last executing test programs: 3m40.94680269s ago: executing program 1 (id=2): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') chroot(&(0x7f0000000040)='./file1\x00') setpgid(r0, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0282, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3m39.84311071s ago: executing program 1 (id=6): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES64=r0], 0xbc}, 0x1, 0x0, 0x0, 0x400440c0}, 0x20000000) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 3m24.422501777s ago: executing program 32 (id=6): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES64=r0], 0xbc}, 0x1, 0x0, 0x0, 0x400440c0}, 0x20000000) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 2m8.013983237s ago: executing program 4 (id=311): syz_emit_ethernet(0x6d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000371100fe800000eeffffff00000000000000bbfe8000000000000000000000000000aa"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m7.814657964s ago: executing program 4 (id=313): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x82fa, 0x0, '\x00U\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x42) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 2m7.592230011s ago: executing program 4 (id=314): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000"], 0x48) connect$netlink(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x2000000]}, 0x8) 2m6.078128233s ago: executing program 4 (id=319): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x36fe8a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40000, 0x0) 2m4.97471019s ago: executing program 4 (id=320): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@multicast2, @empty, 0x0, "881d3b24e009118e5e5c2bd5b64fb01582a1085fc53c43c4b776d30612334501", 0x1004000, 0x1, 0x1, 0x9}, 0x3c) 2m1.509913774s ago: executing program 4 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8948, &(0x7f0000000300)={'sit0\x00', 0x0}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 2m0.9370536s ago: executing program 33 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000180)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8948, &(0x7f0000000300)={'sit0\x00', 0x0}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 1m51.562689321s ago: executing program 0 (id=361): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.303560935s ago: executing program 0 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0xa}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fchown(r5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m49.400318147s ago: executing program 0 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x2) writev(r1, &(0x7f0000000c40)=[{0x0}, {0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000900)}], 0x4) 1m48.755282079s ago: executing program 0 (id=371): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) socket(0x11, 0x2, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 1m44.688019937s ago: executing program 0 (id=379): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000018c0)=""/193, 0xc1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 1m42.832452368s ago: executing program 0 (id=385): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x7fffffffffffffff) 1m27.517547997s ago: executing program 34 (id=385): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r1, 0x0, 0x0, 0x7fffffffffffffff) 59.476983003s ago: executing program 3 (id=500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) write$sequencer(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="920be005105700048106"], 0x21) 57.476932483s ago: executing program 3 (id=504): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0xb, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xf6}]}, 0x34}}, 0x8080) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}}, 0x40) 55.714978601s ago: executing program 3 (id=510): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x8, 0x9}, 'port0\x00', 0x8, 0x20020, 0x6, 0x3, 0x64, 0x0, 0x80, 0x0, 0x4, 0x66}) tkill(r0, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) 54.906094657s ago: executing program 3 (id=514): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3}, 0xc) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) 53.92665559s ago: executing program 3 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0x40}, 0x2) 53.169386426s ago: executing program 3 (id=520): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c6000000bf0900000000000055090100000000009500000000000000c3a0000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 52.250326667s ago: executing program 35 (id=520): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c6000000bf0900000000000055090100000000009500000000000000c3a0000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 23.874796354s ago: executing program 7 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18}, './file0\x00'}) creat(0x0, 0xecf86c37d53049e9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0xa}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fchown(r5, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f00005dc000/0x2000)=nil) 21.913269734s ago: executing program 7 (id=620): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) read$FUSE(r3, &(0x7f0000001940)={0x2020}, 0x2020) 21.709890082s ago: executing program 7 (id=624): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 21.560637754s ago: executing program 7 (id=627): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') 21.307840985s ago: executing program 7 (id=629): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x8201, 0x0, &(0x7f0000000880)}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0x0, &(0x7f0000000080)}, {0x0, 0x0, 0x0, 0x0}, {0xc, 0x0, 0x0, &(0x7f0000000340)}], 0x6}) 20.833905577s ago: executing program 7 (id=633): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x2, 0x0, 0x0, 0x0, {}, {}, {}, {0x1}, 0x0, 0x0, 0x0, 0x101}}}}) 19.841693938s ago: executing program 36 (id=633): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x2, 0x0, 0x0, 0x0, {}, {}, {}, {0x1}, 0x0, 0x0, 0x0, 0x101}}}}) 11.073944538s ago: executing program 2 (id=668): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001fc0)=""/4095, 0xfff}], 0x1) 11.022297984s ago: executing program 2 (id=670): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18}, './file0\x00'}) creat(0x0, 0xecf86c37d53049e9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0xa}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fchown(r5, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f00005dc000/0x2000)=nil) 8.78969378s ago: executing program 2 (id=675): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x8201, 0x0, &(0x7f0000000880)}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0x0, &(0x7f0000000080)}, {0x0, 0x0, 0x0, 0x0}, {0xc, 0x0, 0x0, &(0x7f0000000340)}], 0x6}) 7.37546388s ago: executing program 5 (id=680): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, r4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000008000000a001300000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/21], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r6, 0x5, 0x0, 0x0, @void, @value}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6012, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 6.50360552s ago: executing program 2 (id=684): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a40)={{0x1, 0x1, 0x18}, './file0\x00'}) creat(0x0, 0xecf86c37d53049e9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0xa}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fchown(r5, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmget(0x2, 0x2000, 0x1, &(0x7f00005dc000/0x2000)=nil) 6.304049782s ago: executing program 5 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(r10, 0x0, 0x0, 0x2604c8d5, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @remote}, 0x1c) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x37f, 0x148, 0x110, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e24], [0x4e20, 0x4e24], 0x8, 0x2, 0x1, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r13 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.635496819s ago: executing program 8 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 4.607133649s ago: executing program 8 (id=689): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') 4.379039854s ago: executing program 8 (id=690): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) 4.328831179s ago: executing program 6 (id=691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) munlockall() fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2}) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x3, @rand_addr=0x64010102}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010003007f00000100000000000000000000090000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 4.327932037s ago: executing program 5 (id=692): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3277c0, 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x3, &(0x7f0000000000)=0x1005, 0x6, 0x3) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0x4, @multicast, 'veth0_macvtap\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge_slave_1\x00'}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000040)={0xc, @raw_data="cf3c470cbabb2dd4078d44043bed1e1bcdb213ccf5ae59bd9012aed9fae59501cf0dd50d24db941b22a0f58d434f93141e017305224edcf9bc8f700597a0f5af5fc6aed7dd9d1f2e239da439a1c24f18e50df1d45d1686c03e859a037a344ca43b6dca2936e1cb368b5b8a96ff6cd2ea4cfbb1f5c515afef7947ab6b3bfcecebbcb38566e182264916319dbfc86794888a2db22ab7a9117b85eee94620f1247ade2306e46a6c900171a01504a302f2eb78cc5ab2e1456c6aaf855ba191a1e51b92ce3c049ebca4fd"}) 3.996480039s ago: executing program 8 (id=693): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x8201, 0x0, &(0x7f0000000880)}, {0x0, 0x0, 0x25, &(0x7f0000000000)="165b771dc6a0c55347477538b6b212469d98850e76339803c90589796cffae081e701e73ed"}, {0x0, 0x0, 0x0, &(0x7f0000000080)}, {0x0, 0x0, 0x0, 0x0}, {0xc, 0x0, 0x0, &(0x7f0000000340)}], 0x6}) 3.221949426s ago: executing program 5 (id=694): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, 0x0) tkill(r0, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.221552947s ago: executing program 6 (id=695): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008004"]) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, r4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000008000000a001300000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/21], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r6, 0x5, 0x0, 0x0, @void, @value}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6012, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 2.846384459s ago: executing program 5 (id=696): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r3, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) 2.248298746s ago: executing program 6 (id=697): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) io_setup(0x331f, &(0x7f0000000180)=0x0) io_submit(r0, 0x0, 0x0) 2.010383075s ago: executing program 6 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 1.880216459s ago: executing program 8 (id=699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8) 1.06686634s ago: executing program 2 (id=700): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) chdir(&(0x7f0000000140)='./bus\x00') 712.322967ms ago: executing program 6 (id=701): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 66.692222ms ago: executing program 8 (id=702): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) 66.299525ms ago: executing program 6 (id=703): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 30.416491ms ago: executing program 2 (id=704): r0 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ftruncate(r0, 0x200004) 0s ago: executing program 5 (id=705): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, 0x0) tkill(r0, 0x7) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 65.645660][ T5818] cgroup: Unknown subsys name 'net' [ 65.792595][ T5818] cgroup: Unknown subsys name 'cpuset' [ 65.800395][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.183176][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.684217][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.715503][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.723799][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.725050][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.731605][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.741235][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.746642][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.760996][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.765267][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.769600][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.776470][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.783776][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.799357][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.807412][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.819807][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.839215][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.846548][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.846833][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.854748][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.860839][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.869949][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.875620][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.885186][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.893118][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.900539][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.905765][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.914449][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.933580][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.951445][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.970680][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.412903][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.438862][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 70.453788][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.501622][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.615738][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.634240][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.641773][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.649701][ T5836] bridge_slave_0: entered allmulticast mode [ 70.656654][ T5836] bridge_slave_0: entered promiscuous mode [ 70.703876][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.711541][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.719335][ T5836] bridge_slave_1: entered allmulticast mode [ 70.726736][ T5836] bridge_slave_1: entered promiscuous mode [ 70.758078][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.768471][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.776664][ T5843] bridge_slave_0: entered allmulticast mode [ 70.786402][ T5843] bridge_slave_0: entered promiscuous mode [ 70.821204][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.844766][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.852762][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.861595][ T5843] bridge_slave_1: entered allmulticast mode [ 70.868595][ T5843] bridge_slave_1: entered promiscuous mode [ 70.884683][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.892123][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.900610][ T5838] bridge_slave_0: entered allmulticast mode [ 70.907290][ T5838] bridge_slave_0: entered promiscuous mode [ 70.915736][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.923361][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.930957][ T5838] bridge_slave_1: entered allmulticast mode [ 70.938004][ T5838] bridge_slave_1: entered promiscuous mode [ 70.954083][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.997382][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.004944][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.012601][ T5832] bridge_slave_0: entered allmulticast mode [ 71.020315][ T5832] bridge_slave_0: entered promiscuous mode [ 71.046790][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.060197][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.076564][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.084427][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.092109][ T5832] bridge_slave_1: entered allmulticast mode [ 71.099787][ T5832] bridge_slave_1: entered promiscuous mode [ 71.118337][ T5836] team0: Port device team_slave_0 added [ 71.133404][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.140962][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.149480][ T5828] bridge_slave_0: entered allmulticast mode [ 71.157440][ T5828] bridge_slave_0: entered promiscuous mode [ 71.175887][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.188404][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.209271][ T5836] team0: Port device team_slave_1 added [ 71.216083][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.224975][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.233581][ T5828] bridge_slave_1: entered allmulticast mode [ 71.241205][ T5828] bridge_slave_1: entered promiscuous mode [ 71.306561][ T5843] team0: Port device team_slave_0 added [ 71.324055][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.338541][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.350272][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.357381][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.384330][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.402764][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.415752][ T5843] team0: Port device team_slave_1 added [ 71.425963][ T5838] team0: Port device team_slave_0 added [ 71.466444][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.473732][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.506295][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.536745][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.566127][ T5838] team0: Port device team_slave_1 added [ 71.583781][ T5832] team0: Port device team_slave_0 added [ 71.614435][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.621831][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.648426][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.671257][ T5832] team0: Port device team_slave_1 added [ 71.677529][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.684629][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.710826][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.726196][ T5836] hsr_slave_0: entered promiscuous mode [ 71.732997][ T5836] hsr_slave_1: entered promiscuous mode [ 71.744750][ T5828] team0: Port device team_slave_0 added [ 71.751720][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.758733][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.785347][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.813340][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.820168][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.830925][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.838371][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.866838][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.895777][ T5828] team0: Port device team_slave_1 added [ 71.911284][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.918303][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.944525][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.970079][ T5847] Bluetooth: hci1: command tx timeout [ 71.970083][ T5833] Bluetooth: hci0: command tx timeout [ 71.970452][ T5833] Bluetooth: hci2: command tx timeout [ 71.976083][ T5847] Bluetooth: hci3: command tx timeout [ 72.013405][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.020479][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.046567][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.057272][ T5847] Bluetooth: hci4: command tx timeout [ 72.076768][ T5838] hsr_slave_0: entered promiscuous mode [ 72.083482][ T5838] hsr_slave_1: entered promiscuous mode [ 72.089867][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.097749][ T5838] Cannot create hsr debugfs directory [ 72.111036][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.118123][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.144659][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.157779][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.165131][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.192875][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.223365][ T5843] hsr_slave_0: entered promiscuous mode [ 72.230332][ T5843] hsr_slave_1: entered promiscuous mode [ 72.236554][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.244395][ T5843] Cannot create hsr debugfs directory [ 72.325075][ T5832] hsr_slave_0: entered promiscuous mode [ 72.331605][ T5832] hsr_slave_1: entered promiscuous mode [ 72.337749][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.345780][ T5832] Cannot create hsr debugfs directory [ 72.442552][ T5828] hsr_slave_0: entered promiscuous mode [ 72.451061][ T5828] hsr_slave_1: entered promiscuous mode [ 72.457607][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.466657][ T5828] Cannot create hsr debugfs directory [ 72.685181][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.712280][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.727911][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.757420][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.787219][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.811119][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.837936][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.862897][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.874494][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.897646][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.915392][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.927452][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.975785][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.988267][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.026075][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.035844][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.112481][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.128074][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.144153][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.163993][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.187978][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.270206][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.308205][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.318366][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.325776][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.372707][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.384988][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.392456][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.414968][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.422320][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.434636][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.456678][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.463850][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.515047][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.539931][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.563454][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.570781][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.593334][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.612343][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.642034][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.649737][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.692873][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.718865][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.732181][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739554][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.749148][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.758272][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.858222][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.865403][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.904002][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.952634][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.959880][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.049910][ T5847] Bluetooth: hci3: command tx timeout [ 74.055619][ T5847] Bluetooth: hci2: command tx timeout [ 74.056944][ T5144] Bluetooth: hci1: command tx timeout [ 74.063586][ T5847] Bluetooth: hci0: command tx timeout [ 74.087560][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.135852][ T5847] Bluetooth: hci4: command tx timeout [ 74.197471][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.248946][ T5836] veth0_vlan: entered promiscuous mode [ 74.313608][ T5836] veth1_vlan: entered promiscuous mode [ 74.358617][ T5838] veth0_vlan: entered promiscuous mode [ 74.415292][ T5838] veth1_vlan: entered promiscuous mode [ 74.433294][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.455247][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.496525][ T5836] veth0_macvtap: entered promiscuous mode [ 74.516577][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.532745][ T5836] veth1_macvtap: entered promiscuous mode [ 74.553044][ T5838] veth0_macvtap: entered promiscuous mode [ 74.613501][ T5838] veth1_macvtap: entered promiscuous mode [ 74.626942][ T5843] veth0_vlan: entered promiscuous mode [ 74.653177][ T5828] veth0_vlan: entered promiscuous mode [ 74.666892][ T5828] veth1_vlan: entered promiscuous mode [ 74.694323][ T5843] veth1_vlan: entered promiscuous mode [ 74.704600][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.722572][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.734656][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.747227][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.764523][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.778010][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.798625][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.807836][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822936][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.838691][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.854518][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.866036][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.894933][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.904169][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.914536][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.923601][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.978021][ T5843] veth0_macvtap: entered promiscuous mode [ 75.008339][ T5843] veth1_macvtap: entered promiscuous mode [ 75.040325][ T5828] veth0_macvtap: entered promiscuous mode [ 75.052455][ T5828] veth1_macvtap: entered promiscuous mode [ 75.065906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.081919][ T5832] veth0_vlan: entered promiscuous mode [ 75.088429][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.136555][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.148742][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.164640][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.177321][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.189819][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.200372][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.211352][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221714][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.232880][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.243907][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.255245][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.266451][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.297395][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.308132][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.318587][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.329642][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.340979][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.357206][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.361396][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.373552][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.378259][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.397717][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.408399][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.419363][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.430386][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.443924][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.452596][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453221][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.464770][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481595][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.484839][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.499703][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.529854][ T5832] veth1_vlan: entered promiscuous mode [ 75.550770][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.559762][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.568522][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.578784][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.640840][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.668279][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.679820][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.775042][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.784907][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.844853][ T5832] veth0_macvtap: entered promiscuous mode [ 75.854939][ T5832] veth1_macvtap: entered promiscuous mode [ 75.871173][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.881859][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.892069][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.905102][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.915066][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.926687][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.936967][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.947920][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959163][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.970456][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.981246][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.991340][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.002282][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.012286][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.022857][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.033045][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.043809][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.069500][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.125017][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134932][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.144471][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153814][ T5847] Bluetooth: hci0: command tx timeout [ 76.153964][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.350438][ T5144] Bluetooth: hci1: command tx timeout [ 76.356689][ T5144] Bluetooth: hci2: command tx timeout [ 76.449088][ T5144] Bluetooth: hci3: command tx timeout [ 76.454826][ T5144] Bluetooth: hci4: command tx timeout [ 76.783317][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.798716][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.809787][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.822024][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.874474][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.957867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.187883][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.195893][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.205892][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.214185][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.877924][ T5841] Bluetooth: hci0: command tx timeout [ 78.878138][ T5841] Bluetooth: hci4: command tx timeout [ 78.878514][ T5841] Bluetooth: hci3: command tx timeout [ 78.878697][ T5841] Bluetooth: hci2: command tx timeout [ 78.878849][ T5841] Bluetooth: hci1: command tx timeout [ 79.249978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.251253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.251467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.251855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.251919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.253089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.254240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.255745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.256328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.256635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.389623][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 79.389873][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 79.391617][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 79.391703][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 79.468334][ T5933] ceph: No mds server is up or the cluster is laggy [ 79.529441][ T5932] tty tty24: ldisc open failed (-12), clearing slot 23 [ 79.647197][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.872560][ T5950] support for the xor transformation has been removed. [ 81.897003][ T5200] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.417022][ T5976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.379537][ T5985] xt_connbytes: Forcing CT accounting to be enabled [ 83.389806][ T5985] Cannot find add_set index 0 as target [ 84.045710][ T5200] usb 5-1: device not accepting address 2, error -71 [ 87.336233][ T46] cfg80211: failed to load regulatory.db [ 88.738391][ T6029] xt_connbytes: Forcing CT accounting to be enabled [ 88.745194][ T6029] Cannot find add_set index 0 as target [ 89.275727][ T6033] Zero length message leads to an empty skb [ 93.079812][ T6062] Cannot find add_set index 0 as target [ 93.800278][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.828519][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.839466][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.848191][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.930204][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.959962][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.356058][ T6080] chnl_net:caif_netlink_parms(): no params data found [ 96.140331][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.158657][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.195667][ T6080] bridge_slave_0: entered allmulticast mode [ 96.209147][ T5841] Bluetooth: hci5: command tx timeout [ 96.313654][ T6080] bridge_slave_0: entered promiscuous mode [ 96.356549][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.544651][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.552983][ T6080] bridge_slave_1: entered allmulticast mode [ 97.273052][ T6080] bridge_slave_1: entered promiscuous mode [ 97.980054][ T6118] Cannot find add_set index 0 as target [ 98.110841][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.240305][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.365660][ T5841] Bluetooth: hci5: command tx timeout [ 99.424914][ T6080] team0: Port device team_slave_0 added [ 99.435337][ T6080] team0: Port device team_slave_1 added [ 100.449189][ T5841] Bluetooth: hci5: command tx timeout [ 101.072115][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.123708][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.309798][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.830800][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.838886][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.909804][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.942226][ T6158] Cannot find add_set index 0 as target [ 102.312406][ T5893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.714899][ T5841] Bluetooth: hci5: command tx timeout [ 102.804856][ T6166] loop2: detected capacity change from 0 to 7 [ 102.877678][ T6166] Dev loop2: unable to read RDB block 7 [ 102.881838][ T6080] hsr_slave_0: entered promiscuous mode [ 102.907425][ T6080] hsr_slave_1: entered promiscuous mode [ 102.924855][ T6166] loop2: unable to read partition table [ 102.939276][ T6166] loop2: partition table beyond EOD, truncated [ 102.945592][ T6166] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.099270][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.139100][ T6080] Cannot create hsr debugfs directory [ 103.304312][ T5893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.583023][ T5893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.773245][ T5893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.359242][ T5893] bridge_slave_1: left allmulticast mode [ 104.365248][ T5893] bridge_slave_1: left promiscuous mode [ 104.440774][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.628462][ T6189] overlayfs: missing 'lowerdir' [ 105.628567][ T5893] bridge_slave_0: left allmulticast mode [ 105.720529][ T5893] bridge_slave_0: left promiscuous mode [ 105.728255][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.272193][ T6197] xt_connbytes: Forcing CT accounting to be enabled [ 106.279013][ T6197] Cannot find add_set index 0 as target [ 109.438020][ T6224] overlayfs: missing 'lowerdir' [ 109.819418][ T6232] Cannot find add_set index 0 as target [ 111.794344][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.789647][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.868416][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.886555][ T6260] overlayfs: missing 'lowerdir' [ 112.900264][ T5893] bond0 (unregistering): Released all slaves [ 112.946695][ T6080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.140012][ T6080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.117171][ T6080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.384040][ T6080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.646072][ T5893] hsr_slave_0: left promiscuous mode [ 116.658647][ T5893] hsr_slave_1: left promiscuous mode [ 116.669834][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.679155][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.717805][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.733936][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.770487][ T5893] veth1_macvtap: left promiscuous mode [ 116.776640][ T5893] veth0_macvtap: left promiscuous mode [ 116.783547][ T5893] veth1_vlan: left promiscuous mode [ 116.801067][ T6307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.832719][ T5893] veth0_vlan: left promiscuous mode [ 116.944974][ T6309] overlayfs: missing 'lowerdir' [ 117.185334][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 117.837838][ T6319] loop2: detected capacity change from 0 to 7 [ 118.284913][ T6319] Dev loop2: unable to read RDB block 7 [ 118.295713][ T6319] loop2: unable to read partition table [ 118.310068][ T6319] loop2: partition table beyond EOD, truncated [ 118.316508][ T6319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.907806][ T6329] xt_connbytes: Forcing CT accounting to be enabled [ 118.920670][ T6329] Cannot find add_set index 0 as target [ 120.072993][ T5893] team0 (unregistering): Port device team_slave_1 removed [ 120.176258][ T5893] team0 (unregistering): Port device team_slave_0 removed [ 121.206618][ T6353] overlayfs: missing 'lowerdir' [ 121.914945][ T6365] loop2: detected capacity change from 0 to 7 [ 121.916393][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.922074][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.133'. [ 121.992746][ T6365] Dev loop2: unable to read RDB block 7 [ 121.995489][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.027508][ T6365] loop2: unable to read partition table [ 122.109401][ T6365] loop2: partition table beyond EOD, truncated [ 122.187388][ T6365] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.194153][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.204102][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.250777][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.257920][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.845583][ T29] audit: type=1800 audit(1736730334.602:2): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="tmpfs" ino=248 res=0 errno=0 [ 123.189619][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.714410][ T6408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.001493][ T6413] overlayfs: missing 'lowerdir' [ 124.171027][ T6080] veth0_vlan: entered promiscuous mode [ 124.213695][ T6080] veth1_vlan: entered promiscuous mode [ 125.677325][ T6080] veth0_macvtap: entered promiscuous mode [ 125.687679][ T6080] veth1_macvtap: entered promiscuous mode [ 125.811173][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.892885][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.929052][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.975516][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.009123][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.079125][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.109160][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.154687][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.188113][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.208002][ T6432] Cannot find add_set index 0 as target [ 126.230058][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.286696][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.328414][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.363583][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.425993][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.444251][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.454765][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.471814][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.485010][ T6449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.559031][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.597113][ T6080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.608588][ T6080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.623644][ T6080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.657480][ T6080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.878247][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.904049][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.946770][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.967630][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.088324][ T6459] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 127.683123][ T6473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.719215][ T6473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.837836][ T6539] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 130.968682][ T6542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.029044][ T6542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.160253][ T6546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.365696][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.372280][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.456345][ T5841] Bluetooth: Unknown LE signaling command 0x0f [ 133.462927][ T5841] Bluetooth: Wrong link type (-22) [ 134.969392][ T6599] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 134.978462][ T6599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.235969][ T6614] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 136.956330][ T6638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.968505][ T6638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.208506][ T6655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.397465][ T6661] overlayfs: missing 'lowerdir' [ 139.015835][ T6678] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 140.619214][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.708126][ T6704] overlayfs: missing 'lowerdir' [ 140.793629][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 140.839646][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.891050][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.935431][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.958023][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.982151][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.991718][ T25] usb 1-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 141.010184][ T25] usb 1-1: Product: syz [ 141.238394][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 141.259185][ T25] usbtmc 1-1:16.0: can't read capabilities [ 141.445797][ T25] usb 1-1: USB disconnect, device number 2 [ 141.695792][ T6739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.185940][ T6748] loop2: detected capacity change from 0 to 7 [ 142.203496][ T6748] Dev loop2: unable to read RDB block 7 [ 142.229016][ T6748] loop2: unable to read partition table [ 142.235199][ T6748] loop2: partition table beyond EOD, truncated [ 142.259201][ T6748] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.485029][ T6753] overlayfs: missing 'lowerdir' [ 142.610863][ T6757] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.209510][ T6772] process 'syz.2.214' launched '/dev/fd/7' with NULL argv: empty string added [ 146.148410][ T6798] overlayfs: missing 'workdir' [ 146.237611][ T6803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.854100][ T6815] netlink: 372 bytes leftover after parsing attributes in process `syz.3.228'. [ 146.930802][ T6816] syz_tun: entered allmulticast mode [ 147.044368][ T6813] syz_tun: left allmulticast mode [ 148.088314][ T6829] trusted_key: encrypted_key: insufficient parameters specified [ 149.201419][ T6836] fuse: Unknown parameter '0x0000000000000006' [ 149.514060][ T6848] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 149.610564][ T6853] overlayfs: missing 'workdir' [ 149.814045][ T6860] loop2: detected capacity change from 0 to 7 [ 149.902731][ T6860] Dev loop2: unable to read RDB block 7 [ 149.918605][ T6860] loop2: unable to read partition table [ 149.949645][ T6860] loop2: partition table beyond EOD, truncated [ 150.001846][ T6860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.912359][ T5206] Dev loop2: unable to read RDB block 7 [ 150.928086][ T5206] loop2: unable to read partition table [ 150.945500][ T5206] loop2: partition table beyond EOD, truncated [ 151.199985][ T6876] sp0: Synchronizing with TNC [ 152.337979][ T6898] overlayfs: missing 'workdir' [ 152.419261][ T6893] syz_tun: entered allmulticast mode [ 152.544728][ T6902] dccp_close: ABORT with 50 bytes unread [ 152.768470][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 155.079765][ T6947] syz_tun: entered allmulticast mode [ 155.089056][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.127304][ T6946] syz_tun: left allmulticast mode [ 156.019044][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 156.037825][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 156.103359][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 156.155524][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.178232][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.372400][ T46] usb 5-1: Product: syz [ 156.377502][ T46] usb 5-1: Manufacturer: syz [ 157.083940][ T46] usb 5-1: SerialNumber: syz [ 157.118259][ T46] usb 5-1: config 0 descriptor?? [ 157.163183][ T46] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.208862][ T46] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 157.791397][ T46] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 157.798822][ T46] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 158.134936][ T7002] syz.0.276 (7002): /proc/6992/oom_adj is deprecated, please use /proc/6992/oom_score_adj instead. [ 158.859070][ T46] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 158.869103][ T46] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 158.880995][ T46] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 158.909413][ T7007] syz_tun: entered allmulticast mode [ 158.950235][ T7006] syz_tun: left allmulticast mode [ 159.430755][ T7019] xt_l2tp: invalid flags combination: c [ 161.391025][ T46] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 161.411519][ T46] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 161.463048][ T46] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 161.500331][ T46] usb 5-1: USB disconnect, device number 4 [ 163.891449][ T7081] loop2: detected capacity change from 0 to 7 [ 164.022339][ T7075] syz_tun: entered allmulticast mode [ 164.032810][ T7073] syz_tun: left allmulticast mode [ 165.067580][ T7081] Dev loop2: unable to read RDB block 7 [ 165.089438][ T7086] xt_l2tp: invalid flags combination: c [ 165.773687][ T7087] syz_tun: entered allmulticast mode [ 166.228510][ T7081] loop2: unable to read partition table [ 166.285122][ T7081] loop2: partition table beyond EOD, truncated [ 166.470695][ T7081] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.728235][ T5206] Dev loop2: unable to read RDB block 7 [ 166.787846][ T5206] loop2: unable to read partition table [ 166.894830][ T5206] loop2: partition table beyond EOD, truncated [ 167.351292][ T7098] ALSA: seq fatal error: cannot create timer (-19) [ 168.785876][ T7154] loop2: detected capacity change from 0 to 7 [ 168.789764][ T7149] input: syz0 as /devices/virtual/input/input35 [ 168.796366][ T7154] Dev loop2: unable to read RDB block 7 [ 168.805315][ T7154] loop2: unable to read partition table [ 168.812133][ T7154] loop2: partition table beyond EOD, truncated [ 168.819142][ T7154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.218768][ T29] audit: type=1326 audit(1736730380.992:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.296495][ T29] audit: type=1326 audit(1736730380.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.358322][ T29] audit: type=1326 audit(1736730381.002:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.417914][ T29] audit: type=1326 audit(1736730381.002:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.470547][ T29] audit: type=1326 audit(1736730381.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.506273][ T29] audit: type=1326 audit(1736730381.002:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.736591][ T29] audit: type=1326 audit(1736730381.012:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.829262][ T29] audit: type=1326 audit(1736730381.012:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 169.854643][ T29] audit: type=1326 audit(1736730381.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbbefd85d29 code=0x7ffc0000 [ 170.046321][ T29] audit: type=1326 audit(1736730381.052:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.4.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbbefd85d63 code=0x7ffc0000 [ 172.632100][ T7218] lo speed is unknown, defaulting to 1000 [ 172.638523][ T7218] lo speed is unknown, defaulting to 1000 [ 172.647723][ T7218] lo speed is unknown, defaulting to 1000 [ 172.661115][ T7218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.674416][ T7218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.709292][ T7218] lo speed is unknown, defaulting to 1000 [ 172.719349][ T7218] lo speed is unknown, defaulting to 1000 [ 172.732813][ T7218] lo speed is unknown, defaulting to 1000 [ 172.742860][ T7218] lo speed is unknown, defaulting to 1000 [ 172.751782][ T7218] lo speed is unknown, defaulting to 1000 [ 172.817338][ T7221] xt_socket: unknown flags 0x50 [ 174.622740][ T7235] loop2: detected capacity change from 0 to 7 [ 174.636211][ T7235] Dev loop2: unable to read RDB block 7 [ 174.642382][ T7235] loop2: unable to read partition table [ 174.655857][ T7235] loop2: partition table beyond EOD, truncated [ 174.719594][ T7235] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.087894][ T7256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.099364][ T7256] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 177.384365][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.502426][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 177.789084][ T5911] usb 6-1: device descriptor read/64, error -71 [ 177.952383][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.477489][ T7267] xt_connbytes: Forcing CT accounting to be enabled [ 178.485948][ T7267] Cannot find add_set index 0 as target [ 178.692232][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.717336][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.871839][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.882629][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.900311][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.909328][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.917624][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.992418][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.048371][ T7273] lo speed is unknown, defaulting to 1000 [ 180.056256][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 180.138480][ T7293] loop2: detected capacity change from 0 to 7 [ 180.205862][ T5834] Dev loop2: unable to read RDB block 7 [ 180.215089][ T5834] loop2: unable to read partition table [ 180.232716][ T5834] loop2: partition table beyond EOD, truncated [ 180.286045][ T7293] Dev loop2: unable to read RDB block 7 [ 180.573694][ T7293] loop2: unable to read partition table [ 180.718177][ T7293] loop2: partition table beyond EOD, truncated [ 180.729343][ T12] bridge_slave_1: left allmulticast mode [ 180.735229][ T12] bridge_slave_1: left promiscuous mode [ 180.751918][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.818747][ T7293] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.954208][ T7303] fuse: Bad value for 'user_id' [ 181.028744][ T5841] Bluetooth: hci1: command tx timeout [ 181.053227][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 181.053281][ T29] audit: type=1800 audit(1736730392.812:74): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name="file1" dev="tmpfs" ino=414 res=0 errno=0 [ 181.136446][ T12] bridge_slave_0: left allmulticast mode [ 181.143294][ T7303] fuse: Bad value for 'user_id' [ 181.148532][ T7308] Cannot find add_set index 0 as target [ 181.193664][ T12] bridge_slave_0: left promiscuous mode [ 181.291393][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.216919][ T5841] Bluetooth: hci1: command tx timeout [ 183.983387][ T7337] netlink: 464 bytes leftover after parsing attributes in process `syz.2.356'. [ 184.175151][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.206193][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.236944][ T12] bond0 (unregistering): Released all slaves [ 184.412500][ T12] IPVS: stopping master sync thread 6459 ... [ 184.508132][ T7317] syz_tun: entered allmulticast mode [ 184.518531][ T7322] syz_tun: left allmulticast mode [ 185.253738][ T5841] Bluetooth: hci1: command tx timeout [ 185.314370][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.363'. [ 185.314462][ T7357] fuse: Bad value for 'user_id' [ 185.329599][ T7357] fuse: Bad value for 'user_id' [ 185.348113][ T29] audit: type=1800 audit(1736730397.122:75): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.361" name="file1" dev="tmpfs" ino=425 res=0 errno=0 [ 185.614506][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.644577][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.794028][ T7273] bridge_slave_0: entered allmulticast mode [ 185.961423][ T7273] bridge_slave_0: entered promiscuous mode [ 186.062208][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.087620][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.131259][ T7273] bridge_slave_1: entered allmulticast mode [ 186.182698][ T7273] bridge_slave_1: entered promiscuous mode [ 187.366960][ T5841] Bluetooth: hci1: command tx timeout [ 187.907197][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.996972][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.098035][ T12] hsr_slave_0: left promiscuous mode [ 188.253633][ T12] hsr_slave_1: left promiscuous mode [ 188.324781][ T7401] netlink: 'syz.0.371': attribute type 3 has an invalid length. [ 188.339114][ T7401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.371'. [ 188.343621][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.525406][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.731591][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.737638][ T7405] fuse: Bad value for 'user_id' [ 188.740100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.751222][ T7405] fuse: Bad value for 'user_id' [ 188.923198][ T29] audit: type=1800 audit(1736730400.702:76): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.373" name="file1" dev="tmpfs" ino=273 res=0 errno=0 [ 188.923392][ T12] veth1_macvtap: left promiscuous mode [ 188.955274][ T12] veth0_macvtap: left promiscuous mode [ 188.961356][ T12] veth1_vlan: left promiscuous mode [ 188.967305][ T12] veth0_vlan: left promiscuous mode [ 190.168229][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.223842][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.903922][ T7273] team0: Port device team_slave_0 added [ 191.123800][ T7273] team0: Port device team_slave_1 added [ 191.191735][ T7398] syz_tun: entered allmulticast mode [ 191.903258][ T7402] syz_tun: left allmulticast mode [ 192.017779][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 193.740884][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.748985][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.776062][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.792064][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.802685][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.830650][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.134458][ T7273] hsr_slave_0: entered promiscuous mode [ 194.223646][ T7273] hsr_slave_1: entered promiscuous mode [ 194.860444][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.867125][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.929237][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 196.953193][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 196.962701][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 198.318716][ T7273] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.490701][ T7273] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.531506][ T7273] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.539899][ T7500] loop2: detected capacity change from 0 to 7 [ 198.611342][ T7500] Dev loop2: unable to read RDB block 7 [ 198.617198][ T7500] loop2: unable to read partition table [ 198.625426][ T7500] loop2: partition table beyond EOD, truncated [ 198.632384][ T7500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 198.646036][ T7273] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.965311][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.982870][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.014945][ T7273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.026012][ T7273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.081871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.089118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.120585][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.128091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.284009][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.290655][ T7273] veth0_vlan: entered promiscuous mode [ 201.302279][ T7273] veth1_vlan: entered promiscuous mode [ 201.541225][ T7273] veth0_macvtap: entered promiscuous mode [ 201.634956][ T29] audit: type=1800 audit(1736730413.412:77): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.408" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 201.734586][ T7273] veth1_macvtap: entered promiscuous mode [ 202.503578][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.536722][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.612491][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.652874][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.846662][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.850554][ T7569] loop2: detected capacity change from 0 to 7 [ 202.857925][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.874769][ T7569] Dev loop2: unable to read RDB block 7 [ 202.878699][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.880531][ T7569] loop2: unable to read partition table [ 202.891820][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.188212][ T7569] loop2: partition table beyond EOD, truncated [ 203.264759][ T7569] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.379661][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.618146][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.699046][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.709456][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.724146][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.737165][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.749348][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.797353][ T7273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.822296][ T7273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.846011][ T7577] misc userio: Invalid payload size [ 203.874413][ T7577] misc userio: No port type given on /dev/userio [ 203.885839][ T7577] misc userio: The device must be registered before sending interrupts [ 203.909658][ T7577] misc userio: The device must be registered before sending interrupts [ 203.936157][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.984834][ T7273] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.014714][ T7273] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.044554][ T7273] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.057608][ T7273] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.725565][ T7585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.806199][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.832125][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.876169][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.891845][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.240663][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 206.961525][ T7610] 9pnet: Unknown protocol version 9p200 [ 206.968866][ T7610] siw: device registration error -23 [ 208.429534][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 209.254998][ T5883] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 209.265288][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.274109][ T5883] usb 6-1: Product: syz [ 210.130244][ T5883] usb 6-1: config 0 descriptor?? [ 210.153204][ T5883] usb 6-1: can't set config #0, error -71 [ 210.169598][ T5883] usb 6-1: USB disconnect, device number 4 [ 210.193118][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.267539][ T5144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.276363][ T5144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.285479][ T5144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.355854][ T7643] loop9: detected capacity change from 0 to 7 [ 210.359899][ T5144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.370929][ T5144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.431194][ T7643] Dev loop9: unable to read RDB block 7 [ 210.441179][ T7643] loop9: unable to read partition table [ 210.497162][ T7643] loop9: partition table beyond EOD, truncated [ 210.520071][ T7643] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.532942][ T7634] lo speed is unknown, defaulting to 1000 [ 210.976447][ T7658] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.988681][ T7658] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 212.326654][ T6326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.601216][ T5847] Bluetooth: hci2: command tx timeout [ 212.899229][ T6326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.036699][ T7685] loop2: detected capacity change from 0 to 7 [ 213.052200][ T7685] Dev loop2: unable to read RDB block 7 [ 213.060973][ T6326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.065625][ T7685] loop2: unable to read partition table [ 213.099482][ T7685] loop2: partition table beyond EOD, truncated [ 213.116306][ T7685] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.334448][ T5206] Dev loop2: unable to read RDB block 7 [ 213.355021][ T5206] loop2: unable to read partition table [ 213.382325][ T5206] loop2: partition table beyond EOD, truncated [ 213.576730][ T6326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.000245][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 214.554878][ T7705] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.566835][ T7705] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 214.709173][ T5847] Bluetooth: hci2: command tx timeout [ 215.252825][ T6326] bridge_slave_1: left allmulticast mode [ 215.258614][ T6326] bridge_slave_1: left promiscuous mode [ 215.279154][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.316776][ T6326] bridge_slave_0: left allmulticast mode [ 215.324691][ T6326] bridge_slave_0: left promiscuous mode [ 215.339687][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.550727][ T5144] Bluetooth: hci2: command tx timeout [ 217.556656][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 217.719678][ T7734] loop2: detected capacity change from 0 to 7 [ 217.727105][ T7734] Dev loop2: unable to read RDB block 7 [ 217.756084][ T7734] loop2: unable to read partition table [ 217.763319][ T7734] loop2: partition table beyond EOD, truncated [ 217.773596][ T7734] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.587612][ T5847] Bluetooth: hci2: command tx timeout [ 220.149515][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.201926][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.256345][ T6326] bond0 (unregistering): Released all slaves [ 221.008244][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.018126][ T6326] IPVS: stopping master sync thread 6848 ... [ 221.205446][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.214379][ T7634] bridge_slave_0: entered allmulticast mode [ 221.221652][ T7634] bridge_slave_0: entered promiscuous mode [ 221.232481][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.243522][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.251901][ T7634] bridge_slave_1: entered allmulticast mode [ 221.259847][ T7634] bridge_slave_1: entered promiscuous mode [ 221.448667][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.460715][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.647035][ T7634] team0: Port device team_slave_0 added [ 221.826583][ T7634] team0: Port device team_slave_1 added [ 222.042527][ T6326] hsr_slave_0: left promiscuous mode [ 222.565860][ T6326] hsr_slave_1: left promiscuous mode [ 222.573229][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.612200][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.670236][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.689143][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.767253][ T6326] veth1_macvtap: left promiscuous mode [ 222.777255][ T6326] veth0_macvtap: left promiscuous mode [ 222.794406][ T6326] veth1_vlan: left promiscuous mode [ 222.809602][ T6326] veth0_vlan: left promiscuous mode [ 224.227299][ T7788] loop2: detected capacity change from 0 to 7 [ 224.262472][ T7788] Dev loop2: unable to read RDB block 7 [ 224.268442][ T7788] loop2: unable to read partition table [ 224.276697][ T7788] loop2: partition table beyond EOD, truncated [ 224.283341][ T7788] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.884942][ T7796] insert transport fail, errno -7 [ 226.042579][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 226.200939][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 226.733481][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.741181][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.775962][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.832966][ T5880] lo speed is unknown, defaulting to 1000 [ 226.931921][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.945669][ T5880] infiniband syz2: ib_query_port failed (-19) [ 226.993350][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.053021][ T7809] overlayfs: workdir and upperdir must be separate subtrees [ 227.064470][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.104364][ T7811] fuse: Bad value for 'rootmode' [ 227.136681][ T29] audit: type=1800 audit(1736730438.912:78): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="tmpfs" ino=647 res=0 errno=0 [ 227.157171][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.268870][ T7634] hsr_slave_0: entered promiscuous mode [ 227.308622][ T7634] hsr_slave_1: entered promiscuous mode [ 227.345345][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.888435][ T7634] Cannot create hsr debugfs directory [ 228.328364][ T7634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.340875][ T7634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 228.367579][ T7634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.383688][ T7634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.037507][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.051292][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.075394][ T7634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.086233][ T7634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.118825][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.126064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.144719][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.152052][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.229854][ T7835] loop2: detected capacity change from 0 to 7 [ 229.276116][ T7835] Dev loop2: unable to read RDB block 7 [ 229.282975][ T7835] loop2: unable to read partition table [ 229.290080][ T7835] loop2: partition table beyond EOD, truncated [ 229.299171][ T7835] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.494763][ T7842] netlink: 'syz.3.473': attribute type 3 has an invalid length. [ 229.563070][ T7842] netlink: 'syz.3.473': attribute type 3 has an invalid length. [ 229.603203][ T7844] bridge_slave_0: left allmulticast mode [ 229.613237][ T7844] bridge_slave_0: left promiscuous mode [ 229.619562][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.847424][ T7844] bridge_slave_1: left allmulticast mode [ 229.895727][ T7844] bridge_slave_1: left promiscuous mode [ 229.938414][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.015548][ T7844] bond0: (slave bond_slave_0): Releasing backup interface [ 230.067098][ T7844] bond0: (slave bond_slave_1): Releasing backup interface [ 230.173103][ T7844] team0: Port device team_slave_0 removed [ 230.213948][ T7844] team0: Port device team_slave_1 removed [ 230.233108][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.392214][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.018064][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.031726][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.216551][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.645084][ T7882] loop2: detected capacity change from 0 to 7 [ 232.680029][ T7882] Dev loop2: unable to read RDB block 7 [ 232.698487][ T7882] loop2: unable to read partition table [ 232.708078][ T7882] loop2: partition table beyond EOD, truncated [ 232.715079][ T7882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.739623][ T7634] veth0_vlan: entered promiscuous mode [ 232.752510][ T7634] veth1_vlan: entered promiscuous mode [ 232.783695][ T7634] veth0_macvtap: entered promiscuous mode [ 232.793137][ T7634] veth1_macvtap: entered promiscuous mode [ 232.810329][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.821360][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.831478][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.842656][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.852874][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.863807][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.876540][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.933740][ T5206] Dev loop2: unable to read RDB block 7 [ 232.939555][ T5206] loop2: unable to read partition table [ 232.945490][ T5206] loop2: partition table beyond EOD, truncated [ 232.970477][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.986862][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.004561][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.046559][ T7892] xt_hashlimit: size too large, truncated to 1048576 [ 233.068991][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.195552][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.268868][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.287619][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.438599][ T7902] misc userio: Invalid payload size [ 233.444980][ T7902] misc userio: No port type given on /dev/userio [ 233.466963][ T7902] misc userio: The device must be registered before sending interrupts [ 233.499955][ T7634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.521898][ T7634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.839399][ T7634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.848536][ T7634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.376254][ T7916] syz_tun: entered allmulticast mode [ 235.504217][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.562893][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.667676][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.691326][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.080762][ T7928] misc userio: Invalid payload size [ 236.148310][ T7928] misc userio: No port type given on /dev/userio [ 236.173509][ T7928] misc userio: The device must be registered before sending interrupts [ 236.206892][ T7928] misc userio: The device must be registered before sending interrupts [ 236.755585][ T7942] loop2: detected capacity change from 0 to 7 [ 236.802462][ T7942] Dev loop2: unable to read RDB block 7 [ 236.808477][ T7942] loop2: unable to read partition table [ 236.899387][ T7942] loop2: partition table beyond EOD, truncated [ 236.971590][ T7942] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.074740][ T7947] fuse: Bad value for 'rootmode' [ 237.386128][ T29] audit: type=1800 audit(1736730448.982:79): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file1" dev="tmpfs" ino=715 res=0 errno=0 [ 237.728522][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.499'. [ 237.737659][ T7959] netlink: 72 bytes leftover after parsing attributes in process `syz.7.499'. [ 238.465374][ T7961] syz_tun: entered allmulticast mode [ 239.417225][ T7965] capability: warning: `syz.6.501' uses 32-bit capabilities (legacy support in use) [ 240.073604][ T7969] syz.7.502 uses obsolete (PF_INET,SOCK_PACKET) [ 240.177504][ T7975] misc userio: Invalid payload size [ 240.183588][ T7975] misc userio: No port type given on /dev/userio [ 240.190813][ T7975] misc userio: The device must be registered before sending interrupts [ 240.200025][ T7975] misc userio: The device must be registered before sending interrupts [ 241.733235][ T7997] netlink: 'syz.7.511': attribute type 10 has an invalid length. [ 241.901053][ T7997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.998641][ T8012] ======================================================= [ 241.998641][ T8012] WARNING: The mand mount option has been deprecated and [ 241.998641][ T8012] and is ignored by this kernel. Remove the mand [ 241.998641][ T8012] option from the mount to silence this warning. [ 241.998641][ T8012] ======================================================= [ 242.731863][ T8015] block device autoloading is deprecated and will be removed. [ 242.890368][ T7997] xt_ecn: cannot match TCP bits for non-tcp packets [ 243.247962][ T5838] syz_tun (unregistering): left allmulticast mode [ 243.444161][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.518'. [ 244.330862][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.608239][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.925048][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.397529][ T29] audit: type=1800 audit(1736730457.162:80): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.525" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 245.864526][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.790881][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.821535][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.849510][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.896106][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.959159][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.978550][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.121127][ T8085] misc userio: Invalid payload size [ 249.126988][ T8085] misc userio: The device must be registered before sending interrupts [ 249.136078][ T8085] misc userio: The device must be registered before sending interrupts [ 249.798445][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.533'. [ 250.021364][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 250.028042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.036020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.043917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.051864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.059731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.067639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.075689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.084841][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.084870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.100912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.109420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.117303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.125176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.129261][ T5833] Bluetooth: hci0: command tx timeout [ 250.133099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.146572][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.154498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.162463][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.170471][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.178300][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.186218][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.194067][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.202038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.210008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.217896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.225823][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.233851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.241741][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.249661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.257506][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.265508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.273487][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.281453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.289333][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.297261][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.305348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.313301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.321300][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.329376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.337307][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.345868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.353751][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.362031][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.369937][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.378234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.386279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 250.394655][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 250.402578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 252.337715][ T5833] Bluetooth: hci0: command tx timeout [ 252.800088][ T8123] misc userio: Invalid payload size [ 252.823866][ T8123] misc userio: The device must be registered before sending interrupts [ 253.700150][ T8123] misc userio: The device must be registered before sending interrupts [ 254.495253][ T5833] Bluetooth: hci0: command tx timeout [ 255.454838][ T12] bond0 (unregistering): Released all slaves [ 255.732456][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 256.231873][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.243160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.422358][ T12] IPVS: stopping master sync thread 6539 ... [ 256.617566][ T5833] Bluetooth: hci0: command tx timeout [ 257.166381][ T8161] misc userio: Invalid payload size [ 257.635898][ T8167] random: crng reseeded on system resumption [ 258.082585][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.099257][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.124264][ T8071] bridge_slave_0: entered allmulticast mode [ 258.146133][ T8071] bridge_slave_0: entered promiscuous mode [ 258.219729][ T12] hsr_slave_0: left promiscuous mode [ 258.226235][ T12] hsr_slave_1: left promiscuous mode [ 258.318856][ T12] veth1_macvtap: left promiscuous mode [ 258.365830][ T12] veth0_macvtap: left promiscuous mode [ 258.400022][ T12] veth1_vlan: left promiscuous mode [ 258.405401][ T12] veth0_vlan: left promiscuous mode [ 260.530850][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 260.698724][ T8224] misc userio: Invalid payload size [ 263.291350][ T8252] misc userio: Invalid payload size [ 263.472613][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.500738][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.508063][ T8071] bridge_slave_1: entered allmulticast mode [ 263.540142][ T8071] bridge_slave_1: entered promiscuous mode [ 263.672714][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.725376][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.458407][ T8071] team0: Port device team_slave_0 added [ 264.521157][ T8071] team0: Port device team_slave_1 added [ 264.596597][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.709368][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.474567][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.690055][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.697064][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.731965][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.795271][ T8283] fuse: Bad value for 'fd' [ 265.859071][ T29] audit: type=1800 audit(1736730477.572:81): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.588" name="file1" dev="tmpfs" ino=139 res=0 errno=0 [ 265.971711][ T8071] hsr_slave_0: entered promiscuous mode [ 265.977914][ T8071] hsr_slave_1: entered promiscuous mode [ 265.979604][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.979697][ T8071] Cannot create hsr debugfs directory [ 266.342933][ T8300] xt_l2tp: invalid flags combination: c [ 267.868641][ T8313] misc userio: Invalid payload size [ 269.243998][ T8071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 269.327503][ T8071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.344556][ T8071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.401393][ T8071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.651194][ T8332] fuse: Bad value for 'fd' [ 269.686468][ T29] audit: type=1800 audit(1736730481.462:82): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.600" name="file1" dev="tmpfs" ino=821 res=0 errno=0 [ 269.751404][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.821755][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.848723][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.855951][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.043201][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.050392][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.470303][ T8071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.480817][ T8071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.451373][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.994112][ T8071] veth0_vlan: entered promiscuous mode [ 271.995068][ T8387] misc userio: Invalid payload size [ 272.028728][ T8071] veth1_vlan: entered promiscuous mode [ 272.132110][ T8071] veth0_macvtap: entered promiscuous mode [ 272.180788][ T8071] veth1_macvtap: entered promiscuous mode [ 272.221372][ T8389] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.233517][ T8389] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 272.342642][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.355382][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.368763][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.389839][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.402402][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.415057][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.431388][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.443950][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.461124][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.508439][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.524821][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.536084][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.547820][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.571957][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.583591][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.594183][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.605459][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.653032][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.827742][ T8071] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.837334][ T8071] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.846762][ T8071] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.856248][ T8071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.421456][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.436169][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.578594][ T6326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.669554][ T6326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.762442][ T8428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.264923][ T8442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 275.276113][ T8442] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.377299][ T8446] misc userio: Invalid payload size [ 276.713602][ T7188] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.868262][ T7188] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.241947][ T7188] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.437178][ T8487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.448752][ T8487] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 277.582344][ T7188] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.962734][ T7188] bridge_slave_1: left allmulticast mode [ 277.990106][ T7188] bridge_slave_1: left promiscuous mode [ 278.011082][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.036421][ T7188] bridge_slave_0: left allmulticast mode [ 278.057008][ T7188] bridge_slave_0: left promiscuous mode [ 278.089687][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.191013][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.202284][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.216775][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.241907][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.255040][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.263663][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.203660][ T8537] fuse: Unknown parameter '00000000000000000006' [ 280.262372][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.648'. [ 280.309846][ T5847] Bluetooth: hci2: command tx timeout [ 281.089760][ T8534] delete_channel: no stack [ 281.658822][ T8552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.670435][ T8552] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 281.761716][ T7188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.779493][ T7188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.798597][ T7188] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 281.816694][ T7188] bond0 (unregistering): Released all slaves [ 282.162700][ T8545] syz_tun: entered allmulticast mode [ 282.389418][ T5847] Bluetooth: hci2: command tx timeout [ 282.424755][ T29] audit: type=1800 audit(1736730494.192:83): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.653" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 282.945737][ T7188] hsr_slave_0: left promiscuous mode [ 282.955651][ T7188] hsr_slave_1: left promiscuous mode [ 282.966659][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.979552][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.020333][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.029699][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.061610][ T7188] veth1_macvtap: left promiscuous mode [ 283.086129][ T7188] veth0_macvtap: left promiscuous mode [ 283.100800][ T7188] veth1_vlan: left promiscuous mode [ 283.127631][ T7188] veth0_vlan: left promiscuous mode [ 283.884158][ T8588] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 283.895745][ T8588] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.449098][ T5847] Bluetooth: hci2: command tx timeout [ 286.138288][ T7188] team0 (unregistering): Port device team_slave_1 removed [ 286.211553][ T7188] team0 (unregistering): Port device team_slave_0 removed [ 286.529169][ T5847] Bluetooth: hci2: command tx timeout [ 288.214265][ T8638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.226106][ T8638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.192077][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 289.269522][ T8645] overlayfs: failed to resolve './file1': -2 [ 290.015086][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.028099][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.069540][ T8517] bridge_slave_0: entered allmulticast mode [ 290.076934][ T8517] bridge_slave_0: entered promiscuous mode [ 290.086849][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.103772][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.111504][ T8517] bridge_slave_1: entered allmulticast mode [ 290.118674][ T8517] bridge_slave_1: entered promiscuous mode [ 290.444292][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.487524][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.627694][ T8684] netlink: 'syz.5.686': attribute type 10 has an invalid length. [ 290.841907][ T8517] team0: Port device team_slave_0 added [ 290.930547][ T8684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 290.975632][ T8517] team0: Port device team_slave_1 added [ 291.099634][ T8683] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.170894][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.336294][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.622177][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.144650][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.186166][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.280903][ T8703] overlayfs: failed to resolve './file1': -2 [ 292.287229][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.614519][ T8517] hsr_slave_0: entered promiscuous mode [ 292.656037][ T8517] hsr_slave_1: entered promiscuous mode [ 292.679971][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.724426][ T8517] Cannot create hsr debugfs directory [ 292.734814][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.742726][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.775149][ T8715] bridge0: entered allmulticast mode [ 293.941975][ T8517] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 293.965556][ T8517] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 293.975601][ T8517] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 294.003011][ T8517] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 294.222676][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.278863][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.315544][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.322828][ T7188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.580328][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.587478][ T7188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.485363][ T8768] overlayfs: failed to resolve './file1': -2 [ 296.668015][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.816511][ T8774] [ 296.818898][ T8774] ====================================================== [ 296.825928][ T8774] WARNING: possible circular locking dependency detected [ 296.832968][ T8774] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 296.839688][ T8774] ------------------------------------------------------ [ 296.846727][ T8774] syz.6.703/8774 is trying to acquire lock: [ 296.852634][ T8774] ffff8880636e8d48 (vm_lock){++++}-{0:0}, at: binder_alloc_free_page+0x150/0xd50 [ 296.861827][ T8774] [ 296.861827][ T8774] but task is already holding lock: [ 296.869210][ T8774] ffff88814df23630 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 296.878926][ T8774] [ 296.878926][ T8774] which lock already depends on the new lock. [ 296.878926][ T8774] [ 296.889384][ T8774] [ 296.889384][ T8774] the existing dependency chain (in reverse order) is: [ 296.899015][ T8774] [ 296.899015][ T8774] -> #1 (&l->lock){+.+.}-{3:3}: [ 296.906062][ T8774] lock_acquire+0x1ed/0x550 [ 296.911096][ T8774] _raw_spin_lock+0x2e/0x40 [ 296.916127][ T8774] lock_list_lru_of_memcg+0x24c/0x4d0 [ 296.922202][ T8774] list_lru_del+0x58/0x1f0 [ 296.927135][ T8774] zswap_entry_free+0x1ff/0x440 [ 296.933463][ T8774] zswap_load+0x364/0x4a0 [ 296.938933][ T8774] swap_read_folio+0x9b4/0x2690 [ 296.944305][ T8774] swap_cluster_readahead+0x3cf/0x710 [ 296.950201][ T8774] swapin_readahead+0x1ba/0xd30 [ 296.955573][ T8774] do_swap_page+0x5c4/0x5c40 [ 296.960684][ T8774] __handle_mm_fault+0x13d7/0x70f0 [ 296.966346][ T8774] handle_mm_fault+0x3e2/0x8c0 [ 296.971719][ T8774] exc_page_fault+0x459/0x8b0 [ 296.976921][ T8774] asm_exc_page_fault+0x26/0x30 [ 296.982294][ T8774] [ 296.982294][ T8774] -> #0 (vm_lock){++++}-{0:0}: [ 296.989248][ T8774] validate_chain+0x18ef/0x5920 [ 296.994802][ T8774] __lock_acquire+0x1397/0x2100 [ 297.000174][ T8774] lock_acquire+0x1ed/0x550 [ 297.005229][ T8774] lock_vma_under_rcu+0x35f/0x9a0 [ 297.010794][ T8774] binder_alloc_free_page+0x150/0xd50 [ 297.016694][ T8774] __list_lru_walk_one+0x170/0x470 [ 297.022358][ T8774] list_lru_walk_node+0xc4/0xa70 [ 297.027814][ T8774] binder_shrink_scan+0x138/0x260 [ 297.033356][ T8774] do_shrink_slab+0x72d/0x1160 [ 297.038637][ T8774] shrink_slab+0x1093/0x14d0 [ 297.043751][ T8774] drop_slab+0x142/0x280 [ 297.048531][ T8774] drop_caches_sysctl_handler+0xbc/0x160 [ 297.054704][ T8774] proc_sys_call_handler+0x5ec/0x920 [ 297.060512][ T8774] do_iter_readv_writev+0x71a/0x9d0 [ 297.066234][ T8774] vfs_writev+0x38b/0xbc0 [ 297.071081][ T8774] do_writev+0x1b6/0x360 [ 297.075842][ T8774] do_syscall_64+0xf3/0x230 [ 297.080864][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.087289][ T8774] [ 297.087289][ T8774] other info that might help us debug this: [ 297.087289][ T8774] [ 297.097559][ T8774] Possible unsafe locking scenario: [ 297.097559][ T8774] [ 297.105022][ T8774] CPU0 CPU1 [ 297.110390][ T8774] ---- ---- [ 297.115925][ T8774] lock(&l->lock); [ 297.119747][ T8774] lock(vm_lock); [ 297.125989][ T8774] lock(&l->lock); [ 297.132322][ T8774] rlock(vm_lock); [ 297.136128][ T8774] [ 297.136128][ T8774] *** DEADLOCK *** [ 297.136128][ T8774] [ 297.144265][ T8774] 4 locks held by syz.6.703/8774: [ 297.149297][ T8774] #0: ffff88805cffa9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x254/0x320 [ 297.158735][ T8774] #1: ffff88803350e420 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 297.167884][ T8774] #2: ffff88814df23630 (&l->lock){+.+.}-{3:3}, at: lock_list_lru_of_memcg+0x24c/0x4d0 [ 297.178088][ T8774] #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 297.187852][ T8774] [ 297.187852][ T8774] stack backtrace: [ 297.193922][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.6.703 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 297.193939][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.193947][ T8774] Call Trace: [ 297.193952][ T8774] [ 297.193958][ T8774] dump_stack_lvl+0x241/0x360 [ 297.193976][ T8774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.193989][ T8774] ? __pfx__printk+0x10/0x10 [ 297.194011][ T8774] print_circular_bug+0x13a/0x1b0 [ 297.194025][ T8774] check_noncircular+0x36a/0x4a0 [ 297.194043][ T8774] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.194059][ T8774] ? __pfx_check_noncircular+0x10/0x10 [ 297.194078][ T8774] ? lockdep_lock+0x123/0x2b0 [ 297.194094][ T8774] ? lockdep_unlock+0x16a/0x300 [ 297.194109][ T8774] validate_chain+0x18ef/0x5920 [ 297.194134][ T8774] ? __pfx_validate_chain+0x10/0x10 [ 297.194154][ T8774] ? __pfx_validate_chain+0x10/0x10 [ 297.194174][ T8774] ? look_up_lock_class+0x77/0x170 [ 297.194188][ T8774] ? register_lock_class+0x102/0x980 [ 297.194205][ T8774] ? __pfx_register_lock_class+0x10/0x10 [ 297.194220][ T8774] ? stack_trace_save+0x118/0x1d0 [ 297.194234][ T8774] ? mark_lock+0x9a/0x360 [ 297.194251][ T8774] __lock_acquire+0x1397/0x2100 [ 297.194271][ T8774] lock_acquire+0x1ed/0x550 [ 297.194286][ T8774] ? binder_alloc_free_page+0x150/0xd50 [ 297.194306][ T8774] ? __pfx_lock_acquire+0x10/0x10 [ 297.194326][ T8774] ? mas_walk+0x1f3/0x280 [ 297.194344][ T8774] lock_vma_under_rcu+0x35f/0x9a0 [ 297.194359][ T8774] ? binder_alloc_free_page+0x150/0xd50 [ 297.194374][ T8774] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 297.194388][ T8774] ? binder_alloc_free_page+0x150/0xd50 [ 297.194405][ T8774] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 297.194422][ T8774] ? __pfx_validate_chain+0x10/0x10 [ 297.194440][ T8774] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 297.194460][ T8774] binder_alloc_free_page+0x150/0xd50 [ 297.194479][ T8774] __list_lru_walk_one+0x170/0x470 [ 297.194493][ T8774] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 297.194510][ T8774] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 297.194526][ T8774] list_lru_walk_node+0xc4/0xa70 [ 297.194538][ T8774] ? mark_lock+0x9a/0x360 [ 297.194555][ T8774] ? __pfx_binder_alloc_free_page+0x10/0x10 [ 297.194572][ T8774] ? __pfx_list_lru_walk_node+0x10/0x10 [ 297.194587][ T8774] binder_shrink_scan+0x138/0x260 [ 297.194604][ T8774] ? __pfx_binder_shrink_scan+0x10/0x10 [ 297.194628][ T8774] do_shrink_slab+0x72d/0x1160 [ 297.194647][ T8774] ? shrink_slab+0x12b/0x14d0 [ 297.194661][ T8774] shrink_slab+0x1093/0x14d0 [ 297.194677][ T8774] ? shrink_slab+0x12b/0x14d0 [ 297.194690][ T8774] ? __pfx_lock_release+0x10/0x10 [ 297.194705][ T8774] ? __pfx_shrink_slab+0x10/0x10 [ 297.194723][ T8774] ? mem_cgroup_iter+0x3d/0x420 [ 297.194737][ T8774] drop_slab+0x142/0x280 [ 297.194754][ T8774] drop_caches_sysctl_handler+0xbc/0x160 [ 297.194773][ T8774] ? __pfx_drop_caches_sysctl_handler+0x10/0x10 [ 297.194790][ T8774] proc_sys_call_handler+0x5ec/0x920 [ 297.194808][ T8774] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 297.194825][ T8774] do_iter_readv_writev+0x71a/0x9d0 [ 297.194844][ T8774] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 297.194859][ T8774] ? rcu_read_lock_any_held+0xb7/0x160 [ 297.194878][ T8774] vfs_writev+0x38b/0xbc0 [ 297.194892][ T8774] ? trace_contention_end+0x3c/0x120 [ 297.194904][ T8774] ? __mutex_lock+0x397/0x1010 [ 297.194919][ T8774] ? __pfx_vfs_writev+0x10/0x10 [ 297.194935][ T8774] ? __fget_files+0x2a/0x410 [ 297.194949][ T8774] ? __fget_files+0x395/0x410 [ 297.194961][ T8774] ? __fget_files+0x2a/0x410 [ 297.194975][ T8774] do_writev+0x1b6/0x360 [ 297.194989][ T8774] ? __pfx_do_writev+0x10/0x10 [ 297.195002][ T8774] ? do_syscall_64+0x100/0x230 [ 297.195017][ T8774] ? do_syscall_64+0xb6/0x230 [ 297.195030][ T8774] do_syscall_64+0xf3/0x230 [ 297.195044][ T8774] ? clear_bhb_loop+0x35/0x90 [ 297.195062][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.195084][ T8774] RIP: 0033:0x7f9873f85d29 [ 297.195101][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.195111][ T8774] RSP: 002b:00007f9874cdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 297.195126][ T8774] RAX: ffffffffffffffda RBX: 00007f9874175fa0 RCX: 00007f9873f85d29 [ 297.195136][ T8774] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 297.195144][ T8774] RBP: 00007f9874001b08 R08: 0000000000000000 R09: 0000000000000000 [ 297.195152][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.195160][ T8774] R13: 0000000000000000 R14: 00007f9874175fa0 R15: 00007ffef8d322d8 [ 297.195173][ T8774] [ 297.891584][ T8774] syz.6.703 (8774): drop_caches: 2 [ 297.980850][ T8517] veth0_vlan: entered promiscuous mode [ 297.992943][ T8517] veth1_vlan: entered promiscuous mode [ 298.019479][ T8517] veth0_macvtap: entered promiscuous mode [ 298.028390][ T8517] veth1_macvtap: entered promiscuous mode [ 298.049822][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.062198][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.075870][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.086498][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.096666][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.107353][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.117789][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.128402][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.140136][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.154429][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.164964][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.175399][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.186011][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.196029][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.206683][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.217177][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.228844][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.239902][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.253312][ T8517] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.263605][ T8517] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.272642][ T8517] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.282095][ T8517] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.312138][ T8517] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 298.332999][ T8517] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 298.340732][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.340753][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.368859][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.381865][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.290125][ T5833] Bluetooth: hci1: command 0x0406 tx timeout