last executing test programs: 21.482123129s ago: executing program 0 (id=111): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v3={0x3000000, [{0x9, 0x1}, {0x4, 0x8}], 0xee01}, 0x18, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) 19.56233758s ago: executing program 1 (id=114): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) 18.062016273s ago: executing program 0 (id=117): sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x800, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x4006, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getresgid(&(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)) statx(r0, &(0x7f0000000200)='./file0\x00', 0x400, 0x400, &(0x7f0000000340)) 17.627749775s ago: executing program 2 (id=119): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x200, 0x100) 17.003205059s ago: executing program 1 (id=121): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 15.808976008s ago: executing program 4 (id=123): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15.807623451s ago: executing program 5 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 14.989114613s ago: executing program 2 (id=125): socket(0x1e, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0xf8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) 13.952708519s ago: executing program 1 (id=127): connect$unix(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x48810, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 13.67678774s ago: executing program 5 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 13.623043148s ago: executing program 4 (id=129): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x1, 0x2ad, &(0x7f00000007c0)="$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") 13.519607224s ago: executing program 0 (id=130): syz_open_dev$vim2m(0x0, 0x800, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 12.47556638s ago: executing program 2 (id=131): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="041c0500c80001015c2899025116bee1", @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0xd0) r3 = semget$private(0x0, 0x207, 0x53) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000040)=""/119) 12.275976881s ago: executing program 5 (id=132): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 11.25067514s ago: executing program 4 (id=133): userfaultfd(0x80001) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.216169612s ago: executing program 1 (id=134): syz_open_dev$usbfs(0x0, 0x400000001fc, 0x301) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 10.635188263s ago: executing program 3 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000800)=0x100000001) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r3) 8.671428588s ago: executing program 2 (id=136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f00000002c0)="f5e022a4d2ed0cd5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465915e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15db", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)='.', 0x1}], 0x1}}], 0x2, 0x804) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d8803f5c0ca3642f22e4c896b5f1d4e16556e57cc2f36b50a00000063cf9528e90000000000581c7eeb130aac1cfd109c3e794fe91b5b473f244eeac47acbd809ca44d2ec", 0xaa, 0x11, 0x0, 0x0) 7.733408268s ago: executing program 3 (id=137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0), 0x4) 7.694417245s ago: executing program 0 (id=138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x23, 0x0, 0x7fffffffeffe) epoll_create(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 7.66528589s ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) 7.587183272s ago: executing program 5 (id=140): capset(&(0x7f00000009c0)={0x19980330}, &(0x7f0000000b40)={0x1, 0x9, 0x5, 0x5d, 0x8, 0x3ff}) syslog(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x21}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x100000000009, 0x0, 0x40000000000000}, {0xcb29, 0x5, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c840) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0163ee89784b5040669e59f4c3717afb80c200000050a245d5cde00800458000140000000000"], 0x0) 7.131580093s ago: executing program 1 (id=141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.29994837s ago: executing program 3 (id=142): io_uring_setup(0x194f, &(0x7f0000000a80)={0x0, 0xc451, 0x10000, 0x20000003, 0x196}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$alg(0x26, 0x5, 0x0) pipe(0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) 5.206194864s ago: executing program 2 (id=143): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r4, 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 4.340603475s ago: executing program 0 (id=144): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) timer_delete(r1) tkill(r2, 0x13) 3.707587214s ago: executing program 5 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f00000001c0)='./file0\x00') 3.705451562s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000680)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a309010000001d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727fb04216ce6ac04673c7cb720b25773c98cd6a78c06b758992b03b81e2e09cf103dc163d41b3548f2258a2e11cc22555da4ef9035cbfe8dc", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000004c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'poly1305\x00'}}) 3.697768163s ago: executing program 4 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 3.497072497s ago: executing program 0 (id=148): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 3.233031768s ago: executing program 1 (id=149): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r1, r2, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 2.460851879s ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000000c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008084) 1.762433527s ago: executing program 4 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 380.945452ms ago: executing program 3 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) 179.109687ms ago: executing program 5 (id=153): r0 = io_uring_setup(0x125e, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x7058, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 101.551089][ T24] cfg80211: failed to load regulatory.db [ 103.317205][ T5812] cgroup: Unknown subsys name 'net' [ 103.463932][ T5812] cgroup: Unknown subsys name 'cpuset' [ 103.474921][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.240759][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.898467][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.906808][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.916345][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.924595][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.933438][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.941066][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.949050][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.956951][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.965692][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.973223][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.980664][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.988087][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.996073][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.005241][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.012671][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.017854][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.047813][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.056245][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.056281][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.071609][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.079789][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.090821][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.093462][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.110083][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.113310][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.124541][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.129964][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.139288][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.148686][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.160034][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.979026][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 111.174807][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 111.287941][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 111.316572][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 111.465139][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.472542][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.480012][ T5833] bridge_slave_0: entered allmulticast mode [ 111.488028][ T5833] bridge_slave_0: entered promiscuous mode [ 111.551172][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 111.573423][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.580950][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.588150][ T5833] bridge_slave_1: entered allmulticast mode [ 111.596040][ T5833] bridge_slave_1: entered promiscuous mode [ 111.846567][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.872398][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 111.946459][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.953799][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.962587][ T5835] bridge_slave_0: entered allmulticast mode [ 111.970774][ T5835] bridge_slave_0: entered promiscuous mode [ 111.981189][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.031421][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.038694][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.046396][ T5830] bridge_slave_0: entered allmulticast mode [ 112.054637][ T5830] bridge_slave_0: entered promiscuous mode [ 112.096845][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.104159][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.113002][ T5835] bridge_slave_1: entered allmulticast mode [ 112.120841][ T5835] bridge_slave_1: entered promiscuous mode [ 112.146796][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.154086][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.161455][ T5834] bridge_slave_0: entered allmulticast mode [ 112.169240][ T5834] bridge_slave_0: entered promiscuous mode [ 112.187005][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.194548][ T55] Bluetooth: hci4: command tx timeout [ 112.194626][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.207731][ T5830] bridge_slave_1: entered allmulticast mode [ 112.214110][ T5852] Bluetooth: hci0: command tx timeout [ 112.214146][ T5842] Bluetooth: hci2: command tx timeout [ 112.225335][ T5134] Bluetooth: hci5: command tx timeout [ 112.227903][ T5830] bridge_slave_1: entered promiscuous mode [ 112.256046][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.263419][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.270952][ T5134] Bluetooth: hci1: command tx timeout [ 112.271134][ T5832] bridge_slave_0: entered allmulticast mode [ 112.282826][ T5134] Bluetooth: hci3: command tx timeout [ 112.290943][ T5832] bridge_slave_0: entered promiscuous mode [ 112.320322][ T5833] team0: Port device team_slave_0 added [ 112.326545][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.334487][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.342065][ T5834] bridge_slave_1: entered allmulticast mode [ 112.350077][ T5834] bridge_slave_1: entered promiscuous mode [ 112.390765][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.397947][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.405408][ T5832] bridge_slave_1: entered allmulticast mode [ 112.413656][ T5832] bridge_slave_1: entered promiscuous mode [ 112.442651][ T5833] team0: Port device team_slave_1 added [ 112.475385][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.506404][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.559645][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.604495][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.650444][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.686215][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.699913][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.727523][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.734584][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.766152][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.780390][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.787353][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.813969][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.829629][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.856204][ T5830] team0: Port device team_slave_0 added [ 112.883298][ T5835] team0: Port device team_slave_0 added [ 112.935657][ T5830] team0: Port device team_slave_1 added [ 112.981407][ T5835] team0: Port device team_slave_1 added [ 112.992282][ T5832] team0: Port device team_slave_0 added [ 113.002096][ T5832] team0: Port device team_slave_1 added [ 113.042251][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.050190][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.057585][ T5831] bridge_slave_0: entered allmulticast mode [ 113.065727][ T5831] bridge_slave_0: entered promiscuous mode [ 113.163487][ T5834] team0: Port device team_slave_0 added [ 113.170121][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.177507][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.185770][ T5831] bridge_slave_1: entered allmulticast mode [ 113.194658][ T5831] bridge_slave_1: entered promiscuous mode [ 113.202993][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.211085][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.237784][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.250859][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.257824][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.283905][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.296031][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.303126][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.329515][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.376826][ T5834] team0: Port device team_slave_1 added [ 113.408037][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.415081][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.441215][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.461966][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.469025][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.494993][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.514576][ T5833] hsr_slave_0: entered promiscuous mode [ 113.521393][ T5833] hsr_slave_1: entered promiscuous mode [ 113.570777][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.585298][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.613506][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.620653][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.646809][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.688471][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.695561][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.722465][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.735642][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.743381][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.769648][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.802930][ T5831] team0: Port device team_slave_0 added [ 113.813245][ T5831] team0: Port device team_slave_1 added [ 114.022308][ T5830] hsr_slave_0: entered promiscuous mode [ 114.029682][ T5830] hsr_slave_1: entered promiscuous mode [ 114.036096][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.044499][ T5830] Cannot create hsr debugfs directory [ 114.057335][ T5835] hsr_slave_0: entered promiscuous mode [ 114.064228][ T5835] hsr_slave_1: entered promiscuous mode [ 114.070541][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.078107][ T5835] Cannot create hsr debugfs directory [ 114.093553][ T5832] hsr_slave_0: entered promiscuous mode [ 114.100239][ T5832] hsr_slave_1: entered promiscuous mode [ 114.106460][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.114368][ T5832] Cannot create hsr debugfs directory [ 114.139335][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.146322][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.172856][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.185755][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.194467][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.230863][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.269179][ T5134] Bluetooth: hci4: command tx timeout [ 114.274657][ T5134] Bluetooth: hci0: command tx timeout [ 114.281176][ T5842] Bluetooth: hci5: command tx timeout [ 114.286604][ T5842] Bluetooth: hci2: command tx timeout [ 114.359161][ T5134] Bluetooth: hci3: command tx timeout [ 114.359443][ T5842] Bluetooth: hci1: command tx timeout [ 114.432927][ T5834] hsr_slave_0: entered promiscuous mode [ 114.442611][ T5834] hsr_slave_1: entered promiscuous mode [ 114.449195][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.456936][ T5834] Cannot create hsr debugfs directory [ 114.661308][ T5831] hsr_slave_0: entered promiscuous mode [ 114.667903][ T5831] hsr_slave_1: entered promiscuous mode [ 114.674794][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.682908][ T5831] Cannot create hsr debugfs directory [ 115.298848][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.331576][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.360853][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.384605][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.428802][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.448649][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.472540][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.487225][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.606021][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.644841][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.657946][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.717830][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.776202][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.802900][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.838231][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.854864][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.939146][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.050074][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.061866][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.075270][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.126673][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.173857][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.201139][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.216057][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.223479][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.282511][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.289761][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.334835][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.345866][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.353142][ T5842] Bluetooth: hci2: command tx timeout [ 116.353195][ T5842] Bluetooth: hci4: command tx timeout [ 116.366962][ T5842] Bluetooth: hci0: command tx timeout [ 116.369572][ T5134] Bluetooth: hci5: command tx timeout [ 116.382985][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.394511][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.413981][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.429236][ T5134] Bluetooth: hci1: command tx timeout [ 116.429335][ T5842] Bluetooth: hci3: command tx timeout [ 116.468043][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.546005][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.558384][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.565590][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.578280][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.585592][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.658537][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.665774][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.734731][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.768148][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.775387][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.888236][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.002056][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.009278][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.078420][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.085667][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.126945][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.285314][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.364901][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.398356][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.406112][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.521277][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.554909][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.570447][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.577623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.637173][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.644397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.718213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.725614][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.774627][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.896828][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.936180][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.982579][ T5833] veth0_vlan: entered promiscuous mode [ 118.073272][ T5832] veth0_vlan: entered promiscuous mode [ 118.100534][ T5833] veth1_vlan: entered promiscuous mode [ 118.170705][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.215783][ T5832] veth1_vlan: entered promiscuous mode [ 118.353264][ T5833] veth0_macvtap: entered promiscuous mode [ 118.368662][ T5833] veth1_macvtap: entered promiscuous mode [ 118.439184][ T5842] Bluetooth: hci0: command tx timeout [ 118.439218][ T5134] Bluetooth: hci4: command tx timeout [ 118.444672][ T5852] Bluetooth: hci5: command tx timeout [ 118.456659][ T55] Bluetooth: hci2: command tx timeout [ 118.474462][ T5830] veth0_vlan: entered promiscuous mode [ 118.501721][ T5832] veth0_macvtap: entered promiscuous mode [ 118.509087][ T5842] Bluetooth: hci3: command tx timeout [ 118.514533][ T5842] Bluetooth: hci1: command tx timeout [ 118.553176][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.576259][ T5832] veth1_macvtap: entered promiscuous mode [ 118.618002][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.628743][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.651182][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.714851][ T5830] veth1_vlan: entered promiscuous mode [ 118.771281][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.788417][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.805751][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.833176][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.856474][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.866166][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.877445][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.886558][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.939477][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.948217][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.966378][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.977209][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.026092][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.110736][ T5830] veth0_macvtap: entered promiscuous mode [ 119.132800][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.164802][ T5830] veth1_macvtap: entered promiscuous mode [ 119.273601][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.309570][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.396828][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.408729][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.423533][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.434208][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.447386][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.493212][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.512580][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.525503][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.543954][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.560536][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.577089][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.583445][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.600205][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.611743][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.619042][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.620891][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.683645][ T5835] veth0_vlan: entered promiscuous mode [ 119.723078][ T5831] veth0_vlan: entered promiscuous mode [ 119.761661][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.805018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.815625][ T5835] veth1_vlan: entered promiscuous mode [ 119.851696][ T5831] veth1_vlan: entered promiscuous mode [ 119.854525][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 119.937248][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.970318][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.064062][ T5835] veth0_macvtap: entered promiscuous mode [ 120.121708][ T5835] veth1_macvtap: entered promiscuous mode [ 120.122870][ T5937] loop3: detected capacity change from 0 to 512 [ 120.142147][ T5937] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.158834][ T5831] veth0_macvtap: entered promiscuous mode [ 120.172735][ T5831] veth1_macvtap: entered promiscuous mode [ 120.178615][ T5937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.261383][ T5937] EXT4-fs (loop3): 1 truncate cleaned up [ 120.287080][ T5937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.337062][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.342237][ T30] audit: type=1804 audit(1746966042.329:2): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4" name="/newroot/0/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 120.355216][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.378621][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.395627][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.408468][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.430789][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.445448][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.455794][ T30] audit: type=1800 audit(1746966042.449:3): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 120.484206][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.499551][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.534350][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.546695][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.556691][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.567258][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.580372][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.598364][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.626185][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.637728][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.653955][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.736516][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.757595][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.782274][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.809167][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.827382][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.890527][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.902821][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.944196][ T5834] veth0_vlan: entered promiscuous mode [ 120.981445][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.989294][ T5834] veth1_vlan: entered promiscuous mode [ 121.036249][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.066700][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.099429][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.146362][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.157990][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.167877][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.178422][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.188298][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.199255][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.212759][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.261841][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.271339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.280592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.346799][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.384430][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.417341][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.485535][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.517272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.526031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.535980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 121.545772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.575528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.662173][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.683314][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.692696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.722421][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.751300][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.774364][ T5949] loop3: detected capacity change from 0 to 512 [ 121.799293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.819088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 121.881949][ T5949] EXT4-fs: Ignoring removed nobh option [ 121.895387][ T5949] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #11: comm syz.3.8: invalid indirect mapped block 256 (level 2) [ 121.916608][ T5949] EXT4-fs (loop3): 2 truncates cleaned up [ 122.003578][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.301264][ T5834] veth0_macvtap: entered promiscuous mode [ 122.337603][ T5834] veth1_macvtap: entered promiscuous mode [ 122.847804][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.858339][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.871410][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.892493][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.945852][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.999071][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.015104][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.038467][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.090462][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.114895][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.126715][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.144585][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.181035][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.191690][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.443332][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.475816][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.905383][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.307479][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.317429][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.328013][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.337893][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.348561][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.359328][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.369967][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.382139][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.430049][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.437956][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.520984][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.549021][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.568376][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.686781][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.177717][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.349242][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.518059][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.633289][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.765494][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.820536][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.029398][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.037287][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.300179][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.857610][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.302544][ T6014] loop1: detected capacity change from 0 to 8192 [ 133.629230][ T55] Bluetooth: hci1: command tx timeout [ 134.226687][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.233795][ T6014] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.358390][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.498424][ T9] usb 3-1: config 0 descriptor?? [ 134.564246][ T9] usb 3-1: can't set config #0, error -71 [ 134.616879][ T9] usb 3-1: USB disconnect, device number 2 [ 137.542772][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 138.348625][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.682082][ T6052] loop1: detected capacity change from 0 to 40427 [ 138.710724][ T6052] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 138.718705][ T6052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.732039][ T6057] loop0: detected capacity change from 0 to 64 [ 138.732939][ T6052] F2FS-fs (loop1): invalid crc value [ 138.915021][ T6052] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.922564][ T6052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.520413][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.530143][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.827357][ T6085] loop2: detected capacity change from 0 to 256 [ 143.051680][ T30] audit: type=1804 audit(1746966065.049:4): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.42" name="/newroot/8/file1/file0" dev="loop2" ino=1048604 res=1 errno=0 [ 143.084113][ T6090] trusted_key: encrypted_key: insufficient parameters specified [ 143.429741][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.629365][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 143.699248][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 144.930360][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.025369][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 145.117435][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.164359][ T10] usb 1-1: Product: syz [ 145.202942][ T10] usb 1-1: Manufacturer: syz [ 145.270398][ T6104] Bluetooth: MGMT ver 1.23 [ 145.275678][ T10] usb 1-1: SerialNumber: syz [ 146.087264][ T6116] loop2: detected capacity change from 0 to 64 [ 146.097159][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 146.114305][ T6116] ======================================================= [ 146.114305][ T6116] WARNING: The mand mount option has been deprecated and [ 146.114305][ T6116] and is ignored by this kernel. Remove the mand [ 146.114305][ T6116] option from the mount to silence this warning. [ 146.114305][ T6116] ======================================================= [ 146.159862][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 146.199021][ T10] usb 1-1: USB disconnect, device number 2 [ 147.318518][ T6121] loop5: detected capacity change from 0 to 32768 [ 147.568054][ T6129] loop3: detected capacity change from 0 to 256 [ 147.584537][ T6129] vfat: Bad value for 'shortname' [ 147.653742][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 148.430589][ T6128] syz.4.51 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.486958][ T6121] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root [ 148.486958][ T6121] [ 148.505011][ T6121] ERROR: (device loop5): remounting filesystem as read-only [ 148.992322][ T6135] input: syz0 as /devices/virtual/input/input5 [ 150.554735][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 150.741380][ T6148] loop2: detected capacity change from 0 to 512 [ 150.770706][ T6148] EXT4-fs: Ignoring removed nobh option [ 150.860455][ T6151] loop0: detected capacity change from 0 to 512 [ 150.871119][ T6151] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 150.886809][ T6148] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #4: comm syz.2.58: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 771, max 4(4), depth 0(0) [ 150.917507][ T6151] EXT4-fs (loop0): 1 truncate cleaned up [ 150.930835][ T6148] EXT4-fs error (device loop2): ext4_quota_enable:7128: comm syz.2.58: Bad quota inode: 4, type: 1 [ 150.941132][ T6151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.974329][ T6146] loop4: detected capacity change from 0 to 256 [ 151.009098][ T6148] EXT4-fs warning (device loop2): ext4_enable_quotas:7166: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.057471][ T6146] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.104904][ T6148] EXT4-fs (loop2): mount failed [ 151.165978][ T6146] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 151.251744][ T6146] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 151.704862][ T6188] loop5: detected capacity change from 0 to 512 [ 151.745815][ T6188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.826264][ T6188] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 151.902293][ T6188] EXT4-fs (loop5): 1 truncate cleaned up [ 151.959303][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.973579][ T6188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.986547][ T6193] loop3: detected capacity change from 0 to 256 [ 152.004306][ T6193] vfat: Bad value for 'shortname' [ 152.180679][ T6172] Bluetooth: hci6: Frame reassembly failed (-84) [ 152.432300][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.309244][ T5842] Bluetooth: hci6: command 0x1003 tx timeout [ 154.316507][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 162.464508][ T6231] loop3: detected capacity change from 0 to 32768 [ 162.533265][ T6231] jfs_strtoUCS: char2uni returned -22. [ 162.539058][ T6231] charset = cp950, char = 0xd4 [ 162.667115][ T6234] find_entry called with index = 0 [ 165.814654][ T6257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.84'. [ 166.887865][ T55] Bluetooth: Frame is too long (len 28, expected len 4) [ 166.947760][ T6257] loop1: detected capacity change from 0 to 1024 [ 167.049564][ T6257] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.097099][ T6257] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 167.150793][ T6257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.216232][ T6257] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 168.204036][ T6257] EXT4-fs warning (device loop1): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 168.459146][ T6257] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 168.489488][ T55] Bluetooth: hci4: unexpected event 0x09 length: 14 > 3 [ 168.569765][ T6257] EXT4-fs (loop1): 1 truncate cleaned up [ 168.668132][ T6257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.354938][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.517815][ T6301] loop0: detected capacity change from 0 to 512 [ 170.576761][ T6301] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 171.137206][ T6311] use of bytesused == 0 is deprecated and will be removed in the future, [ 171.159496][ T6311] use the actual size instead. [ 171.332206][ T6301] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 172.116869][ T6320] loop3: detected capacity change from 0 to 128 [ 172.188400][ T6320] omfs: sysblock size (-58445445) is out of range [ 172.319443][ T55] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 172.901736][ T6335] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.641710][ T6358] evm: overlay not supported [ 178.742157][ T6371] syz.2.116: attempt to access beyond end of device [ 178.742157][ T6371] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 178.755354][ T6371] efs: cannot read volume header [ 180.367590][ T6379] loop2: detected capacity change from 0 to 128 [ 180.441851][ T6382] loop0: detected capacity change from 0 to 512 [ 180.999324][ T6382] EXT4-fs: Ignoring removed i_version option [ 181.007540][ T6382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.358968][ T6382] EXT4-fs (loop0): 1 truncate cleaned up [ 181.868640][ T6390] syz.2.119 (6390) used greatest stack depth: 20680 bytes left [ 182.141619][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.159921][ T6402] binder_alloc: 6401: binder_alloc_buf, no vma [ 183.578588][ T6409] loop4: detected capacity change from 0 to 256 [ 183.817232][ T30] audit: type=1326 audit(1746966105.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 184.684590][ T30] audit: type=1326 audit(1746966106.689:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 184.797747][ T30] audit: type=1326 audit(1746966106.689:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 184.824621][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.841996][ T30] audit: type=1326 audit(1746966106.689:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.401318][ T30] audit: type=1326 audit(1746966106.719:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.708656][ T30] audit: type=1326 audit(1746966106.719:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.731422][ T30] audit: type=1326 audit(1746966106.729:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.754933][ T30] audit: type=1326 audit(1746966106.729:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.777285][ T30] audit: type=1326 audit(1746966106.729:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 185.799861][ T30] audit: type=1326 audit(1746966106.849:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe92a58e969 code=0x7ffc0000 [ 190.014808][ T6448] capability: warning: `syz.5.140' uses 32-bit capabilities (legacy support in use) [ 192.124384][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.652661][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 192.819570][ T10] usb 1-1: device descriptor read/all, error -71 [ 194.963647][ T6472] overlayfs: failed to clone upperpath [ 197.212685][ T6496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 197.981304][ T37] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN NOPTI [ 197.993442][ T37] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 198.001886][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 198.013897][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.023971][ T37] Workqueue: events_unbound netfs_write_collection_worker [ 198.031115][ T37] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 198.036708][ T37] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 198.056362][ T37] RSP: 0018:ffffc90000ae7950 EFLAGS: 00010206 [ 198.062457][ T37] RAX: 0000000000000023 RBX: 0000000000000097 RCX: dffffc0000000000 [ 198.070442][ T37] RDX: 0000000000000006 RSI: ffffffff84cc7840 RDI: 000000000000011e [ 198.078424][ T37] RBP: ffffc90000ae7a78 R08: 0000000000000005 R09: 0000000000000000 [ 198.086409][ T37] R10: 0000000000000000 R11: ffff8881452da52c R12: 000000000000001e [ 198.094480][ T37] R13: 000000000000001e R14: 0000000000000000 R15: ffff8881452da3a8 [ 198.102465][ T37] FS: 0000000000000000(0000) GS:ffff8881249e5000(0000) knlGS:0000000000000000 [ 198.111498][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.118095][ T37] CR2: 0000555580d065c8 CR3: 000000000e180000 CR4: 0000000000350ef0 [ 198.126083][ T37] Call Trace: [ 198.129372][ T37] [ 198.132317][ T37] netfs_retry_writes+0x166d/0x1a50 [ 198.137544][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.143210][ T37] ? __lock_acquire+0xaa4/0x1ba0 [ 198.148195][ T37] ? __pfx_netfs_retry_writes+0x10/0x10 [ 198.153764][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.159432][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.165089][ T37] ? register_lock_class+0x41/0x4c0 [ 198.170332][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.175992][ T37] ? do_raw_spin_lock+0x12c/0x2b0 [ 198.181035][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.186696][ T37] netfs_write_collection_worker+0x23fd/0x3830 [ 198.192893][ T37] process_one_work+0x9cf/0x1b70 [ 198.197859][ T37] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 198.204403][ T37] ? __pfx_process_one_work+0x10/0x10 [ 198.209798][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.215547][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.221207][ T37] ? assign_work+0x1a0/0x250 [ 198.225817][ T37] worker_thread+0x6c8/0xf10 [ 198.230445][ T37] ? __pfx_worker_thread+0x10/0x10 [ 198.235578][ T37] kthread+0x3c5/0x780 [ 198.239678][ T37] ? __pfx_kthread+0x10/0x10 [ 198.244290][ T37] ? __pfx_kthread+0x10/0x10 [ 198.248896][ T37] ? __pfx_kthread+0x10/0x10 [ 198.253505][ T37] ? __pfx_kthread+0x10/0x10 [ 198.258109][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 198.263770][ T37] ? rcu_is_watching+0x12/0xc0 [ 198.268564][ T37] ? __pfx_kthread+0x10/0x10 [ 198.273173][ T37] ret_from_fork+0x48/0x80 [ 198.277606][ T37] ? __pfx_kthread+0x10/0x10 [ 198.282209][ T37] ret_from_fork_asm+0x1a/0x30 [ 198.287057][ T37] [ 198.290080][ T37] Modules linked in: [ 198.295645][ T37] ---[ end trace 0000000000000000 ]--- [ 198.367030][ T37] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 198.530419][ T37] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 198.566965][ T37] RSP: 0018:ffffc90000ae7950 EFLAGS: 00010206 [ 199.209079][ T6498] loop3: detected capacity change from 0 to 512 [ 199.250329][ T6498] EXT4-fs: Ignoring removed oldalloc option [ 199.269079][ T37] RAX: 0000000000000023 RBX: 0000000000000097 RCX: dffffc0000000000 [ 199.277093][ T37] RDX: 0000000000000006 RSI: ffffffff84cc7840 RDI: 000000000000011e [ 199.331471][ T37] RBP: ffffc90000ae7a78 R08: 0000000000000005 R09: 0000000000000000 [ 199.344367][ T6498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 199.353739][ T37] R10: 0000000000000000 R11: ffff8881452da52c R12: 000000000000001e [ 199.364195][ T37] R13: 000000000000001e R14: 0000000000000000 R15: ffff8881452da3a8 [ 199.391354][ T37] FS: 0000000000000000(0000) GS:ffff8881249e5000(0000) knlGS:0000000000000000 [ 199.406710][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.415404][ T37] CR2: 00007f26b7382338 CR3: 0000000034b39000 CR4: 0000000000350ef0 [ 199.423785][ T37] Kernel panic - not syncing: Fatal exception [ 199.430085][ T37] Kernel Offset: disabled [ 199.434440][ T37] Rebooting in 86400 seconds..