last executing test programs: 12.728678852s ago: executing program 2 (id=402): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.3938134s ago: executing program 2 (id=404): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xc0a00, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 9.368798776s ago: executing program 0 (id=407): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_route(0x10, 0x3, 0x0) socket(0x25, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a"], 0xc8}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.936555466s ago: executing program 2 (id=410): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) 7.944471889s ago: executing program 0 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0x6], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000180)={0x1, 0x1000, 0x22, &(0x7f0000000140)=""/34}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.887168664s ago: executing program 2 (id=413): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x8}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000000cc0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="00000000000000f9b7081800800000ab7b8af8ff00000000bfa2a4c2400e89886db017548433cf43270a7703a4090630e8a038af794a91c640a1404a1eda9dc839a058b61a476eca74c97d6af88b1fa9036016b987e9a02f010b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.576582972s ago: executing program 0 (id=415): sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000790, 0x80000000003, 0x180, 0x400000004, 0x0, 0xee, 0x20003, 0x100000000, 0x45, 0x3, 0x3b9, 0x2, 0xfffffffffffffffd, 0x4, 0x8], 0x8000000, 0x3c6210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.363085974s ago: executing program 0 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xf3a, 0x0) tee(r2, r6, 0xf3a, 0x4) write$binfmt_elf64(r4, &(0x7f0000000380)=ANY=[], 0x18c6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x4, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, 0x0, 0x0) 7.276468916s ago: executing program 3 (id=418): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000cc0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) creat(0x0, 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', 0x0, &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000f9b7081800800000ab7b8af8ff00000000bfa2a4c2400e89886db017548433cf43270a7703a4090630e8a038af794a91c640a1404a1eda9dc839a058b61a476eca74c97d6af88b1fa9036016b987e9a02f010b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x630e1180, 0x0, 0x54, 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 6.048484518s ago: executing program 2 (id=422): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 4.478697994s ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1e) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000140)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10003}}, {@uni_xlateno}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}]}, 0x25, 0x35b, &(0x7f0000000200)="$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") r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r10}, 0x20) 4.336256898s ago: executing program 0 (id=430): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x81, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 3.008704098s ago: executing program 0 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.064561175s ago: executing program 3 (id=434): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) 2.063964345s ago: executing program 4 (id=435): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 2.042603304s ago: executing program 1 (id=436): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) 1.875970076s ago: executing program 1 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000004000000000070000040900010073797a300000000078000000090a010400000000000000000700008408000a40000000000900020073797a30000000000900010073797a3000000000080005400000000e34001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000004100001880b00010064796e736574"], 0xc0}, 0x1, 0x0, 0x0, 0x14}, 0x20050800) 1.794368712s ago: executing program 4 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.792784534s ago: executing program 1 (id=439): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000007b03000000000000850000e582000000790900000000000055090100000000009500000000990000db000800a0000000bf91000000000000bf0200000000000085000000ce000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) 1.643293316s ago: executing program 2 (id=440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.642760658s ago: executing program 4 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.641694833s ago: executing program 1 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7fff, 0x80, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 1.384632688s ago: executing program 3 (id=443): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000015c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100fffffffffffffffb00000000030005000000000002000000ac1414aa0000000000000000010015000000", @ANYBLOB="c8"], 0x68}, 0x1, 0x7}, 0x4000004) 588.614039ms ago: executing program 3 (id=444): bpf$ENABLE_STATS(0x20, 0x0, 0x0) getpid() getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r1, 0x803) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "abf400", 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 568.705991ms ago: executing program 1 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 510.740376ms ago: executing program 4 (id=446): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000002040), 0x0}, 0x20) 204.635336ms ago: executing program 4 (id=447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2040, 0x1ac) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000001380), 0xab, 0x20000) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 204.212478ms ago: executing program 3 (id=448): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$eJzs3d2PVFcBAPAzszvLbqGyVLArxQK2tlXbpSwrfhCFBmIiKY3xpUnjC6G0EhETa/xomhT4B2zTYOKTH/GpL001JvbFEJ58aSIkjUmfqg8+SDA28UFRGMPuObN3DjPc2dmPO8P8fsndM+eee+855+6dO/fznACMrPrC3/n5mVoIF95548jfH/nb1K0xB1tTTC/8HS/EGiGEWoyPZ8v7YGwxvPHhKyc6hbUwt/A3xcMz11rzbgwhnA27wsUwHbZfuPL6u3NPHzt39Pzuy28euLo2tQcAgNHy9YsH5rf95U8PbLkexg+FDa3x6fh8OsY3xeP+Q/HAPx3/10N7vFYYiiay6cbjUJ9qn26sw3TFfBrZdONd8p/I8m90mW5DuHP+Y4VxneoNwyxtx9OhVp9ti9frs7OL5+Rh4bx+ojZ75tTpF16qqKDAqvvXzhDCrsJw+Hx7fNCGgwNQhj6H5gCUYSiHQ+uX1/XmosrrvE5Dc3PVeyCARfn9wtucza8srExraeO95X/tqXrn+WEVrPf2v6z8JyrM/+FLi2GV9R+A/H99zh6H1XO3bk2pXul7tCnG8/sI+fNL3b9/+Z2O9rH5/YhGj+Xsdh9hWO4vdCvn2DqXo1/dyp9vF3erL8cwrYevZOnF70/+Px2W/zHQ2b/z6/+GtRgu/yCt8OrLYhj2oX07aqxkWc3qdj3AgMufm2um+6NR/lxfnr6hJH2yJH2qJP2ekvSNJekwyn77/Z+E12pL5/n5Of1yr4en62z3xvAjyyxPfj1yufnnz/0u10rzz58nhkH2++PPnvzC889d2XL9rQcPhVpr+78Zt/d0ujEdv1sX4wTpemF+Xb317P90ez71LtPdl5Xn3g7TL3ze2j5dbevSckJhP3NbOWba59vcbbod7dNNZ9NNxWEyK29+fHJPNl86/kj71bS+xrP6NrJ6TGTlSPuVLTHMywH9SNtjl+f/Wz9uM6FRe+HU6ZNPxnjaTv841thwa/ze9S02sAp6ff9nJrS//7OpNb5RL+4XNi+Nry3uF96Oy2sfP9fKp338vhhPv3PfGptaGD974runn1/96sNIe+nHL3/7+OnTJ7/nQ98fvrqi2V+toszptKXqVefDwH6oeMcErLk9ry4eBDxx6jvHXzz54skz+/bv3zc3t/+L++b3LBzX7yke3RedraC0wGpa+tGvuiQAAAAAAAAAAABAr3549MiV9y59/v3F9/+X3v9L7/+nJ38X3/9fauuiXhgfOrSOm94D3NIhfWGarIHViWy6Rhw+mpV3a5bPtmy+j8Ww1Y9ffP8/ZZe365rKc382vtElmjUncFt7KRNZGyR5f4GfjOH5GP4qQIVqU51Hx7Csfeu0raf2KQrtUjS1Dzw80v8tbQ2pHZP0/nfHdp0K/+wt61BGVt96vE5YdR2Bzv4xUu1//3Op4pWXxdB9GF/f/H42/NvEsT7L3+x6lN5rDzYAq6Pq/j/Tdc8UnvnD1yZvDWmya0+17y/z9kthOf78Xnt80PufXOv883771jv/quu/3v1/tvq/63n/V2+foU//+fnV94tL2d5r/nn9UzvQW5eX//WYf6rNo6G3/Ju/zPLPbwj16L9Z/vf0mP9t9d/RX/7/i/mn1fbYQ73mv1jiWr29HPl143T/L79unNzI6p/a9rxD/t94uVP9+9wMb8b8YZQNSz+zy5UdR7QO2nvs/7fZ6+//Svv/bRU2263lz2F8LsbTjjg955D3d7Lc45f0fEX6HdiWLb9W8vvWT/+/g9T50qj3//ulGJb1h536/03b43T8yS/EF9Zlijc6rNu7dV8Dw+qDkbr/NxTD5KotK1Rel56HyQEoQ59Dc6yP+Vr9xFVc/mazubYXtEpUmjmVr//CecLOivOvRNXrv0ze/29+DJ/3/5un5/3/5ul5/795+lT8D3VLz/v/zddn3v9vnn5/tty8f+CZkvSPl6Rv75zeOm1/oGT+HSXpnyhJ391KP9g2RUp/sGT+nd3SYw3uK5n/oZL0h0vSP1WS/sgd0h/fFMJjhfRiH9Bp/k+XLP9ul95HGdX6wyjL38/z/YfRke7/dPv+by1JB4bXT9/ae/i533xzevH9/4nW9ZB0H+9QjDfi+dOPYjy/7x0K8Vtpl2L8r1n6oF/vgFGSt5+R/74/WpIODK/0nJfvN4yg2mTn0TEsa7eq23E+w+UzMfxsDB+P4RMxnI3hnhjujeHcOpWPtXH47d8deK22dL6/OUvv9Xny/H2gtnaiQgj7eixPfn1guc+z5+34LddK8+/zdTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK1Bf+zs/P1EK48M4bR549dmrPrTEHW1NML/wdL8QarflCeDKGYzH8Rfxw48NXThTDmzGshblQC7XW+PDMtVZOG0MIZ8OucDFMh+0Xrrz+7tzTx84dPb/78psHrq7dGgAAAIC73/8DAAD//yj3EhU=") openat(0xffffffffffffff9c, &(0x7f0000000e40)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000380), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000480)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd1644701b13403656c86711f6e750026fd442bd0a3ab3aaf47de4a2d041016160e8bef7b30c05e298aa9572540dd95087eef2115e1bc36a7e64cf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac33aaa648c765acc5672dc642dd67d970604a69b4f2276beedc18056ab4bea4c825b69a7a77adcd5488684882b1bb9eb840800000000000000668e8fd0e45c050601202cb546", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r4, r5, r4}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 164.079885ms ago: executing program 1 (id=449): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0x0, 0x1}, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 0s ago: executing program 4 (id=450): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0/file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 86.810085][ T5815] cgroup: Unknown subsys name 'net' [ 86.925562][ T5815] cgroup: Unknown subsys name 'cpuset' [ 86.934638][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.655020][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.477978][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.494204][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.511293][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.519216][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.527707][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.530651][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.536052][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.550848][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.551459][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.558806][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.565824][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.579625][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.580918][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.594404][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.596366][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.609229][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.615109][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.619358][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.624500][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.631647][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.637418][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.654086][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.661814][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.669932][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.677158][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.472044][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 93.559250][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 93.659197][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 93.765068][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 93.788945][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 93.877594][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.885041][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.893469][ T5830] bridge_slave_0: entered allmulticast mode [ 93.901179][ T5830] bridge_slave_0: entered promiscuous mode [ 93.971071][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.978677][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.985926][ T5830] bridge_slave_1: entered allmulticast mode [ 93.993500][ T5830] bridge_slave_1: entered promiscuous mode [ 94.029739][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.037055][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.045384][ T5827] bridge_slave_0: entered allmulticast mode [ 94.052958][ T5827] bridge_slave_0: entered promiscuous mode [ 94.062441][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.069625][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.078211][ T5827] bridge_slave_1: entered allmulticast mode [ 94.086430][ T5827] bridge_slave_1: entered promiscuous mode [ 94.124836][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.132496][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.139669][ T5826] bridge_slave_0: entered allmulticast mode [ 94.147276][ T5826] bridge_slave_0: entered promiscuous mode [ 94.196076][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.205682][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.213312][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.220484][ T5826] bridge_slave_1: entered allmulticast mode [ 94.228079][ T5826] bridge_slave_1: entered promiscuous mode [ 94.269284][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.308692][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.372665][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.395916][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.403531][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.410717][ T5829] bridge_slave_0: entered allmulticast mode [ 94.418350][ T5829] bridge_slave_0: entered promiscuous mode [ 94.443957][ T5830] team0: Port device team_slave_0 added [ 94.449731][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.456984][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.464298][ T5825] bridge_slave_0: entered allmulticast mode [ 94.472099][ T5825] bridge_slave_0: entered promiscuous mode [ 94.484138][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.497930][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.525186][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.532900][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.540059][ T5829] bridge_slave_1: entered allmulticast mode [ 94.547741][ T5829] bridge_slave_1: entered promiscuous mode [ 94.558553][ T5830] team0: Port device team_slave_1 added [ 94.578438][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.585684][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.593073][ T5825] bridge_slave_1: entered allmulticast mode [ 94.600333][ T5825] bridge_slave_1: entered promiscuous mode [ 94.623330][ T5827] team0: Port device team_slave_0 added [ 94.685224][ T5827] team0: Port device team_slave_1 added [ 94.707241][ T5826] team0: Port device team_slave_0 added [ 94.728205][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.736156][ T5845] Bluetooth: hci4: command tx timeout [ 94.741841][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.742127][ T5848] Bluetooth: hci1: command tx timeout [ 94.768146][ T5846] Bluetooth: hci2: command tx timeout [ 94.773537][ T5848] Bluetooth: hci0: command tx timeout [ 94.779044][ T5846] Bluetooth: hci3: command tx timeout [ 94.784723][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.804801][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.811888][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.838601][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.867981][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.881354][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.893846][ T5826] team0: Port device team_slave_1 added [ 94.902890][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.960736][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.001245][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.008380][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.034367][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.073696][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.080684][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.107390][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.121404][ T5829] team0: Port device team_slave_0 added [ 95.128511][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.135511][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.161772][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.181361][ T5825] team0: Port device team_slave_0 added [ 95.201185][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.208307][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.234670][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.248853][ T5829] team0: Port device team_slave_1 added [ 95.288743][ T5825] team0: Port device team_slave_1 added [ 95.321105][ T5830] hsr_slave_0: entered promiscuous mode [ 95.327766][ T5830] hsr_slave_1: entered promiscuous mode [ 95.335521][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.342798][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.368832][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.419596][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.426819][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.452924][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.466146][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.473436][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.499927][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.512326][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.519381][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.545378][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.576863][ T5827] hsr_slave_0: entered promiscuous mode [ 95.583573][ T5827] hsr_slave_1: entered promiscuous mode [ 95.589954][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 95.595855][ T5827] Cannot create hsr debugfs directory [ 95.700994][ T5826] hsr_slave_0: entered promiscuous mode [ 95.707651][ T5826] hsr_slave_1: entered promiscuous mode [ 95.714439][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 95.720199][ T5826] Cannot create hsr debugfs directory [ 95.785986][ T5825] hsr_slave_0: entered promiscuous mode [ 95.793047][ T5825] hsr_slave_1: entered promiscuous mode [ 95.799274][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 95.805116][ T5825] Cannot create hsr debugfs directory [ 95.846956][ T5829] hsr_slave_0: entered promiscuous mode [ 95.855583][ T5829] hsr_slave_1: entered promiscuous mode [ 95.884379][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 95.890164][ T5829] Cannot create hsr debugfs directory [ 96.435031][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.453421][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.466102][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.486448][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.559384][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.571482][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.595816][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.608486][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.687412][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.698432][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.724304][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.755167][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.811781][ T5846] Bluetooth: hci3: command tx timeout [ 96.817248][ T5846] Bluetooth: hci2: command tx timeout [ 96.822959][ T5845] Bluetooth: hci4: command tx timeout [ 96.824646][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.828391][ T5845] Bluetooth: hci1: command tx timeout [ 96.835369][ T5834] Bluetooth: hci0: command tx timeout [ 96.856898][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.870799][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.908525][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.924491][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.968913][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.004991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.012347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.067726][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.074930][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.110278][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.121252][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.133751][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.158305][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.267691][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.319347][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.347606][ T2133] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.354848][ T2133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.366212][ T2133] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.373402][ T2133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.386994][ T1212] cfg80211: failed to load regulatory.db [ 97.400646][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.504216][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.528403][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.583596][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.590821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.633188][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.676430][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.683754][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.726145][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.733359][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.744001][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.751156][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.801354][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.874579][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.905646][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.933959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.941146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.003817][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.010999][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.204475][ T5830] veth0_vlan: entered promiscuous mode [ 98.254628][ T5830] veth1_vlan: entered promiscuous mode [ 98.308639][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.470561][ T5830] veth0_macvtap: entered promiscuous mode [ 98.507396][ T5830] veth1_macvtap: entered promiscuous mode [ 98.536534][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.551182][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.619696][ T5827] veth0_vlan: entered promiscuous mode [ 98.637306][ T5827] veth1_vlan: entered promiscuous mode [ 98.665613][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.716032][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.754378][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.772533][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.788025][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.819690][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.839087][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.855676][ T5827] veth0_macvtap: entered promiscuous mode [ 98.884698][ T5827] veth1_macvtap: entered promiscuous mode [ 98.901691][ T5845] Bluetooth: hci1: command tx timeout [ 98.907154][ T5845] Bluetooth: hci2: command tx timeout [ 98.912468][ T5846] Bluetooth: hci0: command tx timeout [ 98.913438][ T5832] Bluetooth: hci4: command tx timeout [ 98.917955][ T5846] Bluetooth: hci3: command tx timeout [ 98.954587][ T5825] veth0_vlan: entered promiscuous mode [ 99.046848][ T5825] veth1_vlan: entered promiscuous mode [ 99.076365][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.108212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.124251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.124919][ T5829] veth0_vlan: entered promiscuous mode [ 99.145416][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.194341][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204047][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.222326][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.235350][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.246129][ T5829] veth1_vlan: entered promiscuous mode [ 99.254026][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.264156][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.327300][ T5825] veth0_macvtap: entered promiscuous mode [ 99.351824][ T5826] veth0_vlan: entered promiscuous mode [ 99.379733][ T5825] veth1_macvtap: entered promiscuous mode [ 99.383482][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.425300][ T5826] veth1_vlan: entered promiscuous mode [ 99.442769][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.447655][ T5829] veth0_macvtap: entered promiscuous mode [ 99.464030][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.543483][ T5829] veth1_macvtap: entered promiscuous mode [ 99.557553][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.573004][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.628558][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.665541][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.688071][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.701295][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.706747][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.723990][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.724277][ T2133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.743710][ T2133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.827197][ T5846] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 99.847655][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.874574][ T5826] veth0_macvtap: entered promiscuous mode [ 99.920131][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.935473][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.977200][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.001399][ T5826] veth1_macvtap: entered promiscuous mode [ 100.129334][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.148067][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.155618][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.233286][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.282678][ T5959] loop1: detected capacity change from 0 to 512 [ 100.291118][ T5959] ======================================================= [ 100.291118][ T5959] WARNING: The mand mount option has been deprecated and [ 100.291118][ T5959] and is ignored by this kernel. Remove the mand [ 100.291118][ T5959] option from the mount to silence this warning. [ 100.291118][ T5959] ======================================================= [ 100.334667][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.347047][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.373332][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.391302][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.404913][ T5959] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 100.602016][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.788667][ T5959] loop1: detected capacity change from 0 to 32768 [ 100.790611][ T2133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.808472][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.826217][ T5959] (syz.1.7,5959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.842313][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.850506][ T5959] (syz.1.7,5959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.883638][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.885458][ T5959] JBD2: Ignoring recovery information on journal [ 100.929616][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.956145][ T5959] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.972652][ T5834] Bluetooth: hci2: command tx timeout [ 100.972829][ T5845] Bluetooth: hci4: command tx timeout [ 100.978092][ T5834] Bluetooth: hci0: command tx timeout [ 100.989376][ T5834] Bluetooth: hci1: command tx timeout [ 101.000791][ T5846] Bluetooth: hci3: command tx timeout [ 101.205032][ T30] audit: type=1800 audit(1762381735.441:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="file1" dev="loop1" ino=16979 res=0 errno=0 [ 101.273771][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.295333][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.435012][ T2133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.480683][ T2133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.527580][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 101.810370][ T5966] loop2: detected capacity change from 0 to 8192 [ 101.850883][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.859332][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.859865][ T5971] loop0: detected capacity change from 0 to 32768 [ 101.908991][ T5971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5971) [ 101.946019][ T5971] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.956483][ T5971] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 101.965600][ T5971] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 102.040391][ T30] audit: type=1800 audit(1762381736.281:3): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 102.175849][ T5988] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 102.265247][ T5988] FAT-fs (loop2): Filesystem has been set read-only [ 102.383742][ T5971] BTRFS info (device loop0): rebuilding free space tree [ 102.508952][ T5971] BTRFS info (device loop0): disabling free space tree [ 102.517641][ T5971] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.527623][ T5971] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.650832][ T5971] BTRFS info (device loop0): checking UUID tree [ 102.663911][ T5971] BTRFS info (device loop0): enabling ssd optimizations [ 102.671094][ T5971] BTRFS info (device loop0): turning off barriers [ 102.677758][ T5971] BTRFS info (device loop0): disabling tree log [ 102.684293][ T5971] BTRFS info (device loop0): turning on flush-on-commit [ 102.691425][ T5971] BTRFS info (device loop0): enabling disk space caching [ 102.698795][ T5971] BTRFS info (device loop0): force clearing of disk cache [ 102.707262][ T5971] BTRFS info (device loop0): use zstd compression, level 3 [ 102.715636][ T5971] BTRFS info (device loop0): max_inline set to 0 [ 102.954634][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.009010][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.665382][ T5996] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.699728][ T5996] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.732415][ T5996] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.741349][ T5996] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.957448][ T6005] loop2: detected capacity change from 0 to 1024 [ 104.102527][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.186644][ T5829] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.194294][ T6008] loop4: detected capacity change from 0 to 4096 [ 104.383171][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.783110][ T6017] loop2: detected capacity change from 0 to 2048 [ 104.873956][ T6017] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 104.930723][ T6022] vxcan1: entered allmulticast mode [ 104.955829][ T6017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.311839][ T6029] loop3: detected capacity change from 0 to 2048 [ 105.339040][ T6029] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26506, location=26506 [ 105.396235][ T6029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.562637][ T6043] netlink: 7 bytes leftover after parsing attributes in process `syz.3.25'. [ 106.602052][ T6043] netlink: 7 bytes leftover after parsing attributes in process `syz.3.25'. [ 106.642634][ T6049] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.718721][ T6049] loop0: detected capacity change from 0 to 2048 [ 106.719988][ T6047] loop4: detected capacity change from 0 to 4096 [ 106.779491][ T6052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.285201][ T6060] Zero length message leads to an empty skb [ 107.690877][ T6068] loop1: detected capacity change from 0 to 2048 [ 107.755165][ T6068] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26506, location=26506 [ 107.822034][ T6068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.872557][ T6085] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 108.886769][ T6085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.899161][ T6085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.087461][ T6087] vxcan1: entered allmulticast mode [ 110.142746][ T6107] loop0: detected capacity change from 0 to 8 [ 110.649976][ T6112] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 110.658822][ T6111] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.683166][ T6112] netlink: 55 bytes leftover after parsing attributes in process `syz.4.52'. [ 111.105583][ T6111] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 111.156879][ T6111] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 111.169363][ T6111] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 111.178364][ T6111] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 111.199639][ T6118] loop2: detected capacity change from 0 to 2048 [ 111.221146][ T6111] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 111.249478][ T6111] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 111.282915][ T6122] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.306129][ T6111] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 111.339739][ T6111] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 111.944493][ T6135] loop3: detected capacity change from 0 to 1024 [ 112.055500][ T6137] loop4: detected capacity change from 0 to 8 [ 112.614088][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.094228][ T6148] loop4: detected capacity change from 0 to 1024 [ 113.119162][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.591358][ T6167] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 114.602205][ T6167] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 115.938616][ T6173] loop3: detected capacity change from 0 to 32768 [ 115.973710][ T6173] (syz.3.75,6173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.022059][ T6173] (syz.3.75,6173,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.126343][ T6173] JBD2: Ignoring recovery information on journal [ 116.387239][ T6173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.768450][ T6208] syzkaller0: entered promiscuous mode [ 116.798504][ T6208] syzkaller0: entered allmulticast mode [ 116.993491][ T6222] create_pit_timer: 6 callbacks suppressed [ 116.993514][ T6222] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 117.051869][ T6222] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 117.071689][ T6222] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 117.091656][ T6222] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 117.141633][ T6222] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 117.164209][ T6222] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 117.239572][ T6222] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 117.279900][ T6222] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 118.039536][ T6245] loop4: detected capacity change from 0 to 1024 [ 118.360363][ T6245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.513740][ T5825] ocfs2: Unmounting device (7,3) on (node local) [ 118.796366][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.891825][ T6276] loop4: detected capacity change from 0 to 2048 [ 119.962658][ T6283] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 119.977684][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.987071][ T6283] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 119.999540][ T6276] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26506, location=26506 [ 120.076918][ T6276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.011475][ T6298] netlink: 172 bytes leftover after parsing attributes in process `syz.1.122'. [ 121.034684][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 121.074791][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 121.163014][ T6299] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 121.194655][ T6273] loop0: detected capacity change from 0 to 32768 [ 121.279397][ T6273] (syz.0.113,6273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.352322][ T6273] (syz.0.113,6273,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.433767][ T6273] JBD2: Ignoring recovery information on journal [ 121.635341][ T6273] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.951252][ T6311] loop1: detected capacity change from 0 to 2048 [ 122.076834][ T6320] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.267484][ T6335] netlink: 'syz.3.136': attribute type 6 has an invalid length. [ 123.470687][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 124.594610][ T6375] loop3: detected capacity change from 0 to 1024 [ 124.767158][ T6375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.978176][ T6383] loop1: detected capacity change from 0 to 2048 [ 125.062644][ T6385] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.110568][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.066426][ T6407] loop4: detected capacity change from 0 to 8 [ 127.175177][ T6418] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 127.198390][ T6418] netlink: 2 bytes leftover after parsing attributes in process `syz.4.169'. [ 127.248685][ T6418] team0: entered promiscuous mode [ 127.272535][ T6418] team_slave_0: entered promiscuous mode [ 127.292741][ T6418] team_slave_1: entered promiscuous mode [ 127.312499][ T6418] bridge0: port 3(team0) entered blocking state [ 127.330842][ T6418] bridge0: port 3(team0) entered disabled state [ 127.362135][ T6418] team0: entered allmulticast mode [ 127.391657][ T6418] team_slave_0: entered allmulticast mode [ 127.397453][ T6418] team_slave_1: entered allmulticast mode [ 127.429657][ T6418] bridge0: port 3(team0) entered blocking state [ 127.436220][ T6418] bridge0: port 3(team0) entered forwarding state [ 127.761919][ T6428] loop2: detected capacity change from 0 to 512 [ 127.808904][ T6428] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 128.181644][ T6428] loop2: detected capacity change from 0 to 32768 [ 128.203119][ T6428] (syz.2.174,6428,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.216907][ T6428] (syz.2.174,6428,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.260339][ T6433] loop4: detected capacity change from 0 to 4096 [ 128.403082][ T6428] JBD2: Ignoring recovery information on journal [ 128.502755][ T6428] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.606397][ T6444] loop3: detected capacity change from 0 to 8 [ 128.905042][ T30] audit: type=1800 audit(1762381763.151:4): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.174" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 129.496691][ T5830] ocfs2: Unmounting device (7,2) on (node local) [ 129.907381][ T6461] syzkaller0: entered promiscuous mode [ 129.921858][ T6460] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 129.941697][ T6461] syzkaller0: entered allmulticast mode [ 130.599325][ T6485] loop0: detected capacity change from 0 to 8 [ 130.798369][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 131.015985][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 131.205711][ T6483] loop2: detected capacity change from 0 to 2048 [ 131.227413][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.198'. [ 131.252025][ T6483] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 131.318741][ T6483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.167329][ T6512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 134.302390][ T6584] loop4: detected capacity change from 0 to 512 [ 134.331737][ T6584] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 134.406957][ T6579] loop0: detected capacity change from 0 to 2048 [ 134.430566][ T6589] netlink: 1 bytes leftover after parsing attributes in process `syz.3.240'. [ 134.456986][ T6579] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26506, location=26506 [ 134.507951][ T6579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.068694][ T6584] loop4: detected capacity change from 0 to 32768 [ 135.217169][ T6584] (syz.4.239,6584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.232035][ T6584] (syz.4.239,6584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.323983][ T6584] JBD2: Ignoring recovery information on journal [ 135.412155][ T6584] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 135.467535][ T30] audit: type=1800 audit(1762381769.711:5): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.239" name="file1" dev="loop4" ino=16979 res=0 errno=0 [ 135.655718][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 136.210860][ T6616] loop3: detected capacity change from 0 to 2048 [ 136.274402][ T6621] loop0: detected capacity change from 0 to 1024 [ 136.307014][ T6622] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.432302][ T6626] loop2: detected capacity change from 0 to 2048 [ 137.073059][ T6633] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 137.582815][ T6626] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 137.756757][ T6626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.340762][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.351824][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.043336][ T6664] syzkaller0: entered promiscuous mode [ 139.058484][ T6664] syzkaller0: entered allmulticast mode [ 139.422354][ T6676] netlink: 7 bytes leftover after parsing attributes in process `syz.2.272'. [ 139.806739][ T6684] loop2: detected capacity change from 0 to 512 [ 139.876983][ T6684] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 140.270103][ T6681] loop2: detected capacity change from 0 to 32768 [ 140.299841][ T6681] (syz.2.274,6681,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.313654][ T6681] (syz.2.274,6681,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.389234][ T6681] JBD2: Ignoring recovery information on journal [ 140.472564][ T6681] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.576596][ T30] audit: type=1800 audit(1762381774.821:6): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.274" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 140.690617][ T5830] ocfs2: Unmounting device (7,2) on (node local) [ 141.176051][ T6706] loop0: detected capacity change from 0 to 256 [ 141.194288][ T6706] exfat: Deprecated parameter 'namecase' [ 141.200806][ T6706] exfat: Deprecated parameter 'utf8' [ 141.366610][ T6706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 143.274578][ T6721] loop4: detected capacity change from 0 to 1024 [ 143.448527][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.715629][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.746561][ T6740] netlink: 80 bytes leftover after parsing attributes in process `syz.3.297'. [ 144.681105][ T6756] loop4: detected capacity change from 0 to 8 [ 145.226803][ T6757] loop2: detected capacity change from 0 to 2048 [ 145.319056][ T6757] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 145.542028][ T6757] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.372455][ T6788] syzkaller0: entered promiscuous mode [ 147.378505][ T6788] syzkaller0: entered allmulticast mode [ 148.332522][ T6799] loop4: detected capacity change from 0 to 512 [ 148.580735][ T6799] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 148.798486][ T6812] loop1: detected capacity change from 0 to 2048 [ 148.893500][ T6812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26506, location=26506 [ 148.992083][ T6812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.625267][ T6822] syzkaller0: entered promiscuous mode [ 149.644720][ T6822] syzkaller0: entered allmulticast mode [ 149.730127][ T6824] loop3: detected capacity change from 0 to 2048 [ 149.843306][ T6828] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.331848][ T6831] netlink: 'syz.2.332': attribute type 4 has an invalid length. [ 150.853177][ T6837] loop2: detected capacity change from 0 to 512 [ 150.893941][ T6837] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 150.907195][ T6837] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 151.113498][ T6836] wireguard0: entered promiscuous mode [ 151.119050][ T6836] wireguard0: entered allmulticast mode [ 152.597033][ T6859] loop0: detected capacity change from 0 to 512 [ 152.606917][ T6859] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 152.680155][ T6863] netlink: 'syz.2.338': attribute type 25 has an invalid length. [ 152.958710][ T6859] loop0: detected capacity change from 0 to 32768 [ 152.969601][ T6859] (syz.0.339,6859,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 152.991186][ T6859] (syz.0.339,6859,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.061788][ T6859] JBD2: Ignoring recovery information on journal [ 153.128579][ T6859] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.199025][ T30] audit: type=1800 audit(1762381787.441:7): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.339" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 153.255412][ T6872] loop2: detected capacity change from 0 to 2048 [ 153.350833][ T6872] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26506, location=26506 [ 153.401363][ T5829] ocfs2: Unmounting device (7,0) on (node local) [ 153.439252][ T6872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.972695][ T6898] overlay: Unknown parameter 'euid' [ 156.449791][ T6899] loop2: detected capacity change from 0 to 8192 [ 156.885734][ T6014] loop2: p1 p2 p4 < > [ 156.889974][ T6014] loop2: partition table partially beyond EOD, truncated [ 156.959734][ T6014] loop2: p1 start 16777216 is beyond EOD, truncated [ 157.023424][ T6014] loop2: p2 size 515840 extends beyond EOD, truncated [ 157.084452][ T6014] loop2: p4 start 16777216 is beyond EOD, truncated [ 157.175922][ T6906] loop0: detected capacity change from 0 to 2048 [ 157.223989][ T6906] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26506, location=26506 [ 157.268800][ T6906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.312327][ T6899] loop2: p1 p2 p4 < > [ 158.316555][ T6899] loop2: partition table partially beyond EOD, truncated [ 158.323851][ T6899] loop2: p1 start 16777216 is beyond EOD, truncated [ 158.330482][ T6899] loop2: p2 size 515840 extends beyond EOD, truncated [ 158.339848][ T6899] loop2: p4 start 16777216 is beyond EOD, truncated [ 158.392577][ T6916] tmpfs: Unknown parameter 'cg™l' [ 158.932220][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 158.943716][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 159.001572][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 159.309434][ T6924] loop0: detected capacity change from 0 to 8 [ 159.957020][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 160.036640][ T5914] usb 5-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 160.052717][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.067033][ T5914] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 160.076591][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.112466][ T5914] usb 5-1: config 0 descriptor?? [ 160.127567][ T5914] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.140373][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 160.308620][ T6936] loop2: detected capacity change from 0 to 2048 [ 160.405543][ T10] usb 5-1: USB disconnect, device number 2 [ 160.724646][ T6943] loop3: detected capacity change from 0 to 2048 [ 160.775354][ T6943] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26506, location=26506 [ 160.823481][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.910510][ T6943] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.949343][ T6948] netlink: 'syz.0.367': attribute type 25 has an invalid length. [ 161.207130][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.041128][ T6964] loop1: detected capacity change from 0 to 2048 [ 162.075715][ T6964] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26506, location=26506 [ 162.160501][ T6964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.303369][ T6970] loop0: detected capacity change from 0 to 8 [ 163.559447][ T6979] vxcan1: entered allmulticast mode [ 163.937781][ T6965] loop3: detected capacity change from 0 to 16 [ 164.814531][ T6965] erofs (device loop3): mounted with root inode @ nid 36. [ 165.193553][ T7003] loop2: detected capacity change from 0 to 8 [ 166.849379][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 167.463176][ T7022] syz.2.390 (7022) used greatest stack depth: 15864 bytes left [ 168.017749][ T7037] loop0: detected capacity change from 0 to 1024 [ 168.105604][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 169.074286][ T7053] overlay: Unknown parameter 'euid' [ 169.221368][ T7055] loop3: detected capacity change from 0 to 8192 [ 169.316755][ T5887] loop3: p1 p2 p4 < > [ 169.347854][ T5887] loop3: partition table partially beyond EOD, truncated [ 169.557560][ T5887] loop3: p1 start 16777216 is beyond EOD, truncated [ 169.750471][ T5887] loop3: p2 size 515840 extends beyond EOD, truncated [ 170.019324][ T5887] loop3: p4 start 16777216 is beyond EOD, truncated [ 170.362443][ T7055] loop3: p1 p2 p4 < > [ 170.366613][ T7055] loop3: partition table partially beyond EOD, truncated [ 170.374120][ T7055] loop3: p1 start 16777216 is beyond EOD, truncated [ 170.380755][ T7055] loop3: p2 size 515840 extends beyond EOD, truncated [ 171.122862][ T7055] loop3: p4 start 16777216 is beyond EOD, truncated [ 171.301204][ T7043] bridge0: port 3(team0) entered disabled state [ 171.307783][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.315736][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.571980][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 172.196265][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.266362][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.287068][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 172.366928][ T6014] udevd[6014]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 172.368136][ T7069] loop3: detected capacity change from 0 to 2048 [ 172.452300][ T7073] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.693892][ T5995] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.715423][ T5995] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.725379][ T5995] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.382425][ T5995] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.760518][ T7090] netlink: 7 bytes leftover after parsing attributes in process `syz.3.416'. [ 173.780480][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 175.271143][ T7106] netlink: 'syz.4.421': attribute type 12 has an invalid length. [ 176.939307][ T7128] loop3: detected capacity change from 0 to 256 [ 177.117786][ T7128] FAT-fs (loop3): Directory bread(block 64) failed [ 177.124870][ T7128] FAT-fs (loop3): Directory bread(block 65) failed [ 177.132326][ T7128] FAT-fs (loop3): Directory bread(block 66) failed [ 177.139023][ T7128] FAT-fs (loop3): Directory bread(block 67) failed [ 177.146262][ T7128] FAT-fs (loop3): Directory bread(block 68) failed [ 177.153019][ T7128] FAT-fs (loop3): Directory bread(block 69) failed [ 177.160286][ T7128] FAT-fs (loop3): Directory bread(block 70) failed [ 177.167147][ T7128] FAT-fs (loop3): Directory bread(block 71) failed [ 177.174311][ T7128] FAT-fs (loop3): Directory bread(block 72) failed [ 177.181021][ T7128] FAT-fs (loop3): Directory bread(block 73) failed [ 177.382123][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 177.753012][ T7129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.600668][ T7111] loop2: detected capacity change from 0 to 40427 [ 178.692408][ T7111] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 178.738495][ T7111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.314131][ T7111] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.332295][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 179.393622][ T7111] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.411191][ T7111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.166829][ T7186] loop3: detected capacity change from 0 to 2048 [ 181.237388][ T7188] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.254589][ C1] ------------[ cut here ]------------ [ 181.260354][ C1] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#1: syz.0.431/7140 [ 181.270725][ C1] Modules linked in: [ 181.274858][ C1] CPU: 1 UID: 0 PID: 7140 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 181.284167][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.294317][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 181.299687][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 08 c4 8d 00 e8 b3 7c 32 00 4c 89 e7 be 03 00 00 00 e8 66 72 ff 02 e9 b8 fe ff ff e8 9c 7c 32 00 90 <0f> 0b 90 eb 9f e8 91 7c 32 00 4c 89 ff be 03 00 00 00 e8 44 72 ff [ 181.319396][ C1] RSP: 0018:ffffc90000a08ba8 EFLAGS: 00010246 [ 181.325556][ C1] RAX: ffffffff818ea124 RBX: ffff88802d8d21a0 RCX: ffff88802b57bd00 [ 181.333703][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 181.341768][ C1] RBP: 0000000000000004 R08: ffff88802e9d0193 R09: 1ffff11005d3a032 [ 181.349841][ C1] R10: dffffc0000000000 R11: ffffed1005d3a033 R12: dffffc0000000000 [ 181.357931][ C1] R13: ffff88802d8d2100 R14: ffff88802e9d0000 R15: ffff88802e9d0190 [ 181.365987][ C1] FS: 0000000000000000(0000) GS:ffff888125fd5000(0000) knlGS:0000000000000000 [ 181.375041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.381698][ C1] CR2: 00007f40de77d000 CR3: 000000007e00e000 CR4: 00000000003526f0 [ 181.389765][ C1] Call Trace: [ 181.393149][ C1] [ 181.396036][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 181.401138][ C1] ? rcu_core+0xc37/0x1770 [ 181.405653][ C1] rcu_core+0xcab/0x1770 [ 181.409992][ C1] ? __pfx_rcu_core+0x10/0x10 [ 181.414771][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 181.420498][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 181.426866][ C1] handle_softirqs+0x286/0x870 [ 181.431710][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 181.435480][ T7190] 9p: Bad value for 'wfdno' [ 181.436545][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 181.443490][ T7190] overlayfs: failed to resolve './file0/file1': -2 [ 181.446365][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 181.458110][ C1] __irq_exit_rcu+0xca/0x1f0 [ 181.462809][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 181.468097][ C1] irq_exit_rcu+0x9/0x30 [ 181.472444][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 181.478138][ C1] [ 181.481098][ C1] [ 181.484113][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.490134][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 181.495762][ C1] Code: 48 c7 c6 83 e6 96 8d e8 b9 6a 00 ff 90 0f 0b cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 181.515462][ C1] RSP: 0018:ffffc9000abd7370 EFLAGS: 00000246 [ 181.521638][ C1] RAX: ffffffff820cee28 RBX: dffffc0000000000 RCX: ffffffff820cee56 [ 181.529657][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001a19c80 [ 181.537726][ C1] RBP: ffffc9000abd7630 R08: ffffea0001a19cb3 R09: 1ffffd4000343396 [ 181.545761][ C1] R10: dffffc0000000000 R11: fffff94000343397 R12: dffffc0000000000 [ 181.553836][ C1] R13: 00007fa4f3c6d000 R14: ffffc9000abd7840 R15: ffffea0001a19c80 [ 181.561883][ C1] ? unmap_page_range+0x1fb8/0x4370 [ 181.567148][ C1] ? unmap_page_range+0x1fe6/0x4370 [ 181.572421][ C1] unmap_page_range+0x1fe6/0x4370 [ 181.577532][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 181.583030][ C1] ? mas_find+0xb0e/0xd30 [ 181.587419][ C1] ? unmap_vmas+0x144/0x580 [ 181.592002][ C1] unmap_vmas+0x399/0x580 [ 181.596381][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 181.601324][ C1] exit_mmap+0x240/0xb40 [ 181.605663][ C1] ? uprobe_clear_state+0x20f/0x290 [ 181.610897][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 181.615735][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 181.621454][ C1] ? __pfx_exit_aio+0x10/0x10 [ 181.626248][ C1] ? uprobe_clear_state+0x27c/0x290 [ 181.631546][ C1] __mmput+0x118/0x430 [ 181.635704][ C1] exit_mm+0x1da/0x2c0 [ 181.639820][ C1] ? __pfx_exit_mm+0x10/0x10 [ 181.644511][ C1] do_exit+0x650/0x2300 [ 181.648710][ C1] ? do_raw_spin_lock+0x121/0x290 [ 181.653837][ C1] ? __pfx_do_exit+0x10/0x10 [ 181.658487][ C1] do_group_exit+0x21c/0x2d0 [ 181.663171][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.668451][ C1] get_signal+0x1285/0x1340 [ 181.673165][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 181.678761][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.685072][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 181.690644][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 181.696014][ C1] ? rcu_is_watching+0x15/0xb0 [ 181.700869][ C1] do_syscall_64+0x2e9/0xfa0 [ 181.705547][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.711687][ C1] ? clear_bhb_loop+0x60/0xb0 [ 181.716441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.722413][ C1] RIP: 0033:0x7fa4f478f6c9 [ 181.726882][ C1] Code: Unable to access opcode bytes at 0x7fa4f478f69f. [ 181.733984][ C1] RSP: 002b:00007fa4f5649fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 181.742485][ C1] RAX: fffffffffffffffc RBX: 00007fa4f49e5fa0 RCX: 00007fa4f478f6c9 [ 181.750535][ C1] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 498144ee5f62e049 [ 181.758584][ C1] RBP: 00007fa4f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.766678][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 181.774742][ C1] R13: 00007fa4f49e6038 R14: 00007fa4f49e5fa0 R15: 00007ffd50077278 [ 181.782906][ C1] [ 181.785984][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.793299][ C1] CPU: 1 UID: 0 PID: 7140 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 181.802534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.812636][ C1] Call Trace: [ 181.815952][ C1] [ 181.818825][ C1] dump_stack_lvl+0x99/0x250 [ 181.823470][ C1] ? __asan_memcpy+0x40/0x70 [ 181.828117][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.833365][ C1] ? __pfx__printk+0x10/0x10 [ 181.838015][ C1] vpanic+0x237/0x6d0 [ 181.842036][ C1] ? __pfx_vpanic+0x10/0x10 [ 181.846583][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 181.851910][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 181.857133][ C1] panic+0xb9/0xc0 [ 181.860861][ C1] ? __pfx_panic+0x10/0x10 [ 181.865298][ C1] __warn+0x334/0x4c0 [ 181.869288][ C1] ? put_cred_rcu+0x2c5/0x340 [ 181.873979][ C1] ? put_cred_rcu+0x2c5/0x340 [ 181.878667][ C1] report_bug+0x2be/0x4f0 [ 181.883007][ C1] ? put_cred_rcu+0x2c5/0x340 [ 181.887698][ C1] ? put_cred_rcu+0x2c5/0x340 [ 181.892382][ C1] ? put_cred_rcu+0x2c7/0x340 [ 181.897064][ C1] handle_bug+0x84/0x160 [ 181.901337][ C1] exc_invalid_op+0x1a/0x50 [ 181.905884][ C1] asm_exc_invalid_op+0x1a/0x20 [ 181.910835][ C1] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 181.916230][ C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 08 c4 8d 00 e8 b3 7c 32 00 4c 89 e7 be 03 00 00 00 e8 66 72 ff 02 e9 b8 fe ff ff e8 9c 7c 32 00 90 <0f> 0b 90 eb 9f e8 91 7c 32 00 4c 89 ff be 03 00 00 00 e8 44 72 ff [ 181.935889][ C1] RSP: 0018:ffffc90000a08ba8 EFLAGS: 00010246 [ 181.941987][ C1] RAX: ffffffff818ea124 RBX: ffff88802d8d21a0 RCX: ffff88802b57bd00 [ 181.949984][ C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 181.957969][ C1] RBP: 0000000000000004 R08: ffff88802e9d0193 R09: 1ffff11005d3a032 [ 181.965948][ C1] R10: dffffc0000000000 R11: ffffed1005d3a033 R12: dffffc0000000000 [ 181.974020][ C1] R13: ffff88802d8d2100 R14: ffff88802e9d0000 R15: ffff88802e9d0190 [ 181.982021][ C1] ? put_cred_rcu+0x2c4/0x340 [ 181.986809][ C1] ? put_cred_rcu+0x2c4/0x340 [ 181.991533][ C1] ? __pfx_put_cred_rcu+0x10/0x10 [ 181.996569][ C1] ? rcu_core+0xc37/0x1770 [ 182.001000][ C1] rcu_core+0xcab/0x1770 [ 182.005272][ C1] ? __pfx_rcu_core+0x10/0x10 [ 182.010000][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 182.015655][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 182.021935][ C1] handle_softirqs+0x286/0x870 [ 182.026724][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 182.031513][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 182.036836][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 182.042052][ C1] __irq_exit_rcu+0xca/0x1f0 [ 182.046674][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 182.051899][ C1] irq_exit_rcu+0x9/0x30 [ 182.056167][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 182.061903][ C1] [ 182.064839][ C1] [ 182.067776][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 182.073761][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 182.079320][ C1] Code: 48 c7 c6 83 e6 96 8d e8 b9 6a 00 ff 90 0f 0b cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 182.098959][ C1] RSP: 0018:ffffc9000abd7370 EFLAGS: 00000246 [ 182.105053][ C1] RAX: ffffffff820cee28 RBX: dffffc0000000000 RCX: ffffffff820cee56 [ 182.113120][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001a19c80 [ 182.121097][ C1] RBP: ffffc9000abd7630 R08: ffffea0001a19cb3 R09: 1ffffd4000343396 [ 182.129075][ C1] R10: dffffc0000000000 R11: fffff94000343397 R12: dffffc0000000000 [ 182.137123][ C1] R13: 00007fa4f3c6d000 R14: ffffc9000abd7840 R15: ffffea0001a19c80 [ 182.145115][ C1] ? unmap_page_range+0x1fb8/0x4370 [ 182.150330][ C1] ? unmap_page_range+0x1fe6/0x4370 [ 182.155548][ C1] unmap_page_range+0x1fe6/0x4370 [ 182.160629][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 182.166019][ C1] ? mas_find+0xb0e/0xd30 [ 182.170361][ C1] ? unmap_vmas+0x144/0x580 [ 182.174877][ C1] unmap_vmas+0x399/0x580 [ 182.179231][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 182.184129][ C1] exit_mmap+0x240/0xb40 [ 182.188378][ C1] ? uprobe_clear_state+0x20f/0x290 [ 182.193594][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 182.198386][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 182.204055][ C1] ? __pfx_exit_aio+0x10/0x10 [ 182.208771][ C1] ? uprobe_clear_state+0x27c/0x290 [ 182.213987][ C1] __mmput+0x118/0x430 [ 182.218078][ C1] exit_mm+0x1da/0x2c0 [ 182.222156][ C1] ? __pfx_exit_mm+0x10/0x10 [ 182.226777][ C1] do_exit+0x650/0x2300 [ 182.230949][ C1] ? do_raw_spin_lock+0x121/0x290 [ 182.235990][ C1] ? __pfx_do_exit+0x10/0x10 [ 182.240608][ C1] do_group_exit+0x21c/0x2d0 [ 182.245296][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.250513][ C1] get_signal+0x1285/0x1340 [ 182.255049][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 182.260611][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.266794][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 182.272272][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 182.277574][ C1] ? rcu_is_watching+0x15/0xb0 [ 182.282359][ C1] do_syscall_64+0x2e9/0xfa0 [ 182.286970][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.293048][ C1] ? clear_bhb_loop+0x60/0xb0 [ 182.298172][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.304070][ C1] RIP: 0033:0x7fa4f478f6c9 [ 182.308502][ C1] Code: Unable to access opcode bytes at 0x7fa4f478f69f. [ 182.315538][ C1] RSP: 002b:00007fa4f5649fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 182.323992][ C1] RAX: fffffffffffffffc RBX: 00007fa4f49e5fa0 RCX: 00007fa4f478f6c9 [ 182.331977][ C1] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 498144ee5f62e049 [ 182.339956][ C1] RBP: 00007fa4f4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.348019][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 182.356001][ C1] R13: 00007fa4f49e6038 R14: 00007fa4f49e5fa0 R15: 00007ffd50077278 [ 182.363999][ C1] [ 182.367334][ C1] Kernel Offset: disabled [ 182.371675][ C1] Rebooting in 86400 seconds..