last executing test programs: 31.381911894s ago: executing program 1 (id=39): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4000c800) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52}) socket(0x1d, 0x2, 0x6) fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 25.284473679s ago: executing program 1 (id=46): r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r4 = shmget(0x0, 0x3000, 0x100, &(0x7f0000424000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 25.284102199s ago: executing program 2 (id=47): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x40001) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) 25.252643842s ago: executing program 3 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r4) 23.74958211s ago: executing program 0 (id=51): syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 21.096095448s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r4, 0x1) setresgid(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2027015, 0x0) execve(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 20.73362057s ago: executing program 4 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x400) 20.331398536s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4c, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c400000008000240000000000a0001"], 0xb4}}, 0x0) 19.601586286s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000380), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19.600487219s ago: executing program 5 (id=57): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() restart_syscall() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 18.181828534s ago: executing program 2 (id=58): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x8280, 0x0) preadv(r4, 0x0, 0x0, 0xffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x8000}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r0, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 18.174599887s ago: executing program 1 (id=70): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x404, 0x1, 0x80d6}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800200001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000004060103ed0000000000000003000009050001000700000005000100070000"], 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000002c0)={0x40, 0xffff, 0x8, 0x7, 0x4, 0x1000}) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10000081, 0xffdfffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$TIOCSETD(r7, 0x5412, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) 17.180548993s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0xe3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.388758967s ago: executing program 5 (id=60): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 16.316171719s ago: executing program 4 (id=61): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4000c800) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52}) socket(0x1d, 0x2, 0x6) fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 16.209016157s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$read(0x2, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x27) dup(0xffffffffffffffff) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000000)="2a000200010078", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb9b, @void, @value}, 0x94) 14.410816836s ago: executing program 3 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) socket$pptp(0x18, 0x1, 0x2) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x315}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 14.052024982s ago: executing program 2 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 13.249008677s ago: executing program 0 (id=65): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$msr(r4, 0x0, 0x600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x9, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x7, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x5fffffe, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4, 0x7f, 0x9, 0xfff, 0x1000, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x8, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x1, 0x80, 0x3, 0xfffffffe, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2e, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x2, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x5, 0x7ffffffe, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) 9.844702144s ago: executing program 2 (id=66): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f9, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, 0xffffffffffffffff, 0x22f9e000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7, 0x9) close_range(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) 9.564473802s ago: executing program 5 (id=67): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') preadv(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) fanotify_init(0x200, 0x0) unshare(0x22020600) sendto$inet6(r0, &(0x7f0000000300)="f51d1352d711b7917b012dd3cc1ce21afa2135c24a24a148ece1a4bffa65eded602f9423283225f45e2ca3c687a1d9cac38b6f9e1b2265089befda5e519e46436a907df5485a8c1e6726652ebdba681a3db2b4810e13d00e10f43843f20468cdd41c8465e2e4da3cf06fcd7e837e066be88a3a60c071bb152572532e21d061a14599020e103cb27cbc3c15d03d9acb0ab1ace7c7e1c9fd3d9f3d7ec7868a4590cbce0845ffbc4d1121c497ce128497493e6e6a638083de", 0xb7, 0x24004800, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x5}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xae, &(0x7f0000000780)={@random="b05dd83cb5f4", @link_local, @void, {@llc_tr={0x11, {@snap={0xab, 0x1, "e0f3", "471af5", 0x18, "48e0f5a7edcdd43a5c8397ef65693bb184a82dfcc40b888e821abf982a61aeff1002bbf71260168908a023d4efaa671f8a64d34a793aa5f2ee00472cf0d43064d6c8e5e180d9a2631e45e3c5c605a3c004f5678d4243da714140d0e38a18397cf9e5f12c5135fa336b53d386a696842d9bf4528e60b7450898f2e32d24814ad100b4c7ee16804c80f1eff1d254a26606ab7cbf65628810"}}}}}, 0x0) 9.518490821s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000a00)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 8.17604165s ago: executing program 4 (id=69): socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r4, 0x1c27, 0xd2af, 0x28, 0x0, 0x0) 7.938018307s ago: executing program 1 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 7.247309715s ago: executing program 0 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$bt_hci(r3, 0x84, 0x7b, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 5.732936134s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x2, &(0x7f0000001140)=[0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffffffffffff, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.353790392s ago: executing program 5 (id=74): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.377063363s ago: executing program 4 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x400) 3.094168779s ago: executing program 2 (id=76): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e755044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x2, 0x80000001}) 3.092012599s ago: executing program 5 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_extract_tcp_res(0x0, 0xe3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.949348538s ago: executing program 0 (id=78): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x400002, 0x0) 2.82023516s ago: executing program 1 (id=79): socket$nl_netfilter(0x10, 0x3, 0xc) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) socket(0x11, 0x80a, 0x100000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0xfffffffc}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x3, 0x6}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) ioperm(0x0, 0xd4b7, 0xa) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 2.818998712s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000c00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, @null}, 0x1c) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_open_pts(0xffffffffffffffff, 0x141601) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000400), &(0x7f0000000000)=0x4) 1.954090996s ago: executing program 3 (id=81): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 1.2993375s ago: executing program 5 (id=82): io_uring_setup(0x2e34, &(0x7f0000000180)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setns(r1, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030307a92ab1146146cf12bb263edffe754b820509012c1e3dd358dd11d37224e5fd3979e3eb11b0b00f77c4cbe631682ec5ab9c8c7108edd7e8c87ea3a9546"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 4 (id=83): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x4000c800) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x52}) socket(0x1d, 0x2, 0x6) fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 101.657085][ T24] cfg80211: failed to load regulatory.db [ 103.380583][ T5812] cgroup: Unknown subsys name 'net' [ 103.540108][ T5812] cgroup: Unknown subsys name 'cpuset' [ 103.550290][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.403018][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.711989][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.721709][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.730517][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.739227][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.746402][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.754194][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.763301][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.771078][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.780178][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.788819][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.797677][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.815856][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.825692][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.834109][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.860385][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.872449][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.886979][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.894863][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.903819][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.915339][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.923515][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.931815][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.964373][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.021410][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.031570][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.040056][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.048933][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.058468][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.072774][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.080783][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.944070][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 111.062616][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 111.132439][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 111.341348][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 111.355604][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 111.556683][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.565305][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.573635][ T5830] bridge_slave_0: entered allmulticast mode [ 111.582358][ T5830] bridge_slave_0: entered promiscuous mode [ 111.693405][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.701086][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.708765][ T5830] bridge_slave_1: entered allmulticast mode [ 111.717508][ T5830] bridge_slave_1: entered promiscuous mode [ 111.726070][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.733274][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.740947][ T5824] bridge_slave_0: entered allmulticast mode [ 111.749376][ T5824] bridge_slave_0: entered promiscuous mode [ 111.759168][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.766697][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.774000][ T5824] bridge_slave_1: entered allmulticast mode [ 111.782721][ T5824] bridge_slave_1: entered promiscuous mode [ 111.798681][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 111.895173][ T5839] Bluetooth: hci0: command tx timeout [ 111.899793][ T5829] Bluetooth: hci1: command tx timeout [ 111.962080][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.969494][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.974505][ T5829] Bluetooth: hci2: command tx timeout [ 111.977644][ T5825] bridge_slave_0: entered allmulticast mode [ 111.990355][ T5825] bridge_slave_0: entered promiscuous mode [ 112.002055][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.016243][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.055203][ T5829] Bluetooth: hci5: command tx timeout [ 112.082549][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.089980][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.098062][ T5836] bridge_slave_0: entered allmulticast mode [ 112.106719][ T5836] bridge_slave_0: entered promiscuous mode [ 112.117063][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.124464][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.131738][ T5825] bridge_slave_1: entered allmulticast mode [ 112.138002][ T5829] Bluetooth: hci3: command tx timeout [ 112.140532][ T5825] bridge_slave_1: entered promiscuous mode [ 112.143857][ T5829] Bluetooth: hci4: command tx timeout [ 112.193247][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.229046][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.236577][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.245485][ T5836] bridge_slave_1: entered allmulticast mode [ 112.253283][ T5836] bridge_slave_1: entered promiscuous mode [ 112.303290][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.401487][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.415927][ T5830] team0: Port device team_slave_0 added [ 112.440278][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.448552][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.456946][ T5833] bridge_slave_0: entered allmulticast mode [ 112.465117][ T5833] bridge_slave_0: entered promiscuous mode [ 112.494458][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.506991][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.535539][ T5830] team0: Port device team_slave_1 added [ 112.544863][ T5824] team0: Port device team_slave_0 added [ 112.551341][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.558640][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.565952][ T5833] bridge_slave_1: entered allmulticast mode [ 112.573641][ T5833] bridge_slave_1: entered promiscuous mode [ 112.602297][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.669486][ T5824] team0: Port device team_slave_1 added [ 112.772046][ T5825] team0: Port device team_slave_0 added [ 112.782094][ T5825] team0: Port device team_slave_1 added [ 112.789491][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.797302][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.823537][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.837953][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.845003][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.871548][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.918367][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.926054][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.933280][ T5835] bridge_slave_0: entered allmulticast mode [ 112.942270][ T5835] bridge_slave_0: entered promiscuous mode [ 112.953801][ T5836] team0: Port device team_slave_0 added [ 112.988666][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.995839][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.022064][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.035457][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.042419][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.068583][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.083358][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.106825][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.114053][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.122754][ T5835] bridge_slave_1: entered allmulticast mode [ 113.131154][ T5835] bridge_slave_1: entered promiscuous mode [ 113.140169][ T5836] team0: Port device team_slave_1 added [ 113.197703][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.242427][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.249815][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.276271][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.365922][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.372921][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.399209][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.411526][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.418925][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.445421][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.507801][ T5833] team0: Port device team_slave_0 added [ 113.535963][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.545962][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.552942][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.579497][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.627919][ T5830] hsr_slave_0: entered promiscuous mode [ 113.634883][ T5830] hsr_slave_1: entered promiscuous mode [ 113.645530][ T5833] team0: Port device team_slave_1 added [ 113.658072][ T5824] hsr_slave_0: entered promiscuous mode [ 113.665792][ T5824] hsr_slave_1: entered promiscuous mode [ 113.672198][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.680439][ T5824] Cannot create hsr debugfs directory [ 113.690339][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.788331][ T5825] hsr_slave_0: entered promiscuous mode [ 113.795653][ T5825] hsr_slave_1: entered promiscuous mode [ 113.802057][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.811448][ T5825] Cannot create hsr debugfs directory [ 113.877634][ T5836] hsr_slave_0: entered promiscuous mode [ 113.885562][ T5836] hsr_slave_1: entered promiscuous mode [ 113.891922][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.901033][ T5836] Cannot create hsr debugfs directory [ 113.940435][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.947823][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.974600][ T5839] Bluetooth: hci0: command tx timeout [ 113.980212][ T5829] Bluetooth: hci1: command tx timeout [ 113.981402][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.000154][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.007279][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.033634][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.050286][ T5835] team0: Port device team_slave_0 added [ 114.056170][ T5829] Bluetooth: hci2: command tx timeout [ 114.135242][ T5829] Bluetooth: hci5: command tx timeout [ 114.168817][ T5835] team0: Port device team_slave_1 added [ 114.214480][ T5839] Bluetooth: hci3: command tx timeout [ 114.220072][ T5829] Bluetooth: hci4: command tx timeout [ 114.421520][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.432377][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.458657][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.478761][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.485995][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.512053][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.652668][ T5833] hsr_slave_0: entered promiscuous mode [ 114.660567][ T5833] hsr_slave_1: entered promiscuous mode [ 114.667215][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.674969][ T5833] Cannot create hsr debugfs directory [ 114.873139][ T5835] hsr_slave_0: entered promiscuous mode [ 114.879971][ T5835] hsr_slave_1: entered promiscuous mode [ 114.886901][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.894544][ T5835] Cannot create hsr debugfs directory [ 115.274110][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.289429][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.328556][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.373157][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.482297][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.499865][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.512267][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.546077][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.646359][ T5824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.676149][ T5824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.694027][ T5824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.707466][ T5824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.858356][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.872670][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.892590][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.907295][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.037709][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.064817][ T5829] Bluetooth: hci1: command tx timeout [ 116.065468][ T5839] Bluetooth: hci0: command tx timeout [ 116.137771][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.144831][ T5839] Bluetooth: hci2: command tx timeout [ 116.172852][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.185058][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.214851][ T5839] Bluetooth: hci5: command tx timeout [ 116.229436][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.248399][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.256844][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.298580][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.304849][ T5839] Bluetooth: hci4: command tx timeout [ 116.305961][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.311155][ T5839] Bluetooth: hci3: command tx timeout [ 116.400882][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.408074][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.466639][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.525329][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.561794][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.569130][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.581146][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.588367][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.602923][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.622334][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.643637][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.683285][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.771797][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.831506][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.838766][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.889137][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.896369][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.963885][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.176069][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.189082][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.223258][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.231095][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.331789][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.339056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.419566][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.449343][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.511368][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.518646][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.542203][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.549494][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.651582][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.805506][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.868135][ T5825] veth0_vlan: entered promiscuous mode [ 117.890818][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.945843][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.953105][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.972932][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.980190][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.037836][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.053920][ T5825] veth1_vlan: entered promiscuous mode [ 118.134490][ T5829] Bluetooth: hci0: command tx timeout [ 118.136548][ T5839] Bluetooth: hci1: command tx timeout [ 118.214663][ T5839] Bluetooth: hci2: command tx timeout [ 118.270610][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.298124][ T5839] Bluetooth: hci5: command tx timeout [ 118.349334][ T5830] veth0_vlan: entered promiscuous mode [ 118.376075][ T5839] Bluetooth: hci3: command tx timeout [ 118.376230][ T5829] Bluetooth: hci4: command tx timeout [ 118.411655][ T5830] veth1_vlan: entered promiscuous mode [ 118.510886][ T5825] veth0_macvtap: entered promiscuous mode [ 118.570423][ T5825] veth1_macvtap: entered promiscuous mode [ 118.619142][ T5830] veth0_macvtap: entered promiscuous mode [ 118.670035][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.691291][ T5830] veth1_macvtap: entered promiscuous mode [ 118.746316][ T5836] veth0_vlan: entered promiscuous mode [ 118.830518][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.854103][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.871729][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.883671][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.893482][ T5836] veth1_vlan: entered promiscuous mode [ 118.916313][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.926652][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.939280][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.959907][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.998851][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.009854][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.020084][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.028998][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.053176][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.068421][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.077290][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.086078][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.198767][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.276687][ T5836] veth0_macvtap: entered promiscuous mode [ 119.331718][ T5836] veth1_macvtap: entered promiscuous mode [ 119.401611][ T5824] veth0_vlan: entered promiscuous mode [ 119.466098][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.474138][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.509193][ T5824] veth1_vlan: entered promiscuous mode [ 119.539908][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.551870][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.564423][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.576146][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.588266][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.603974][ T5835] veth0_vlan: entered promiscuous mode [ 119.633901][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.644914][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.660145][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.670769][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.682553][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.700057][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.709272][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.718270][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.728923][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.749012][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.757221][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.783857][ T5833] veth0_vlan: entered promiscuous mode [ 119.850855][ T5835] veth1_vlan: entered promiscuous mode [ 119.877537][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.889635][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.957541][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.970024][ T5833] veth1_vlan: entered promiscuous mode [ 119.982346][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.042615][ T5824] veth0_macvtap: entered promiscuous mode [ 120.069592][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 120.091986][ T5835] veth0_macvtap: entered promiscuous mode [ 120.129943][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.139992][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.142150][ T5824] veth1_macvtap: entered promiscuous mode [ 120.325117][ T5835] veth1_macvtap: entered promiscuous mode [ 120.339436][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.352949][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.368153][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.373978][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.393978][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.412772][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.422812][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.444367][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.707010][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.715088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.348237][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.365690][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.375658][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.386177][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.396038][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.406535][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.537626][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.641187][ T5833] veth0_macvtap: entered promiscuous mode [ 121.903460][ T5824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.919500][ T5824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.930489][ T5824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.949721][ T5824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.004190][ T5833] veth1_macvtap: entered promiscuous mode [ 123.153093][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.179166][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.210785][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.223384][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.336867][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.449848][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.480099][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.504707][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.548740][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.584850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.593160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.601964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.610747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.620158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 123.629694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.638527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.647375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.656091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.780759][ T30] audit: type=1326 audit(1746048818.128:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 123.829183][ T30] audit: type=1326 audit(1746048818.158:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 123.867500][ T30] audit: type=1326 audit(1746048818.158:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 123.896649][ T30] audit: type=1326 audit(1746048818.158:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 124.052514][ T30] audit: type=1326 audit(1746048818.158:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.486111][ T30] audit: type=1326 audit(1746048818.158:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.529833][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.578903][ T30] audit: type=1326 audit(1746048818.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.582851][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.616803][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.630790][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.642889][ T30] audit: type=1326 audit(1746048818.158:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.654023][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.669937][ T30] audit: type=1326 audit(1746048818.158:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.693687][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.700041][ T30] audit: type=1326 audit(1746048818.158:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1391d8e969 code=0x7ffc0000 [ 125.709444][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.717638][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.753963][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.897533][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.924319][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.944367][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.970019][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.187472][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.200469][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.210902][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.221850][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.243219][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.266328][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.107955][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.132260][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.294343][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.360265][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.372802][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.404340][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.432548][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.456778][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.482417][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.703643][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.715580][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.750695][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.237789][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.374332][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.389652][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.404524][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.453747][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.533524][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.543660][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.563851][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.056687][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.101852][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.501933][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.528195][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.426902][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.442997][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.452657][ T5989] netfs: Couldn't get user pages (rc=-14) [ 133.746570][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.783084][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.826674][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.878536][ T5991] loop2: detected capacity change from 0 to 16 [ 133.947653][ T5991] erofs (device loop2): mounted with root inode @ nid 36. [ 134.530330][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.571545][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.857691][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.981205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.442834][ T6012] loop1: detected capacity change from 0 to 128 [ 138.450450][ T6012] adfs: Bad value for 'uid' [ 138.455212][ T6012] adfs: Bad value for 'uid' [ 138.842996][ T6011] loop1: detected capacity change from 0 to 128 [ 138.850384][ T6011] udf: Unknown parameter '000000000000000000060xffffffffffffffff' [ 141.476499][ T6039] overlayfs: missing 'lowerdir' [ 141.956763][ T6046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.906916][ T6048] hugetlbfs: syz.4.5 (6048): Using mlock ulimits for SHM_HUGETLB is obsolete [ 144.771260][ T6050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.197939][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.274565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.664754][ T6058] loop3: detected capacity change from 0 to 16 [ 146.803365][ T6058] erofs (device loop3): mounted with root inode @ nid 36. [ 146.916502][ T6066] loop5: detected capacity change from 0 to 256 [ 146.924065][ T6066] vfat: Unknown parameter '˜tf8' [ 148.259814][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 148.278965][ T6068] sctp: failed to load transform for md5: -2 [ 148.878041][ T6092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.994975][ T6107] loop0: detected capacity change from 0 to 512 [ 154.288134][ T6107] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.429116][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 154.429142][ T30] audit: type=1800 audit(1746048848.778:73): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="bus" dev="overlay" ino=99 res=0 errno=0 [ 154.482107][ T6107] EXT4-fs (loop0): 1 orphan inode deleted [ 154.492183][ T6107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.507877][ T2970] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.535385][ T2970] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 154.561886][ T6107] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.810138][ T6125] overlayfs: missing 'lowerdir' [ 156.387591][ T6133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.244716][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.734120][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 163.576307][ T5829] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 163.587990][ T5829] Bluetooth: hci2: Injecting HCI hardware error event [ 163.597411][ T5839] Bluetooth: hci2: hardware error 0x00 [ 165.224639][ T6169] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure [ 166.951721][ T6188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.936238][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 170.544580][ T6199] loop2: detected capacity change from 0 to 128 [ 176.010248][ T6234] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.018260][ T6234] overlayfs: failed to set xattr on upper [ 176.024357][ T6234] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.031415][ T6234] overlayfs: ...falling back to index=off. [ 176.037459][ T6234] overlayfs: ...falling back to uuid=null. [ 176.885765][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 176.976151][ T13] kworker/u8:1: attempt to access beyond end of device [ 176.976151][ T13] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 177.017463][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.017463][ T13] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 177.096654][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.096654][ T13] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 177.148009][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.148009][ T13] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 177.515672][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.515672][ T13] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 177.532134][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.532134][ T13] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 177.555912][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.555912][ T13] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 177.645866][ T13] kworker/u8:1: attempt to access beyond end of device [ 177.645866][ T13] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 178.447986][ T13] kworker/u8:1: attempt to access beyond end of device [ 178.447986][ T13] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 178.470314][ T13] kworker/u8:1: attempt to access beyond end of device [ 178.470314][ T13] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 181.239883][ T6257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.334495][ T2943] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] SMP KASAN NOPTI [ 183.346655][ T2943] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 183.355095][ T2943] CPU: 0 UID: 0 PID: 2943 Comm: kworker/u8:8 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 183.367276][ T2943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 183.377374][ T2943] Workqueue: events_unbound netfs_write_collection_worker [ 183.384632][ T2943] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 183.390232][ T2943] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 183.409884][ T2943] RSP: 0018:ffffc9000b517950 EFLAGS: 00010206 [ 183.415988][ T2943] RAX: 0000000000000023 RBX: 0000000000000001 RCX: dffffc0000000000 [ 183.424000][ T2943] RDX: 0000000000000006 RSI: ffffffff84cc4a70 RDI: 000000000000011e [ 183.432000][ T2943] RBP: ffffc9000b517a78 R08: 0000000000000005 R09: 0000000000000000 [ 183.440002][ T2943] R10: 0000000000000000 R11: ffff88802516822c R12: 000000000000001e [ 183.447995][ T2943] R13: 000000000000001e R14: 0000000000000000 R15: ffff8880251680a8 [ 183.455985][ T2943] FS: 0000000000000000(0000) GS:ffff8881249e6000(0000) knlGS:0000000000000000 [ 183.464936][ T2943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.471533][ T2943] CR2: 00007f0b89b7fab8 CR3: 0000000060762000 CR4: 0000000000350ef0 [ 183.479523][ T2943] Call Trace: [ 183.482808][ T2943] [ 183.485753][ T2943] netfs_retry_writes+0x166d/0x1a50 [ 183.490981][ T2943] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.496818][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.502479][ T2943] ? debug_object_activate+0x2ec/0x4c0 [ 183.507960][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.513625][ T2943] ? __lock_acquire+0xaa4/0x1ba0 [ 183.518619][ T2943] ? __pfx_netfs_retry_writes+0x10/0x10 [ 183.524215][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.529903][ T2943] ? rcu_is_watching+0x12/0xc0 [ 183.534697][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.540358][ T2943] ? register_lock_class+0x41/0x4c0 [ 183.545595][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.551253][ T2943] ? do_raw_spin_lock+0x12c/0x2b0 [ 183.556311][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.561973][ T2943] netfs_write_collection_worker+0x23fd/0x3830 [ 183.568191][ T2943] process_one_work+0x9cf/0x1b70 [ 183.573159][ T2943] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 183.579723][ T2943] ? __pfx_process_one_work+0x10/0x10 [ 183.585129][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.590802][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.596482][ T2943] ? assign_work+0x1a0/0x250 [ 183.601112][ T2943] worker_thread+0x6c8/0xf10 [ 183.605752][ T2943] ? __pfx_worker_thread+0x10/0x10 [ 183.610889][ T2943] kthread+0x3c5/0x780 [ 183.614978][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.619587][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.624205][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.628831][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.633439][ T2943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.639105][ T2943] ? rcu_is_watching+0x12/0xc0 [ 183.643901][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.648561][ T2943] ret_from_fork+0x48/0x80 [ 183.652999][ T2943] ? __pfx_kthread+0x10/0x10 [ 183.657615][ T2943] ret_from_fork_asm+0x1a/0x30 [ 183.662441][ T2943] [ 183.665464][ T2943] Modules linked in: [ 183.672380][ T2943] ---[ end trace 0000000000000000 ]--- [ 183.747088][ T2943] RIP: 0010:iov_iter_revert+0x2ec/0x5a0 [ 183.752826][ T2943] Code: ec 41 83 fd 1e 0f 87 3b 02 00 00 4b 8d bc 26 00 01 00 00 48 b9 00 00 00 00 00 fc ff df 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 08 38 d0 7f 08 84 c0 0f 85 02 02 00 00 47 0f b6 bc 26 00 [ 183.822386][ T2943] RSP: 0018:ffffc9000b517950 EFLAGS: 00010206 [ 183.830347][ T2943] RAX: 0000000000000023 RBX: 0000000000000001 RCX: dffffc0000000000 [ 183.839962][ T2943] RDX: 0000000000000006 RSI: ffffffff84cc4a70 RDI: 000000000000011e [ 183.848371][ T2943] RBP: ffffc9000b517a78 R08: 0000000000000005 R09: 0000000000000000 [ 183.856854][ T2943] R10: 0000000000000000 R11: ffff88802516822c R12: 000000000000001e [ 183.974378][ T2943] R13: 000000000000001e R14: 0000000000000000 R15: ffff8880251680a8 [ 183.982469][ T2943] FS: 0000000000000000(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 184.019488][ T2943] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.031739][ T2943] CR2: 00007f1392c83f98 CR3: 0000000028c2e000 CR4: 0000000000350ef0 [ 184.041030][ T2943] Kernel panic - not syncing: Fatal exception [ 184.047384][ T2943] Kernel Offset: disabled [ 184.051736][ T2943] Rebooting in 86400 seconds..