0x7f0000000340)="edb90d0fe49f98", 0x7}], 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac141428ac1e00010000000024000000000000000000000007000000440ccb200000040000000aeb4408f250000000d6000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffff44492c03bfc66099669a4cffffac1e000100000000000000000000004ed041b9f9e07fa600000000afd6220d5a560cf5dc8476f2c38254ae579cef70ebaefa715f679579f6c732ebfbd5d9788bf04c485e0529e414e99b82b8e48b64c9350a693fce16264854c0a8cd61c333521b28ccfcd314c7be7350919341345669b5de6bd378d604182b0ca8d12f7cbedc4b4dcf4d469070a8ae0f221ebf654981c56374d501deeef8e99bd34277c32691121a0d3c194d"], 0x80}}, {{&(0x7f0000000500)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000540)="5bd18890f799aca464ca8eb7e820dd97b4b35a81bafc22c494e78db45c0044c907364d8495cc6ce16a8f4e2c4ebeb7457e318889a0162681e4f324d61c00273513bbf41c364d19872cfda2550211ec563c7df906fed8ff356f421a1150d8c7269d21817ef7b4e4d8cf407ab9f25609121d33652a73dffdccb3247adabedfece47fe50ee61d859493595728dba16b4f838f44cbdaa9b07909a1bf04f214e569fad463984d59c0", 0xa6}], 0x1}}], 0x2, 0x48890) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) 6.192505748s ago: executing program 1 (id=187): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f00000005c0)=""/194, 0xc2}], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000078000100ffff0000fdc9df250700000043"], 0x18}, 0x1, 0x5502000000000000}, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 5.040686778s ago: executing program 5 (id=189): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x11, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r5, 0x1, &(0x7f0000000a00)=[0x0]) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000bd6d569c99a28df61801b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.278205604s ago: executing program 3 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r8, &(0x7f00000133c0)=""/4090, 0xffa) 3.923049751s ago: executing program 5 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, 0x0, 0x22044800) 3.922183692s ago: executing program 0 (id=193): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000400)=""/132, 0x84) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 3.9214114s ago: executing program 2 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2020000, &(0x7f00000006c0)=ANY=[@ANYBLOB="96011a352c6032c8ad19494a793bd75f8a506964faf84a5b01f321770756617da463489253f955ec13b5d70e39a95957d530d6c466aa132b44470743cdf0ecbbf94a4eaf91327f3cbe5734f572a92bb701a3af3c1c243c7f75f29b35bc41991c299c451feead4eb3", @ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES64, @ANYBLOB="e308903a4241549a7cc7304d9f3a2bf9c34a6743e142c26f854fa29e154d8514167e832f8c362b85caa2003ed7261273c36ee22a1eaeac258f43266470095b009137513ce52157b1f3552d49b84250ecd24438b7fdcb5d4117c55fbb66a3d66580945a75ec46280e6d570ab190874d75b76c68b8c63a4fa87c7f58cebc4b5c6434420df93e112970204d78d4ce562bd79d1f", @ANYRESDEC]) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 3.711781951s ago: executing program 5 (id=195): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 3.701051264s ago: executing program 4 (id=196): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000400)=""/132, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x9}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x43142, 0x0) 3.686888267s ago: executing program 2 (id=197): socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.595098341s ago: executing program 5 (id=198): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000200)=ANY=[@ANYBLOB='utf8=1,iocharset=iso8859-9,shortname=winnt,codepage=1255,utf8=0,check=strict,uni_xlate=0,nonumtail\x000,iocharset=macgreek,uni_xlate=0,rodir,iocharset=iso8859-7,uni_xlate=1,\x00'], 0x1, 0x29b, &(0x7f0000000580)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f000000"], 0xac}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) write$nci(r2, 0x0, 0x0) 2.784964145s ago: executing program 2 (id=199): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x21, 0x2f1, &(0x7f00000001c0)="$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") bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="820446836f7f3f5fcd4c7580a65bfad4d6d7ca3c48c1044dbc392e4f0ea842f4360d527c9c6037863dba7445238a8aed2f0a3b4c725a2a4fc670f172dd787d5c6145dd0b6ab6155b699dbc3e55c544d9f87345d24659d8c73407b6c88d9e5b903f4e95fe25", 0x65}, {&(0x7f0000000080)="c334be36", 0x4}, {&(0x7f0000000180)="ee91da5276ab5f906d3dc1284326b674856f4c3f85aa110f8b2d19a1750ac799268d3bd3d97328e6969ed413387142d7fa74b6df4de9c22fe64c7e356e834195ddcea7112f82fe838e796e0240da771e7d4742398f2eccd59e07dfeb2ef507f0480357ac984d88e6ba027c4830915dcaa65f72caf3efe443d64416b07a2dc0c60d8e80aedb73fc4d6a1c2ca7007531b0e67ca0b81ce21aad7d7c061a1e", 0x9d}, {&(0x7f0000000240)="d1bbc90f4d8dc264fbc761021c9cbdf8", 0x10}, {&(0x7f0000000280)="a40d762fc2541d53bce1503d340d19393564fad408786b8a5104ce095c71c8dcea9e7eb5c7583c2c4dbd0d7e6a8a8992c9eba46ec774eac7bd89c7ea0ba70cfc26203fe474aff56731846ce6eabd626129347711d180ef20e43369574482fe2cf959eae81e9bbf3eaff65ef43fa2931541626343cd381e09d49b4ebb7a9692722444bf62c261c818d03a92d2aee639ac426ebd5c", 0x94}, {&(0x7f0000000340)="edb90d0fe49f98", 0x7}], 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac141428ac1e00010000000024000000000000000000000007000000440ccb200000040000000aeb4408f250000000d6000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffff44492c03bfc66099669a4cffffac1e000100000000000000000000004ed041b9f9e07fa600000000afd6220d5a560cf5dc8476f2c38254ae579cef70ebaefa715f679579f6c732ebfbd5d9788bf04c485e0529e414e99b82b8e48b64c9350a693fce16264854c0a8cd61c333521b28ccfcd314c7be7350919341345669b5de6bd378d604182b0ca8d12f7cbedc4b4dcf4d469070a8ae0f221ebf654981c56374d501deeef8e99bd34277c32691121a0d3c194d"], 0x80}}, {{&(0x7f0000000500)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000540)="5bd18890f799aca464ca8eb7e820dd97b4b35a81bafc22c494e78db45c0044c907364d8495cc6ce16a8f4e2c4ebeb7457e318889a0162681e4f324d61c00273513bbf41c364d19872cfda2550211ec563c7df906fed8ff356f421a1150d8c7269d21817ef7b4e4d8cf407ab9f25609121d33652a73dffdccb3247adabedfece47fe50ee61d859493595728dba16b4f838f44cbdaa9b07909a1bf04f214e569fad463984d59c0", 0xa6}], 0x1}}], 0x2, 0x48890) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) 2.18764621s ago: executing program 0 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = syz_mount_image$vfat(&(0x7f0000019200), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mkdirat(r0, &(0x7f00000191c0)='./file0\x00', 0x184) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendto$inet(r2, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) 2.045087591s ago: executing program 1 (id=201): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200004) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x2000051e2, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 2.04185831s ago: executing program 4 (id=202): r0 = socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x700) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0xe}, {0x18, 0x110, 0xe, "11"}], 0x28}, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbf}, 0xa) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xa00000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@grpquota}]}, 0x3, 0x57a, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x41a) 1.959933711s ago: executing program 5 (id=203): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 1.867058683s ago: executing program 3 (id=204): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)=0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x11, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) r8 = memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(r5, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000bd6d569c99a28df61801b9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.712732693s ago: executing program 5 (id=205): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x6ea, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x1, &(0x7f0000000000)=0x2000051e2, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x8000, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0xffe0) sendfile(r3, r2, 0x0, 0x578410eb) r5 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="75523e941e7c3eb817d6458eca441e57e65f59e29016768d8e24b4f7314a7e46f589de105a0a541bffcaad7340dcc665876560bdc171b244dfde7324e0a14d8e00dca6410c0d9463ae6565098041d61b4bb085b661cd385e84db1c8fc4b0a33e91e9ebef1255d44ae8e477df2a67f2074dceae4fe2cfa9d4a7cf895e5ab85646f50f22de8a66d67fc9344affe615663e04053306191ae4fdf0cb57357d3b09b1fae143cc13befa49227b9992341cb12fcee4b27069993e91a9b3", 0xba, 0xc804, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x923b, 0xa800, 0x0, 0x0}], 0x1}) 896.145376ms ago: executing program 3 (id=206): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x12, 0x9, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socket$unix(0x1, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 837.162692ms ago: executing program 0 (id=207): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x0) getsockopt$inet_int(r3, 0x0, 0x12, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d000700000011ff00000000000000000000000000000000000000070000000000000000000000014f194e2000"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000004bc0)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x40) syz_usb_connect$cdc_ncm(0x0, 0x186, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x1, 0xfe, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef1a281b7b"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x3, 0xd}, {0x6, 0x24, 0x1a, 0x3, 0x28}, [@mdlm_detail={0xed, 0x24, 0x13, 0x1, "b341959165db3eb23f78464bb7a5170e571f75340a1af2ed5d4564a33d77469bd78279406fecd1a418aaebd80fd0b658492a0bfdcf252a3e597f5d63c47652b4fecdad7ce8a819a62008779cf46ba8c4719af81c17094e4982567917fd54e40087bd80291582e59b2a4e4b67342fe94455aa523da21aee891017bfd450cbd16ad9a303f0b3b820041cacb95d87683e257b867147d993098072ecdc3d9a13a5f14b59a29fd1a011b34b5057988fa6f670a234a83998d721d09eaad3508cd2aa4248428e3b1f40e543c04c9d8643e155a973a104ab52b47b2b89ff4a73fd306fcbf8d13b503825a4979b"}, @country_functional={0xa, 0x24, 0x7, 0x54, 0x938f, [0x0, 0x0]}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x76}, @call_mgmt={0x0, 0x24, 0x1, 0x1, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xf7, 0x8, 0xb4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xff, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xf9, 0x2, 0xfa}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x47, 0x6, 0x9, 0x20, 0x71}, 0x3a, &(0x7f00000005c0)={0x5, 0xf, 0x3a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x1, 0xeb4}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "3c3e6990d31b33051f14f982d41a89d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0xb02}, @ptm_cap={0x3}]}, 0x4, [{0x7a, &(0x7f0000000600)=@lang_id={0x0, 0x3, 0x400a}}, {0xea, &(0x7f0000000900)=@string={0xea, 0x3, "f07ba636908de209f65bdfb257802081078d2c9dd948c97e1d1b0d1fb614a49c3fb6d24f310a68f1fe5a71c9dd4b6402b72a67007bab95555d8a100500ff061285be40081cb510065ae8f78807e8adf1659cfe7e4fbdc10dd31047d7b0257fa04299d97d0b8ef05c7f4ed49368d08b62f64f2c47bc8d82e4cd285f05023ab82b56cb8b3001307d83a4ab91bafc609b927d90956e0b85eb7f4a9170817e4b12ce735deb5b16e805de75b103fa212ef468dbdeee509abd6c1abffd7019b32f2b7ce7d191e0b820191596172c1c5ffba275b67761c814758eb9e06f5419fc3ebc53326cf85bcfd1e3f5"}}, {0x8a, &(0x7f0000000780)=@string={0x8a, 0x3, "4e4d619a1c8f2b01c76fe57df5ad59f17a6eea5eb54a1095a35a11f0a8cf6589b26e1ab6f73ea35d64a226163d3d1b543ee09ad7661dcac81b1e86943bf7bca3bfdda2ae4a2412f627ed7e2b43ad51174ddf3820b594b702e85102a6c7e3c2bea29a9db933904ec11029864ae2f22c4153c051d9accbf40a2cbfed91e2ae9ca7fd9a6408b827e0f5"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1c00}}]}) 749.87625ms ago: executing program 3 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, 0x0, 0x22044800) 660.574485ms ago: executing program 3 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r4, &(0x7f00000133c0)=""/4090, 0xffa) 321.030414ms ago: executing program 3 (id=210): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noinit_itable}, {@abort}, {@resuid}, {@nojournal_checksum}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utime(&(0x7f0000000300)='./bus\x00', &(0x7f0000000c80)={0xba, 0x5}) lseek(r0, 0x4d7f6084, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 285.149467ms ago: executing program 4 (id=211): socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101862, 0x0) dup(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 4 (id=212): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1d9, &(0x7f0000000f00)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x20, 0x2, 0x4}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x20, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x4, @udp='udp:syz0\x00'}}}}, 0x34}}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 84.633490][ T5826] cgroup: Unknown subsys name 'net' [ 84.784291][ T5826] cgroup: Unknown subsys name 'cpuset' [ 84.793565][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.424555][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.081329][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.092691][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.100094][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.108034][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.115843][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.123595][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.123665][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.139164][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.146997][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.165827][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.166289][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.173960][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.182321][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.188370][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.194749][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.202291][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.208950][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.225412][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.243956][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.251286][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.260562][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.267746][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.278553][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.286741][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.294591][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.316715][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.346593][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.355034][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.372068][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.385953][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.114725][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 91.134657][ T10] cfg80211: failed to load regulatory.db [ 91.182076][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.196874][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.429032][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.545379][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.643701][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.663254][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.671108][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.678592][ T5843] bridge_slave_0: entered allmulticast mode [ 91.686698][ T5843] bridge_slave_0: entered promiscuous mode [ 91.695164][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.702587][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.710065][ T5842] bridge_slave_0: entered allmulticast mode [ 91.717457][ T5842] bridge_slave_0: entered promiscuous mode [ 91.725167][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.735609][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.742898][ T5849] bridge_slave_0: entered allmulticast mode [ 91.750937][ T5849] bridge_slave_0: entered promiscuous mode [ 91.786165][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.793929][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.801695][ T5843] bridge_slave_1: entered allmulticast mode [ 91.809152][ T5843] bridge_slave_1: entered promiscuous mode [ 91.816644][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.823925][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.831451][ T5842] bridge_slave_1: entered allmulticast mode [ 91.838860][ T5842] bridge_slave_1: entered promiscuous mode [ 91.845690][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.853133][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.860678][ T5849] bridge_slave_1: entered allmulticast mode [ 91.868153][ T5849] bridge_slave_1: entered promiscuous mode [ 92.028986][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.036558][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.044256][ T5841] bridge_slave_0: entered allmulticast mode [ 92.052296][ T5841] bridge_slave_0: entered promiscuous mode [ 92.107914][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.124754][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.132020][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.139342][ T5844] bridge_slave_0: entered allmulticast mode [ 92.147703][ T5844] bridge_slave_0: entered promiscuous mode [ 92.155573][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.163326][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.170536][ T5841] bridge_slave_1: entered allmulticast mode [ 92.177901][ T5841] bridge_slave_1: entered promiscuous mode [ 92.187629][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.200997][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.214139][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.226486][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.241915][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.249154][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.257317][ T5844] bridge_slave_1: entered allmulticast mode [ 92.264869][ T5844] bridge_slave_1: entered promiscuous mode [ 92.304920][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.330526][ T5855] Bluetooth: hci4: command tx timeout [ 92.330685][ T5846] Bluetooth: hci2: command tx timeout [ 92.336023][ T5856] Bluetooth: hci1: command tx timeout [ 92.346814][ T5159] Bluetooth: hci0: command tx timeout [ 92.409896][ T5855] Bluetooth: hci3: command tx timeout [ 92.430674][ T5843] team0: Port device team_slave_0 added [ 92.468000][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.475306][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.483030][ T5851] bridge_slave_0: entered allmulticast mode [ 92.490169][ T5855] Bluetooth: hci5: command tx timeout [ 92.495734][ T5851] bridge_slave_0: entered promiscuous mode [ 92.503747][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.511215][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.518358][ T5851] bridge_slave_1: entered allmulticast mode [ 92.526168][ T5851] bridge_slave_1: entered promiscuous mode [ 92.550338][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.561934][ T5843] team0: Port device team_slave_1 added [ 92.586784][ T5842] team0: Port device team_slave_0 added [ 92.596679][ T5849] team0: Port device team_slave_0 added [ 92.621191][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.635411][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.678482][ T5842] team0: Port device team_slave_1 added [ 92.701187][ T5849] team0: Port device team_slave_1 added [ 92.724873][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.779394][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.786940][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.817433][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.862387][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.875739][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.906724][ T5844] team0: Port device team_slave_0 added [ 92.916344][ T5841] team0: Port device team_slave_0 added [ 92.923322][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.930853][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.957453][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.970589][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.977532][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.004337][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.048556][ T5844] team0: Port device team_slave_1 added [ 93.070708][ T5841] team0: Port device team_slave_1 added [ 93.115847][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.123262][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.149656][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.165945][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.173234][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.199524][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.212729][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.219732][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.245719][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.301372][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.308356][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.334435][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.347398][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.354722][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.381040][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.417524][ T5851] team0: Port device team_slave_0 added [ 93.427168][ T5851] team0: Port device team_slave_1 added [ 93.450426][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.457419][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.483686][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.496787][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.504153][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.530547][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.662392][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.669382][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.695728][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.743865][ T5849] hsr_slave_0: entered promiscuous mode [ 93.750692][ T5849] hsr_slave_1: entered promiscuous mode [ 93.778879][ T5843] hsr_slave_0: entered promiscuous mode [ 93.785880][ T5843] hsr_slave_1: entered promiscuous mode [ 93.792579][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.800653][ T5843] Cannot create hsr debugfs directory [ 93.808277][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.815465][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.841516][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.873854][ T5841] hsr_slave_0: entered promiscuous mode [ 93.880764][ T5841] hsr_slave_1: entered promiscuous mode [ 93.886960][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.895309][ T5841] Cannot create hsr debugfs directory [ 93.926048][ T5842] hsr_slave_0: entered promiscuous mode [ 93.932664][ T5842] hsr_slave_1: entered promiscuous mode [ 93.938770][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.946947][ T5842] Cannot create hsr debugfs directory [ 93.969795][ T5844] hsr_slave_0: entered promiscuous mode [ 93.976267][ T5844] hsr_slave_1: entered promiscuous mode [ 93.982976][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.990715][ T5844] Cannot create hsr debugfs directory [ 94.238332][ T5851] hsr_slave_0: entered promiscuous mode [ 94.244984][ T5851] hsr_slave_1: entered promiscuous mode [ 94.251737][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.259284][ T5851] Cannot create hsr debugfs directory [ 94.410127][ T5856] Bluetooth: hci4: command tx timeout [ 94.415580][ T5856] Bluetooth: hci1: command tx timeout [ 94.421258][ T5159] Bluetooth: hci0: command tx timeout [ 94.427052][ T5855] Bluetooth: hci2: command tx timeout [ 94.490110][ T5856] Bluetooth: hci3: command tx timeout [ 94.570414][ T5856] Bluetooth: hci5: command tx timeout [ 94.893846][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.910870][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.921850][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.945467][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.993919][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.014687][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.035609][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.046281][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.139240][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.167424][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.179182][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.202577][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.285878][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.296944][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.311614][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.333506][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.484995][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.523083][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.555116][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.566266][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.604747][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.636383][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.684113][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.696201][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.731281][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.748188][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.777035][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.794504][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.842381][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.849573][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.884627][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.891791][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.901806][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.908895][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.924825][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.976793][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.012241][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.019411][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.050553][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.070812][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.118337][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.125494][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.137462][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.144600][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.154425][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.161540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.194289][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.201465][ T4193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.238834][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.395427][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.491344][ T5856] Bluetooth: hci1: command tx timeout [ 96.496793][ T5856] Bluetooth: hci2: command tx timeout [ 96.500174][ T5855] Bluetooth: hci0: command tx timeout [ 96.502321][ T5159] Bluetooth: hci4: command tx timeout [ 96.560604][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.579827][ T5159] Bluetooth: hci3: command tx timeout [ 96.596016][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.650101][ T5159] Bluetooth: hci5: command tx timeout [ 96.651587][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.662743][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.736805][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.776518][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.784354][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.854688][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.861917][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.917428][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.924619][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.048759][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.066648][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.159632][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.192393][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.356809][ T5841] veth0_vlan: entered promiscuous mode [ 97.449049][ T5841] veth1_vlan: entered promiscuous mode [ 97.499495][ T5849] veth0_vlan: entered promiscuous mode [ 97.544841][ T5843] veth0_vlan: entered promiscuous mode [ 97.593513][ T5849] veth1_vlan: entered promiscuous mode [ 97.626686][ T5843] veth1_vlan: entered promiscuous mode [ 97.739277][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.778780][ T5849] veth0_macvtap: entered promiscuous mode [ 97.795907][ T5841] veth0_macvtap: entered promiscuous mode [ 97.818486][ T5849] veth1_macvtap: entered promiscuous mode [ 97.855960][ T5841] veth1_macvtap: entered promiscuous mode [ 97.888027][ T5843] veth0_macvtap: entered promiscuous mode [ 97.913843][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.955026][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.977604][ T5843] veth1_macvtap: entered promiscuous mode [ 97.989507][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.021662][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.058881][ T5842] veth0_vlan: entered promiscuous mode [ 98.087317][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.097712][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.107580][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.117213][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.126484][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.158852][ T5844] veth0_vlan: entered promiscuous mode [ 98.182705][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.192093][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206290][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.215290][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.238022][ T5844] veth1_vlan: entered promiscuous mode [ 98.250958][ T5842] veth1_vlan: entered promiscuous mode [ 98.275260][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.317398][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.362944][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.374809][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.384074][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.393022][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.523594][ T5842] veth0_macvtap: entered promiscuous mode [ 98.540328][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.548219][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.552387][ T5844] veth0_macvtap: entered promiscuous mode [ 98.570352][ T5159] Bluetooth: hci4: command tx timeout [ 98.575953][ T5856] Bluetooth: hci2: command tx timeout [ 98.580051][ T5855] Bluetooth: hci0: command tx timeout [ 98.581416][ T5856] Bluetooth: hci1: command tx timeout [ 98.589248][ T5842] veth1_macvtap: entered promiscuous mode [ 98.624975][ T5844] veth1_macvtap: entered promiscuous mode [ 98.650046][ T5856] Bluetooth: hci3: command tx timeout [ 98.699204][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.724639][ T5851] veth0_vlan: entered promiscuous mode [ 98.730976][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.740871][ T5856] Bluetooth: hci5: command tx timeout [ 98.752765][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.774512][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.785639][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.814094][ T5851] veth1_vlan: entered promiscuous mode [ 98.830781][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.831956][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.858417][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.899464][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.908844][ T5842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.923589][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.932137][ T5842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.942029][ T5842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.951100][ T5842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.966583][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.976741][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985755][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.994592][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.024689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.051084][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.071572][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.102146][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.112033][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.194158][ T5851] veth0_macvtap: entered promiscuous mode [ 99.254843][ T5851] veth1_macvtap: entered promiscuous mode [ 99.476734][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.505613][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.529217][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.566141][ T5991] loop2: detected capacity change from 0 to 2048 [ 99.652776][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.684000][ T5991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.766027][ T5995] loop0: detected capacity change from 0 to 1024 [ 99.789176][ T5995] EXT4-fs: Ignoring removed nobh option [ 99.937918][ T5995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.949478][ T5991] evm: overlay not supported [ 100.117912][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.219917][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.228720][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.289772][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.490028][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.545539][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.550216][ T5209] udevd[5209]: worker [5911] terminated by signal 33 (Unknown signal 33) [ 100.593385][ T5209] udevd[5209]: worker [5911] failed while handling '/devices/virtual/block/loop0' [ 100.683724][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.716968][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.719883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.829886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 100.890956][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.250341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.520609][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.575568][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.641345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.970132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.197359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.313738][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.330991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.339283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.348560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.408368][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.484911][ T6026] loop1: detected capacity change from 0 to 2048 [ 103.507982][ T6028] loop3: detected capacity change from 0 to 16 [ 103.548525][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.592937][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.606971][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.640602][ T6028] erofs (device loop3): mounted with root inode @ nid 36. [ 103.959943][ T6034] loop5: detected capacity change from 0 to 2048 [ 104.040614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.378580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.729172][ T6034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.201539][ T6045] loop2: detected capacity change from 0 to 1024 [ 105.413023][ T6045] EXT4-fs: Ignoring removed nobh option [ 105.483602][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.273535][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.355533][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.383374][ T6058] loop4: detected capacity change from 0 to 256 [ 106.465946][ T6060] loop3: detected capacity change from 0 to 256 [ 106.508109][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.322361][ T6064] loop1: detected capacity change from 0 to 512 [ 107.331941][ T6064] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.343669][ T6064] EXT4-fs (loop1): invalid journal inode [ 107.349413][ T6064] EXT4-fs (loop1): can't get journal size [ 107.555744][ T6068] loop5: detected capacity change from 0 to 32768 [ 107.578631][ T6068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.21 (6068) [ 107.604523][ T6068] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.617475][ T6068] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 107.627929][ T6068] BTRFS info (device loop5): using free-space-tree [ 107.645515][ T6064] EXT4-fs (loop1): 1 truncate cleaned up [ 107.652870][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.723251][ T6066] loop2: detected capacity change from 0 to 16 [ 107.792844][ T6066] erofs (device loop2): mounted with root inode @ nid 36. [ 107.882713][ T6066] tipc: Enabling of bearer rejected, failed to enable media [ 108.187346][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.488533][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 109.497917][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 109.520070][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 109.543328][ T6102] overlayfs: failed to resolve './file0/../file0': -2 [ 109.551738][ T5842] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.043147][ T6104] loop3: detected capacity change from 0 to 64 [ 110.272509][ T6104] hfs: bad catalog namelength [ 110.309859][ T6104] hfs: get root inode failed [ 110.571843][ T6111] loop2: detected capacity change from 0 to 1024 [ 110.599931][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.153938][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 111.444836][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.462302][ T5845] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.475556][ T5845] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.499793][ T5845] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.519805][ T5845] usb 4-1: Manufacturer: syz [ 111.545446][ T5845] usb 4-1: config 0 descriptor?? [ 112.048457][ T6125] loop1: detected capacity change from 0 to 2048 [ 112.055465][ T6127] loop0: detected capacity change from 0 to 2048 [ 112.402140][ T6125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.417000][ T6127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.915732][ T6130] loop2: detected capacity change from 0 to 1024 [ 112.971469][ T6130] EXT4-fs: Ignoring removed nobh option [ 113.487076][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.537158][ T971] usb 4-1: USB disconnect, device number 2 [ 113.728064][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.742480][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.779890][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.835792][ T6145] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 113.875838][ T6145] overlayfs: failed to look up (file1) for ino (-5) [ 113.921767][ T6147] loop2: detected capacity change from 0 to 64 [ 114.092336][ T6152] loop0: detected capacity change from 0 to 512 [ 114.172883][ T6152] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 114.254309][ T6152] EXT4-fs (loop0): invalid journal inode [ 114.281354][ T6152] EXT4-fs (loop0): can't get journal size [ 115.056316][ T6155] loop3: detected capacity change from 0 to 32768 [ 115.077575][ T6155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.38 (6155) [ 115.096925][ T6152] EXT4-fs (loop0): 1 truncate cleaned up [ 115.105057][ T6155] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.115783][ T6155] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 115.124611][ T6155] BTRFS info (device loop3): using free-space-tree [ 115.143503][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.245952][ T6167] loop5: detected capacity change from 0 to 256 [ 116.035675][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 116.052756][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.765920][ T6164] loop4: detected capacity change from 0 to 1024 [ 116.772979][ T6164] EXT4-fs: Ignoring removed nobh option [ 116.802830][ T6175] loop1: detected capacity change from 0 to 2048 [ 116.811743][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 116.954671][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 116.979137][ T6164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.015553][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.107620][ T5849] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.154100][ T6175] overlayfs: failed to resolve './file1': -2 [ 117.156485][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.304550][ T6204] loop2: detected capacity change from 0 to 64 [ 117.367745][ T6204] hfs: bad catalog namelength [ 117.396957][ T6207] loop5: detected capacity change from 0 to 2048 [ 117.404080][ T6204] hfs: get root inode failed [ 117.488658][ T6207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.604217][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.683285][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.815836][ T6213] loop0: detected capacity change from 0 to 2048 [ 117.920841][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 117.938458][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.981209][ T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 118.039234][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 118.263065][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 118.277183][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.279756][ T43] usb 3-1: Manufacturer: syz [ 118.363629][ T43] usb 3-1: config 0 descriptor?? [ 118.382760][ T43] usb 3-1: can't set config #0, error -71 [ 118.453266][ T43] usb 3-1: USB disconnect, device number 2 [ 119.266134][ T6225] loop1: detected capacity change from 0 to 1024 [ 119.278930][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.310583][ T6225] EXT4-fs: Ignoring removed nobh option [ 119.344155][ T6225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.385149][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.581077][ T6233] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.926826][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.385512][ T6215] loop3: detected capacity change from 0 to 32768 [ 120.405701][ T6215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.44 (6215) [ 120.517038][ T6215] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.543732][ T6215] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 120.592248][ T6215] BTRFS info (device loop3): disk space caching is enabled [ 120.599610][ T6215] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 120.665420][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 120.667540][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 120.698612][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 120.859956][ T6245] loop4: detected capacity change from 0 to 32768 [ 120.885649][ T6245] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.56 (6245) [ 120.967481][ T6245] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.979871][ T6245] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 120.994962][ T6245] BTRFS info (device loop4): using free-space-tree [ 121.014946][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 121.046324][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 121.094442][ T6262] loop2: detected capacity change from 0 to 1024 [ 121.110795][ T6262] EXT4-fs: Ignoring removed nobh option [ 121.126888][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 121.127152][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 121.176115][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 121.251217][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.59'. [ 121.269486][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 121.275698][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.307996][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.59'. [ 121.328656][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.59'. [ 121.353441][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 121.353874][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 121.400695][ T6215] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 121.445651][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.489058][ T6215] BTRFS error (device loop3): open_ctree failed: -12 [ 122.955008][ T6300] loop2: detected capacity change from 0 to 16 [ 122.997374][ T6300] erofs (device loop2): mounted with root inode @ nid 36. [ 123.001893][ T5851] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.054726][ T6300] tipc: Enabling of bearer rejected, failed to enable media [ 124.852465][ T6323] loop5: detected capacity change from 0 to 256 [ 125.105503][ T6324] loop4: detected capacity change from 0 to 2048 [ 125.239939][ T6318] loop1: detected capacity change from 0 to 1024 [ 125.269270][ T6318] EXT4-fs: Ignoring removed nobh option [ 125.372374][ T6324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.435928][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.508028][ T6324] overlayfs: failed to resolve './file1': -2 [ 125.522404][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 125.531375][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 125.546853][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 126.198791][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.489470][ T6341] loop0: detected capacity change from 0 to 32768 [ 126.498123][ T6341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.74 (6341) [ 126.516771][ T6341] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.527114][ T6341] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 126.535963][ T6341] BTRFS info (device loop0): using free-space-tree [ 126.627835][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.655594][ T6353] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 126.899354][ T6343] loop2: detected capacity change from 0 to 32768 [ 126.935734][ T6343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.75 (6343) [ 127.034512][ T6365] loop4: detected capacity change from 0 to 16 [ 127.057983][ T6365] erofs (device loop4): mounted with root inode @ nid 36. [ 127.117199][ T6365] tipc: Enabling of bearer rejected, failed to enable media [ 127.770646][ T6343] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.834632][ T6343] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 127.857863][ T6343] BTRFS info (device loop2): disk space caching is enabled [ 127.896861][ T6343] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 128.177153][ T6343] BTRFS info (device loop2): rebuilding free space tree [ 128.198623][ T5841] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.311914][ T6343] BTRFS info (device loop2): disabling free space tree [ 128.329201][ T6391] loop3: detected capacity change from 0 to 1024 [ 128.374720][ T6343] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.451237][ T6343] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.154971][ T6394] hfsplus: xattr searching failed [ 129.498329][ T30] audit: type=1800 audit(1752024696.881:2): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.81" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 129.671114][ T6343] syz.2.75 (6343) used greatest stack depth: 19520 bytes left [ 129.734135][ T5843] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.584865][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.87'. [ 131.609510][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.87'. [ 131.915023][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.87'. [ 131.923313][ T6426] loop3: detected capacity change from 0 to 64 [ 132.144739][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.160529][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.217264][ T6430] loop0: detected capacity change from 0 to 2048 [ 132.231778][ T6424] loop4: detected capacity change from 0 to 1024 [ 132.253079][ T6426] hfs: bad catalog namelength [ 132.257793][ T6426] hfs: get root inode failed [ 132.269304][ T6424] EXT4-fs: Ignoring removed nobh option [ 132.300951][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.318130][ T6430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.375839][ T6430] overlayfs: failed to resolve './file1': -2 [ 132.873022][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.912495][ T6437] loop2: detected capacity change from 0 to 16 [ 132.938457][ T6437] erofs (device loop2): mounted with root inode @ nid 36. [ 132.991019][ T6437] tipc: Enabling of bearer rejected, failed to enable media [ 133.012375][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.033761][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 133.042949][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.060401][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.060459][ T6443] loop1: detected capacity change from 0 to 64 [ 133.077613][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.109748][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.132122][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.168330][ T5945] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.193565][ T5945] usb 4-1: Manufacturer: syz [ 133.214580][ T5945] usb 4-1: config 0 descriptor?? [ 133.334786][ T6445] loop2: detected capacity change from 0 to 2048 [ 133.961716][ T6445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.103791][ T6455] loop0: detected capacity change from 0 to 1024 [ 134.816932][ T6459] hfsplus: can't free extent [ 135.010099][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.192311][ T43] usb 4-1: USB disconnect, device number 3 [ 136.787077][ T6481] loop2: detected capacity change from 0 to 2048 [ 136.836649][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 136.848013][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 136.872136][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 136.897971][ T6453] loop4: detected capacity change from 0 to 32768 [ 136.908875][ T6453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.94 (6453) [ 136.936752][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.604598][ T6494] loop3: detected capacity change from 0 to 2048 [ 138.836132][ T6496] loop1: detected capacity change from 0 to 1024 [ 138.847400][ T6496] EXT4-fs: Ignoring removed nobh option [ 138.948197][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.978337][ T6494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.012235][ T6496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.156282][ T6505] loop5: detected capacity change from 0 to 2048 [ 139.301539][ T6505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.430872][ T6511] loop4: detected capacity change from 0 to 2048 [ 139.433037][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.808144][ T6435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 141.922710][ T6511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.041266][ T6435] EXT4-fs (loop5): Remounting filesystem read-only [ 142.241660][ T6435] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 142.272593][ T6519] loop0: detected capacity change from 0 to 1024 [ 142.414586][ T6435] EXT4-fs (loop3): Remounting filesystem read-only [ 143.014143][ T6527] hfsplus: xattr searching failed [ 143.159949][ T30] audit: type=1800 audit(1752024710.541:3): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.112" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 143.183301][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.716195][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.974860][ T6537] loop5: detected capacity change from 0 to 64 [ 144.014611][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 144.055338][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 144.075343][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 145.730178][ T6555] loop0: detected capacity change from 0 to 256 [ 146.912309][ T6564] loop1: detected capacity change from 0 to 1024 [ 147.938646][ T6564] EXT4-fs: Ignoring removed nobh option [ 148.181319][ T6563] loop4: detected capacity change from 0 to 1024 [ 148.270269][ T6563] EXT4-fs: Ignoring removed nobh option [ 148.295435][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.448159][ T6579] loop2: detected capacity change from 0 to 256 [ 148.500140][ T6563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.544583][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.428634][ T6582] loop0: detected capacity change from 0 to 64 [ 149.458621][ T6582] hfs: bad catalog namelength [ 149.469088][ T6582] hfs: get root inode failed [ 149.695415][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.698901][ T6584] loop1: detected capacity change from 0 to 2048 [ 149.758736][ T6584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.799781][ T5945] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.819288][ T6590] loop2: detected capacity change from 0 to 1024 [ 149.949738][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 150.247680][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.296821][ T974] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.345473][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.418983][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.539751][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 150.680654][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.724090][ T974] usb 4-1: device descriptor read/all, error -71 [ 150.755261][ T5945] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.775824][ T5945] usb 1-1: Manufacturer: syz [ 150.807020][ T5945] usb 1-1: config 0 descriptor?? [ 150.997137][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.031296][ T6601] loop2: detected capacity change from 0 to 64 [ 153.250240][ T5845] usb 1-1: USB disconnect, device number 2 [ 153.904445][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 154.165505][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 154.242556][ T6620] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.013610][ T974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.020478][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 155.230124][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 155.246023][ T974] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.290363][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.292999][ T974] usb 6-1: config 0 has no interface number 0 [ 155.377268][ T974] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 155.642621][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.652866][ T974] usb 6-1: Product: syz [ 155.657230][ T974] usb 6-1: Manufacturer: syz [ 155.661995][ T974] usb 6-1: SerialNumber: syz [ 155.680019][ T974] usb 6-1: config 0 descriptor?? [ 155.796119][ T974] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 155.877358][ T974] usb 6-1: selecting invalid altsetting 1 [ 155.894667][ T6625] loop1: detected capacity change from 0 to 256 [ 156.334871][ T974] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 156.356078][ T6631] syz.5.137 uses obsolete (PF_INET,SOCK_PACKET) [ 156.487294][ T974] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.497901][ T974] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 156.506934][ T974] usb 6-1: media controller created [ 156.532967][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.563215][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.575764][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.766244][ T6637] loop4: detected capacity change from 0 to 256 [ 156.845282][ T6641] loop3: detected capacity change from 0 to 1024 [ 157.176764][ T974] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 157.181249][ T6639] loop1: detected capacity change from 0 to 2048 [ 157.829607][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.832929][ T974] zl10353_read_register: readreg error (reg=127, ret==-71) [ 157.850626][ T974] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 157.899620][ T974] usb 6-1: USB disconnect, device number 2 [ 158.292769][ T6658] loop5: detected capacity change from 0 to 2048 [ 158.376676][ T6658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.383792][ T6662] loop3: detected capacity change from 0 to 64 [ 158.551842][ T6664] loop4: detected capacity change from 0 to 64 [ 158.583954][ T974] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.618120][ T6664] hfs: bad catalog namelength [ 158.891748][ T6664] hfs: get root inode failed [ 159.559767][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 159.572229][ T974] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 159.607111][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.634428][ T974] usb 3-1: Product: syz [ 159.653660][ T974] usb 3-1: Manufacturer: syz [ 159.676950][ T974] usb 3-1: SerialNumber: syz [ 159.715067][ T974] usb 3-1: config 0 descriptor?? [ 159.752747][ T974] usb 3-1: can't set config #0, error -71 [ 160.059520][ T6672] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.760949][ T974] usb 3-1: USB disconnect, device number 3 [ 161.205289][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.590874][ T6681] loop4: detected capacity change from 0 to 1024 [ 161.616771][ T6651] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 161.650167][ T6681] EXT4-fs: Ignoring removed nobh option [ 161.683136][ T6651] EXT4-fs (loop1): Remounting filesystem read-only [ 161.728434][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.153'. [ 161.738879][ T6685] loop2: detected capacity change from 0 to 256 [ 161.747623][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.153'. [ 161.760680][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.153'. [ 161.882790][ T6681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.672009][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.098784][ T6705] loop3: detected capacity change from 0 to 256 [ 163.207409][ T5945] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.766026][ T6711] loop2: detected capacity change from 0 to 1024 [ 163.772552][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 163.910061][ T5945] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.107107][ T5945] usb 6-1: config 0 has no interface number 0 [ 164.154853][ T5945] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 164.176195][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.227316][ T5945] usb 6-1: Product: syz [ 164.492217][ T6719] hfsplus: xattr searching failed [ 164.573364][ T5945] usb 6-1: Manufacturer: syz [ 164.667462][ T5945] usb 6-1: SerialNumber: syz [ 164.733867][ T30] audit: type=1800 audit(1752024732.101:4): pid=6719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.161" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 164.755623][ T5945] usb 6-1: config 0 descriptor?? [ 164.766588][ T5945] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 164.775705][ T5945] usb 6-1: selecting invalid altsetting 1 [ 164.781677][ T5945] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 164.794402][ T5945] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.807365][ T5945] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 165.007768][ T6724] loop1: detected capacity change from 0 to 64 [ 165.014288][ T5945] usb 6-1: media controller created [ 165.331051][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.137815][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.142954][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.179552][ T6699] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 166.203003][ T5945] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 166.217533][ T5945] zl10353_read_register: readreg error (reg=127, ret==-32) [ 166.635800][ T6734] loop2: detected capacity change from 0 to 64 [ 166.688755][ T6735] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.724623][ T6734] hfs: bad catalog namelength [ 166.738023][ T6734] hfs: get root inode failed [ 166.864984][ T5945] usb 6-1: USB disconnect, device number 3 [ 167.029866][ T974] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.139922][ T5845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.202548][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 167.242393][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.242584][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.295511][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.339723][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 167.349079][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.353310][ T6743] loop4: detected capacity change from 0 to 2048 [ 167.384273][ T5845] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 167.401421][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.422452][ T974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.428475][ T6743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.442911][ T974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.459784][ T5845] usb 4-1: Product: syz [ 167.469707][ T5845] usb 4-1: Manufacturer: syz [ 167.484624][ T974] usb 3-1: Manufacturer: syz [ 167.489773][ T5845] usb 4-1: SerialNumber: syz [ 167.498927][ T974] usb 3-1: config 0 descriptor?? [ 167.505013][ T5845] usb 4-1: config 0 descriptor?? [ 167.853971][ T5845] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 167.871999][ T10] usb 3-1: USB disconnect, device number 4 [ 167.898221][ T5845] usb 4-1: USB disconnect, device number 6 [ 167.903115][ T6749] loop5: detected capacity change from 0 to 2048 [ 167.934356][ T6741] loop0: detected capacity change from 0 to 32768 [ 167.966304][ T6741] BTRFS: device /dev/loop0 (7:0) using temp-fsid 180f3154-cbb2-4c9a-a873-eabf4de4cfe7 [ 167.977367][ T6741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.167 (6741) [ 168.008686][ T6741] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.009248][ T6749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.032844][ T6741] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 168.073819][ T6741] BTRFS info (device loop0): disk space caching is enabled [ 168.081157][ T6741] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 168.224610][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.297255][ T6741] BTRFS info (device loop0): rebuilding free space tree [ 168.342081][ T6741] BTRFS info (device loop0): disabling free space tree [ 168.355605][ T6741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.366122][ T6741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.487578][ T6769] loop4: detected capacity change from 0 to 256 [ 168.506917][ T30] audit: type=1800 audit(1752024735.891:5): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.167" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 169.042094][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 169.532055][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 169.569907][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 169.771144][ T5841] BTRFS info (device loop0): last unmount of filesystem 180f3154-cbb2-4c9a-a873-eabf4de4cfe7 [ 169.931909][ T6784] loop3: detected capacity change from 0 to 64 [ 172.812278][ T6746] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 172.910948][ T6746] EXT4-fs (loop5): Remounting filesystem read-only [ 173.072335][ T6799] loop3: detected capacity change from 0 to 1024 [ 173.106297][ T6801] loop1: detected capacity change from 0 to 256 [ 173.907119][ T6802] hfsplus: xattr searching failed [ 174.367704][ T30] audit: type=1800 audit(1752024741.751:6): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.177" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 175.019431][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.239768][ T974] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.306406][ T6826] loop1: detected capacity change from 0 to 64 [ 175.340946][ T6826] hfs: bad catalog namelength [ 175.350043][ T5845] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.359407][ T6826] hfs: get root inode failed [ 175.376223][ T6823] loop3: detected capacity change from 0 to 2048 [ 175.420536][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 175.448650][ T6823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.470623][ T974] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.478854][ T974] usb 3-1: config 0 has no interface number 0 [ 175.514581][ T6828] loop5: detected capacity change from 0 to 1024 [ 175.517184][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 175.547026][ T6828] EXT4-fs: Ignoring removed nobh option [ 175.624863][ T974] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.634165][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.690032][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 175.722110][ T974] usb 3-1: Product: syz [ 175.726898][ T974] usb 3-1: Manufacturer: syz [ 175.731776][ T5845] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 175.741078][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.749071][ T5845] usb 1-1: Product: syz [ 175.753554][ T974] usb 3-1: SerialNumber: syz [ 175.768707][ T5845] usb 1-1: Manufacturer: syz [ 175.994225][ T974] usb 3-1: config 0 descriptor?? [ 175.999294][ T5845] usb 1-1: SerialNumber: syz [ 176.009760][ T974] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 176.018617][ T974] usb 3-1: selecting invalid altsetting 1 [ 176.057176][ T5845] usb 1-1: config 0 descriptor?? [ 176.069710][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 176.077452][ T6828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.206155][ T974] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 176.221346][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 176.229104][ T10] usb 2-1: can't read configurations, error -71 [ 176.240550][ T974] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.253745][ T974] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 176.323968][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.378567][ T974] usb 3-1: media controller created [ 176.380291][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.562579][ T5845] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 176.627074][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.635015][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.637739][ T974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.730499][ T5845] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 176.741134][ T5845] usb 1-1: media controller created [ 176.875497][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.906963][ T6840] loop3: detected capacity change from 0 to 256 [ 177.312184][ T6817] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 177.715119][ T5845] zl10353_read_register: readreg error (reg=127, ret==0) [ 177.722547][ T5845] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 177.731932][ T5845] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 177.770840][ T974] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 177.785313][ T974] zl10353_read_register: readreg error (reg=127, ret==-32) [ 177.800515][ T6820] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 177.829070][ T10] usb 1-1: USB disconnect, device number 3 [ 177.904442][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 177.976587][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.004835][ T974] usb 3-1: USB disconnect, device number 5 [ 178.011847][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 178.023340][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 178.034707][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 179.060673][ T6842] loop1: detected capacity change from 0 to 32768 [ 179.116037][ T6842] BTRFS: device /dev/loop1 (7:1) using temp-fsid 54452fed-9dd1-42f4-a077-0408dbfbc664 [ 179.127103][ T6855] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.179973][ T6842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.187 (6842) [ 179.249729][ T6842] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.282130][ T6859] loop0: detected capacity change from 0 to 2048 [ 179.294097][ T6842] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 179.316231][ T6842] BTRFS info (device loop1): disk space caching is enabled [ 179.327069][ T6842] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 179.379995][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.435475][ T6883] loop5: detected capacity change from 0 to 256 [ 179.453678][ T6842] BTRFS info (device loop1): rebuilding free space tree [ 179.469271][ T6884] loop4: detected capacity change from 0 to 2048 [ 179.556674][ T6842] BTRFS info (device loop1): disabling free space tree [ 179.631937][ T6842] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.753881][ T6842] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.208724][ T6884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.241612][ T6891] Zero length message leads to an empty skb [ 180.920965][ T6898] loop2: detected capacity change from 0 to 64 [ 180.952250][ T6898] hfs: bad catalog namelength [ 180.956946][ T6898] hfs: get root inode failed [ 180.983511][ T5844] BTRFS info (device loop1): last unmount of filesystem 54452fed-9dd1-42f4-a077-0408dbfbc664 [ 181.036984][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.091427][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.140205][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 181.160016][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 181.180440][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.203'. [ 181.239759][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 181.265032][ T6902] loop0: detected capacity change from 0 to 256 [ 182.100917][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 182.108331][ T6911] loop4: detected capacity change from 0 to 1024 [ 182.117189][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.129795][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.140870][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 182.156537][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.165993][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.175481][ T43] usb 3-1: Manufacturer: syz [ 182.187225][ T43] usb 3-1: config 0 descriptor?? [ 182.190144][ T6911] EXT4-fs: Ignoring removed nobh option [ 182.264494][ T6911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.341467][ T5845] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 182.666178][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.700147][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 182.710060][ T5845] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 182.721635][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.733390][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.743022][ T5845] usb 6-1: Product: syz [ 182.747198][ T5845] usb 6-1: Manufacturer: syz [ 182.752227][ T5845] usb 6-1: SerialNumber: syz [ 182.779422][ T5845] usb 6-1: config 0 descriptor?? [ 182.819085][ T6929] loop3: detected capacity change from 0 to 2048 [ 182.850093][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 182.858303][ T6929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.863531][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.881343][ T10] usb 1-1: config 0 has no interface number 0 [ 182.908761][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 182.929847][ T974] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.956907][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.113725][ T10] usb 1-1: Product: syz [ 183.142959][ T10] usb 1-1: Manufacturer: syz [ 183.151550][ T10] usb 1-1: SerialNumber: syz [ 183.281075][ T10] usb 1-1: config 0 descriptor?? [ 183.312102][ T974] usb 2-1: Using ep0 maxpacket: 16 [ 183.347406][ T5845] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 183.507852][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 183.556444][ T974] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 183.566908][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.579314][ T6939] loop4: detected capacity change from 0 to 16 [ 183.591836][ T10] usb 1-1: selecting invalid altsetting 1 [ 183.597675][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.610172][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 183.617800][ T5845] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 183.626137][ T6939] erofs (device loop4): mounted with root inode @ nid 36. [ 183.634575][ T974] usb 2-1: Product: syz [ 183.640187][ T5845] usb 6-1: media controller created [ 183.648752][ T974] usb 2-1: Manufacturer: syz [ 183.656671][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.673519][ T974] usb 2-1: SerialNumber: syz [ 183.688012][ T974] usb 2-1: config 0 descriptor?? [ 183.699488][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.720675][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 183.729946][ T6923] ------------[ cut here ]------------ [ 183.735620][ T6923] usb 6-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 183.749272][ T6923] WARNING: CPU: 0 PID: 6923 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 183.759039][ T6923] Modules linked in: [ 183.763116][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.0.207 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 183.775251][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.785393][ T6923] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 183.791107][ T6923] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 183.813465][ T6923] RSP: 0018:ffffc9001e2bf570 EFLAGS: 00010246 [ 183.819603][ T6923] RAX: 4229b6fc87c60c00 RBX: ffff888077ef2100 RCX: 0000000000080000 [ 183.827644][ T6923] RDX: ffffc9000be89000 RSI: 0000000000007737 RDI: 0000000000007738 [ 183.835744][ T6923] RBP: 1ffff110286dfc64 R08: 0000000000000003 R09: 0000000000000004 [ 183.843923][ T6923] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff8881436fe320 [ 183.852145][ T6923] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff888026c50040 [ 183.860297][ T6923] FS: 00007f78efccc6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 183.869268][ T6923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.875932][ T6923] CR2: 000000110c332251 CR3: 0000000077895000 CR4: 0000000000350ef0 [ 183.883974][ T6923] Call Trace: [ 183.887271][ T6923] [ 183.890272][ T6923] usb_start_wait_urb+0x114/0x4c0 [ 183.895328][ T6923] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 183.901088][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.906755][ T6923] usb_control_msg+0x232/0x3e0 [ 183.913764][ T6923] dtv5100_i2c_msg+0x250/0x330 [ 183.918583][ T6923] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 183.923490][ T6923] __i2c_transfer+0x874/0x2170 [ 183.928274][ T6923] ? stack_depot_save_flags+0x40/0x900 [ 183.933818][ T6923] ? __entry_text_end+0x1020b5/0x1020b9 [ 183.939409][ T6923] ? __pfx___i2c_transfer+0x10/0x10 [ 183.944648][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.950319][ T6923] ? look_up_lock_class+0x74/0x170 [ 183.955463][ T6923] __i2c_smbus_xfer+0xfb0/0x1e50 [ 183.960450][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.966194][ T6923] ? __lock_acquire+0xab9/0xd20 [ 183.971143][ T6923] ? do_raw_spin_lock+0x121/0x290 [ 183.976206][ T6923] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 183.981663][ T6923] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 183.987603][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.993317][ T6923] ? __entry_text_end+0xfdfb5/0x1020b9 [ 183.998793][ T6923] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.004767][ T6923] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.011346][ T6923] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 184.018633][ T6923] i2c_smbus_xfer+0x275/0x3c0 [ 184.023389][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.029045][ T6923] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 184.034314][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.039996][ T6923] ? __lock_acquire+0xab9/0xd20 [ 184.044885][ T6923] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 184.050032][ T6923] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 184.055623][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.061549][ T6923] i2cdev_ioctl+0x5d3/0x7f0 [ 184.066096][ T6923] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.071373][ T6923] ? __fget_files+0x2a/0x420 [ 184.076018][ T6923] ? __fget_files+0x3a0/0x420 [ 184.080780][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.086475][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.092199][ T6923] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.097344][ T6923] __se_sys_ioctl+0xfc/0x170 [ 184.102023][ T6923] do_syscall_64+0xfa/0x3b0 [ 184.106540][ T6923] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.111794][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.119722][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.125441][ T6923] ? exc_page_fault+0x9f/0xf0 [ 184.130191][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.136110][ T6923] RIP: 0033:0x7f78eed8e929 [ 184.140564][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.160318][ T6923] RSP: 002b:00007f78efccc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.168763][ T6923] RAX: ffffffffffffffda RBX: 00007f78eefb5fa0 RCX: 00007f78eed8e929 [ 184.177027][ T6923] RDX: 0000200000000340 RSI: 0000000000000720 RDI: 0000000000000004 [ 184.185048][ T6923] RBP: 00007f78eee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.193134][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.201208][ T6923] R13: 0000000000000000 R14: 00007f78eefb5fa0 R15: 00007ffd3d92aa78 [ 184.209231][ T6923] [ 184.212326][ T6923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.219622][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.0.207 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 184.231523][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.241570][ T6923] Call Trace: [ 184.244836][ T6923] [ 184.247754][ T6923] dump_stack_lvl+0x99/0x250 [ 184.252347][ T6923] ? __asan_memcpy+0x40/0x70 [ 184.256930][ T6923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.262127][ T6923] ? __pfx__printk+0x10/0x10 [ 184.266719][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.272358][ T6923] panic+0x2db/0x790 [ 184.276268][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.281915][ T6923] ? __pfx_panic+0x10/0x10 [ 184.286372][ T6923] __warn+0x31b/0x4b0 [ 184.290354][ T6923] ? usb_submit_urb+0x115d/0x1890 [ 184.295392][ T6923] ? usb_submit_urb+0x115d/0x1890 [ 184.300426][ T6923] report_bug+0x2be/0x4f0 [ 184.304765][ T6923] ? usb_submit_urb+0x115d/0x1890 [ 184.309800][ T6923] ? usb_submit_urb+0x115d/0x1890 [ 184.314833][ T6923] ? usb_submit_urb+0x115f/0x1890 [ 184.319867][ T6923] handle_bug+0x84/0x160 [ 184.324117][ T6923] exc_invalid_op+0x1a/0x50 [ 184.328624][ T6923] asm_exc_invalid_op+0x1a/0x20 [ 184.333472][ T6923] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 184.339119][ T6923] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 c0 3d 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 f4 f2 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 184.358727][ T6923] RSP: 0018:ffffc9001e2bf570 EFLAGS: 00010246 [ 184.364799][ T6923] RAX: 4229b6fc87c60c00 RBX: ffff888077ef2100 RCX: 0000000000080000 [ 184.372772][ T6923] RDX: ffffc9000be89000 RSI: 0000000000007737 RDI: 0000000000007738 [ 184.380738][ T6923] RBP: 1ffff110286dfc64 R08: 0000000000000003 R09: 0000000000000004 [ 184.388704][ T6923] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff8881436fe320 [ 184.396689][ T6923] R13: dffffc0000000000 R14: 0000000080000480 R15: ffff888026c50040 [ 184.404691][ T6923] usb_start_wait_urb+0x114/0x4c0 [ 184.409734][ T6923] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 184.415304][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.421035][ T6923] usb_control_msg+0x232/0x3e0 [ 184.425812][ T6923] dtv5100_i2c_msg+0x250/0x330 [ 184.430598][ T6923] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 184.435473][ T6923] __i2c_transfer+0x874/0x2170 [ 184.440251][ T6923] ? stack_depot_save_flags+0x40/0x900 [ 184.445718][ T6923] ? __entry_text_end+0x1020b5/0x1020b9 [ 184.451275][ T6923] ? __pfx___i2c_transfer+0x10/0x10 [ 184.456480][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.462115][ T6923] ? look_up_lock_class+0x74/0x170 [ 184.467250][ T6923] __i2c_smbus_xfer+0xfb0/0x1e50 [ 184.472197][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.477832][ T6923] ? __lock_acquire+0xab9/0xd20 [ 184.482696][ T6923] ? do_raw_spin_lock+0x121/0x290 [ 184.487733][ T6923] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 184.493121][ T6923] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 184.499023][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.504664][ T6923] ? __entry_text_end+0xfdfb5/0x1020b9 [ 184.510384][ T6923] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.516287][ T6923] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.522638][ T6923] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 184.528025][ T6923] i2c_smbus_xfer+0x275/0x3c0 [ 184.532707][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.538353][ T6923] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 184.543551][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.549189][ T6923] ? __lock_acquire+0xab9/0xd20 [ 184.554049][ T6923] i2cdev_ioctl_smbus+0x1d1/0x6d0 [ 184.559091][ T6923] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 184.564648][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.570298][ T6923] i2cdev_ioctl+0x5d3/0x7f0 [ 184.574809][ T6923] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.579845][ T6923] ? __fget_files+0x2a/0x420 [ 184.584441][ T6923] ? __fget_files+0x3a0/0x420 [ 184.589128][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.594762][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.600489][ T6923] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.605522][ T6923] __se_sys_ioctl+0xfc/0x170 [ 184.610116][ T6923] do_syscall_64+0xfa/0x3b0 [ 184.614622][ T6923] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.619837][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.625908][ T6923] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.631544][ T6923] ? exc_page_fault+0x9f/0xf0 [ 184.636234][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.642145][ T6923] RIP: 0033:0x7f78eed8e929 [ 184.646596][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.666211][ T6923] RSP: 002b:00007f78efccc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.674663][ T6923] RAX: ffffffffffffffda RBX: 00007f78eefb5fa0 RCX: 00007f78eed8e929 [ 184.682639][ T6923] RDX: 0000200000000340 RSI: 0000000000000720 RDI: 0000000000000004 [ 184.690607][ T6923] RBP: 00007f78eee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.698574][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.706541][ T6923] R13: 0000000000000000 R14: 00007f78eefb5fa0 R15: 00007ffd3d92aa78 [ 184.714528][ T6923] [ 184.717749][ T6923] Kernel Offset: disabled [ 184.722070][ T6923] Rebooting in 86400 seconds..