last executing test programs: 16.875511611s ago: executing program 4 (id=63): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r0 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) 13.946637126s ago: executing program 2 (id=69): sysfs$2(0x2, 0x7, 0x0) 13.908880577s ago: executing program 4 (id=70): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) 13.863419009s ago: executing program 1 (id=71): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 12.860839742s ago: executing program 2 (id=72): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhVEROLESiFcMAihHCpUlUPPVuI0VjZJlbgorRC4gOCExKF/QEHyjQNC4h4ULlzKrVcfKyFxiThEvSya2Vl7d71+jWMn8PlE43meeV7mt888M+NdZzUB/m9dPZfmwxS5eu6NB2V+dWW2vboye6Qubicp042k2V2luJMUj5K5srzoW9K33uCjxStvffp49bNurlkvVf2xrdqNMKLucr1kuu5vemTL8Z3uYrkOLy8luVavB03stK+BiuWgna3XcOg6gxrpLO+m+W7OW+A507s7Fd375gZTydEkk/XvAamvDo2Di3Bffa2X2NVVDgAAAF5Qn9w97AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgxVM9/7+1lm10NyXTKXrP/5/obavTz6G5Hdd8+EzjAAAAAAAAAICD8dUneZIHOdbLd4rqb/5nqsyJfN5JvpD3cj8LuZfzeZD5LGUp93IxyVRfRxMP5peW7l1ca1ka3fLSyJaX9vwSvrnnlgAAAAAAAADwv+OXaa3//R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4HRTLWXVXLiXqdqTSaWS/LcvLPJBOHHe8uFKM2Pjz4OAAAAOCpTO6hzRef5Eke5Fgv3ymq9/xfqt4vT+a93MlSFrOUdhZyvX4PXb7rb6yuzLZXV2Zvl0uZH+z3+//eVRgTdQ9jVW7Unk9VNVq5kcVqy/lcq4K5nkZ332eTU714+uLq82EZU/G92g4ja9bDWu7s95t9irAvBj+KaGxRs7UeXLI2IjN1bGXL490RKKoPapLhkRg+Oht21hzITVVVxtf2dDGNtU9+TjyDMT9ar8vX85tnOuY70T8WayPRSDUSl3qzrzxnth6J5Ot//dPbN9t3bt28cf/c4b6kXRjbZPvwnJjtG4lXX+iRaO6y/kw1EifX8lfzo/wk5zKdN3Mvi/lp5rOUhXTq8vl6Ppc/p7YeqbmB3JvbRTJRH5fuMdtJTNP5YZWaz5mq7bEspsjdXM9CXq/+XcrFfDuXczlX+o7wyU3jrl5bddY3hs/63pH+28jgz36jTpRXt9+uX+XmtnrFm83O/dK99pfjerxvXLuz/vFareN958FM3yi93Bud8ZGd7+Xa2PxynSj38att7hMHa6oeifIE6t0letG90h2JZnUv2jjP/9Ap26V9p9O5Of/uJv0vD+Vfq9fltFr5yna1e0Yfiv1VzpeXM1lfSQZnR1n2ytpVpq+ssz6Xu2WDd9yy3cmqrCh6Z+qPc7eaABvP1In6d7iNPV2qyl4dKjtdX8PLslN9ZQO/b+Vu2rl+AOMHwF784+215FSOTrT+1fqk9XHr162brTcmf3DkO0dOT2T87+Pfbc6MvdY4XfwlH+fn6+//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvbv//ge35tvthXujE43NiwYSrQxv2a7noURRP9BnVJ1b9VMKdtXhIScmkwxsqZ5zdOBhtIbD2JDo/CI58PHpPURwdJ3flYnmjg733MCWP2/s8MPt4xnL0DzcwXnxDBONHOxOxzJ6AhzWFQk4KBeWbr974f77H3xr8fb8OwvvLNwZv3z5ysyVy6/PXrix2F6Y6f487CiBZ2H9pn/YkQAAAAAAAAAAAAA7NeqLAWde2u5LIxsSjSTD3/HwPwsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfXH1XJoPU+TizPmZMr+6Mtsul156vWYzSaORFD9LikfJXLpLpvq6K/LHR+mM2M9Hi1fe+vTx6mfrfTW79ZNGvd7c1qVJlusl00nG6vVTGOjv2lP3V/yn9xrKAfu80+nMPV18sD/+GwAA//9kyu2N") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x8103) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0) 12.074375667s ago: executing program 4 (id=74): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 11.868815704s ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0xff9a}, {&(0x7f0000000280)="3d2af7cd5f25980f6c84e4ead3a21f6072a5cc81d7379bf9796690746683d67f1ab26684bc6163e80cfec996421232673054cb14e5037b4779a038c5b752d99216904fcdb0d30eebb64c14860ae37309dfba017bc1f1b8d9ec896b3b28843da47544d02a01856721", 0x68}, {&(0x7f0000000140)="52ec3fb22da31623b01f4af643cdc32e577595172367796f"}, {&(0x7f00000001c0)="1aab713bf267db3c39"}], 0x2}, 0x4) 10.899862115s ago: executing program 1 (id=76): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f00000004c0)={[{@uid}, {@type={'type', 0x3d, "a5efd8b9"}}, {@nls={'nls', 0x3d, 'ascii'}}, {@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0xb}}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x70c, &(0x7f0000003800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) 10.884362936s ago: executing program 0 (id=77): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x48) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_getoverrun(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x80, 0x200, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xfffffffffffffffd}, 0x0, 0x0) unshare(0x20000400) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 9.569108969s ago: executing program 2 (id=79): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r3, 0x0, 0xf, 0x8) 9.430170343s ago: executing program 0 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)}], 0x1) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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") chdir(&(0x7f0000000040)='./file0\x00') 9.323228227s ago: executing program 1 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r0 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) 7.756144598s ago: executing program 1 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 7.69396096s ago: executing program 0 (id=83): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 7.648531011s ago: executing program 2 (id=84): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) 7.148249968s ago: executing program 3 (id=85): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) 6.76901088s ago: executing program 3 (id=86): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6.702092472s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000300)={0xff, 0x7, 0xff, 0x3f, 0x1, "ab5aa80d00", 0x1ff, 0x7}) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 6.48201871s ago: executing program 0 (id=88): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 6.372712853s ago: executing program 3 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0xff9a}, {&(0x7f0000000280)="3d2af7cd5f25980f6c84e4ead3a21f6072a5cc81d7379bf9796690746683d67f1ab26684bc6163e80cfec996421232673054cb14e5037b4779a038c5b752d99216904fcdb0d30eebb64c14860ae37309dfba017bc1f1b8d9ec896b3b28843da47544d02a01856721", 0x68}, {&(0x7f0000000140)="52ec3fb22da31623b01f4af643cdc32e577595172367796f"}, {&(0x7f00000001c0)="1aab713bf267db3c39"}], 0x2}, 0x4) 5.391126495s ago: executing program 4 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) timerfd_create(0x0, 0x800) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) 5.339852857s ago: executing program 0 (id=91): socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) fcntl$getownex(r3, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x0, "11010000030004080000000000001e00000000009dffffffffffffffa8f8d148", 0x20303159}) listen(0xffffffffffffffff, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1/file4\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r0, 0xffffffffffffffff, 0x0) 4.253033702s ago: executing program 1 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8946, 0x0) 4.087196597s ago: executing program 4 (id=93): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) r0 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) 3.944782622s ago: executing program 3 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000100)}], 0x1) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$eJzs0D9rU1EYx/Hvc+7JnwpVo+JQwQYsxhuqyb1VB6fgFCEXHFwEg4Y0NsVETW8GW1roIgWpdvAN6FRHFXQSUXQuDoKDXpdu0gzFQRwkkpsTwdfQ81l+9/nBPefwNMNOmAL+7C7XKRFz2M8nBA1MyrBTapivzfzD5MYwuGjmdZPPTE6Ei0u3aq1WYyF7IUvmvwL4GXf/qvAFRxU9oYR82V2u1+RGQL9EW80GZCrkH+JU6biPmNDjHLmOQz+3ziVFR3IVOFDotu8WwsWl0/Pt2lxjrnHb92fOF88Wi+f8ws35VqP4CnEfiOIJK7gBqYAxd4VElftbeh/TgrhNFTmS75GssrHlnDox3UO5O/QR3uV6pL7pZlZd4STpa4PHlzksPMUJmKowptDEF5WRy+qlePqz/pVQpFcd50z9Tmt27aqS38nNkuykxdsmkfPw8x4zg9WkDvGetYipiHLEZsT2dyblzeCW0V716gfguZmOcRyS3Kt1uwteEj6KDh4fBPwMjDM4TsXvysBb848Jvo4+LMuyLMuyLMuyrD3gbwAAAP//xflkvA==") chdir(&(0x7f0000000040)='./file0\x00') 3.214219836s ago: executing program 1 (id=95): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0xfff, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.776154093s ago: executing program 4 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x40000, 0x0, 0xc000}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.747000284s ago: executing program 3 (id=97): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c00000000000190780a010102ac1414aa05009078e000000148d7fd5fa7b8f88368edccbcac1e00010001070b06ac1414bbe000000100"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20050800) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 1.56588478s ago: executing program 0 (id=98): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) r5 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x9, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000480)='./file1\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfb, 0x1a5, &(0x7f0000000600)="$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") chdir(&(0x7f0000000040)='./file0\x00') 0s ago: executing program 3 (id=99): syz_io_uring_setup(0x5d99, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. syzkaller login: [ 56.210343][ T4170] cgroup: Unknown subsys name 'net' [ 56.368567][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.879434][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.245393][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 59.284730][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 59.362742][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 59.406847][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 59.428196][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 59.475494][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.483076][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.491328][ T4190] device bridge_slave_0 entered promiscuous mode [ 59.505450][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.512516][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.521198][ T4182] device bridge_slave_0 entered promiscuous mode [ 59.545919][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.553109][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.561259][ T4190] device bridge_slave_1 entered promiscuous mode [ 59.574700][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.581872][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.590724][ T4182] device bridge_slave_1 entered promiscuous mode [ 59.637987][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.670244][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.693290][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.700365][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.708903][ T4183] device bridge_slave_0 entered promiscuous mode [ 59.717938][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.733503][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.740668][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.748656][ T4192] device bridge_slave_0 entered promiscuous mode [ 59.763743][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.770818][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.779156][ T4183] device bridge_slave_1 entered promiscuous mode [ 59.787596][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.804873][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.812117][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.820290][ T4192] device bridge_slave_1 entered promiscuous mode [ 59.830441][ T4190] team0: Port device team_slave_0 added [ 59.855117][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.862248][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.870268][ T4195] device bridge_slave_0 entered promiscuous mode [ 59.885907][ T4190] team0: Port device team_slave_1 added [ 59.898906][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.915744][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.923226][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.931903][ T4195] device bridge_slave_1 entered promiscuous mode [ 59.947549][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.958313][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.969731][ T4182] team0: Port device team_slave_0 added [ 59.989545][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.005702][ T4182] team0: Port device team_slave_1 added [ 60.025515][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.032774][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.059911][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.078963][ T4183] team0: Port device team_slave_0 added [ 60.094678][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.107104][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.116948][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.124163][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.150652][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.167495][ T4183] team0: Port device team_slave_1 added [ 60.207226][ T4192] team0: Port device team_slave_0 added [ 60.215278][ T4192] team0: Port device team_slave_1 added [ 60.232156][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.239310][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.265680][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.278853][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.286007][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.312518][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.325225][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.332246][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.359430][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.372091][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.379436][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.406669][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.431469][ T4195] team0: Port device team_slave_0 added [ 60.457267][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.464510][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.492000][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.514159][ T4195] team0: Port device team_slave_1 added [ 60.520514][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.527688][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.553892][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.603700][ T4182] device hsr_slave_0 entered promiscuous mode [ 60.610365][ T4182] device hsr_slave_1 entered promiscuous mode [ 60.631746][ T4190] device hsr_slave_0 entered promiscuous mode [ 60.639091][ T4190] device hsr_slave_1 entered promiscuous mode [ 60.647266][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.655161][ T4190] Cannot create hsr debugfs directory [ 60.664987][ T4183] device hsr_slave_0 entered promiscuous mode [ 60.672105][ T4183] device hsr_slave_1 entered promiscuous mode [ 60.679295][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.687154][ T4183] Cannot create hsr debugfs directory [ 60.738403][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.745814][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.772093][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.788408][ T4192] device hsr_slave_0 entered promiscuous mode [ 60.797208][ T4192] device hsr_slave_1 entered promiscuous mode [ 60.804393][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.812148][ T4192] Cannot create hsr debugfs directory [ 60.834975][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.842699][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.869643][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.904035][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 60.910879][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 60.917374][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 60.935286][ T4195] device hsr_slave_0 entered promiscuous mode [ 60.942053][ T4195] device hsr_slave_1 entered promiscuous mode [ 60.948904][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.956983][ T4195] Cannot create hsr debugfs directory [ 60.983150][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 60.993062][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 61.235435][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.248247][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.257394][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.268185][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.340617][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.356691][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.369059][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.379939][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.443552][ T4183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.455821][ T4183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.474620][ T4183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.487369][ T4183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.515262][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.546690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.557467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.572182][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.585390][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.607335][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.617043][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.627102][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.634634][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.643708][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.653710][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.668024][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.681520][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.690919][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.699994][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.707420][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.726952][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.741722][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.776731][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.794704][ T4195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.807540][ T4195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.817895][ T4195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.833535][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.842788][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.865852][ T4195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.887786][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.898494][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.907585][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.918751][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.928348][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.949391][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.961710][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.975354][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.984728][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.001996][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.042432][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.063255][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.071112][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.112095][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.122747][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.132122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.140902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.196437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.206523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.216525][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.223660][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.233786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.243637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.252164][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.259604][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.268072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.277797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.286793][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.294109][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.302157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.311998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.320901][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.328229][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.337456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.345928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.373199][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.391275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.400097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.411053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.420780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.432159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.441343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.470956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.479038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.492698][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.503975][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.512807][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.523055][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.531705][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.547296][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.560691][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.580747][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.589850][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.598972][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.608752][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.617578][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.626527][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.635358][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.644531][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.658842][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.669007][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.699709][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.710711][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.725394][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.733624][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.742229][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.751613][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.758850][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.766988][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.776263][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.785524][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.792777][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.801437][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.810644][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.820036][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.829157][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.838313][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.847062][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.856331][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.865820][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.874875][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.884021][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.891900][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.926937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.939431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.952269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.966591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.980593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.983502][ T4224] Bluetooth: hci1: command 0x041b tx timeout [ 62.993595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.003107][ T4224] Bluetooth: hci2: command 0x041b tx timeout [ 63.003217][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 63.030615][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.051800][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.063517][ T4224] Bluetooth: hci3: command 0x041b tx timeout [ 63.069828][ T4224] Bluetooth: hci4: command 0x041b tx timeout [ 63.079604][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.088225][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.098646][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.108445][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.118074][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.130566][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.147988][ T4182] device veth0_vlan entered promiscuous mode [ 63.184539][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.219912][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.236712][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.251691][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.269419][ T4182] device veth1_vlan entered promiscuous mode [ 63.291775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.300953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.310504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.320123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.329301][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.336983][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.351347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.393149][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.402280][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.415020][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.422675][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.433915][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.442601][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.452400][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.460864][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.468936][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.478725][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.490398][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.498267][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.521212][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.534937][ T4182] device veth0_macvtap entered promiscuous mode [ 63.550385][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.578367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.587688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.597510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.605217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.615002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.637178][ T4182] device veth1_macvtap entered promiscuous mode [ 63.653983][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.661081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.670948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.679916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.688853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.697618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.709485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.718216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.727033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.736839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.746038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.763760][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.806105][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.831070][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.840435][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.850212][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.860798][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.875998][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.890603][ T4192] device veth0_vlan entered promiscuous mode [ 63.903648][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.912498][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.922776][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.932025][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.943280][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.952369][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.962837][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.971544][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.984285][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.001841][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.011146][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.026397][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.075173][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.090678][ T4183] device veth0_vlan entered promiscuous mode [ 64.097617][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.117510][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.129283][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.137170][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.145382][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.154589][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.163339][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.171170][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.179452][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.189511][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.205926][ T4190] device veth0_vlan entered promiscuous mode [ 64.230775][ T4192] device veth1_vlan entered promiscuous mode [ 64.242150][ T4183] device veth1_vlan entered promiscuous mode [ 64.261616][ T4190] device veth1_vlan entered promiscuous mode [ 64.338336][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.354721][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.365189][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.375042][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.383860][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.392170][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.400953][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.410262][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.453501][ T4183] device veth0_macvtap entered promiscuous mode [ 64.468420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.478352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.497747][ T4192] device veth0_macvtap entered promiscuous mode [ 64.519939][ T4183] device veth1_macvtap entered promiscuous mode [ 64.532218][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.541525][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.550782][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.560787][ T4192] device veth1_macvtap entered promiscuous mode [ 64.577042][ T4190] device veth0_macvtap entered promiscuous mode [ 64.602198][ T4190] device veth1_macvtap entered promiscuous mode [ 64.617489][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.633344][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.647198][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.659147][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.672330][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.696409][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.706007][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.715438][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.724279][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.733793][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.742681][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.757162][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.769309][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.779884][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.791346][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.803367][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.813414][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.824283][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.838273][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.853186][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.861120][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.869446][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.878956][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.888206][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.897347][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.908058][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.916501][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.926507][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.945044][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.959865][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968993][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.978446][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.034759][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.052476][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.063509][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 65.064673][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.069624][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 65.087084][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 65.087737][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.105085][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.116626][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.129327][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.138726][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.143846][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 65.156655][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 65.157158][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.173077][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.183691][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.195363][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.208151][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.217438][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.227831][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.238349][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260063][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.269365][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.297044][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.309955][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.324979][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.335850][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.347079][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.358271][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.368949][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.379814][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.392553][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.418408][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.434942][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.449625][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.459149][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.468901][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.477091][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.493465][ T4195] device veth0_vlan entered promiscuous mode [ 65.524500][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.538126][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.548397][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.557710][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590674][ T4195] device veth1_vlan entered promiscuous mode [ 65.598580][ T4228] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.641266][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.653550][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.682798][ T4195] device veth0_macvtap entered promiscuous mode [ 65.707677][ T4195] device veth1_macvtap entered promiscuous mode [ 65.722806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.735618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.744834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.754819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.763597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.775862][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.791468][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.808735][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.821068][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833499][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.844429][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.854690][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.865501][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.875685][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.886288][ T4228] usb 1-1: Using ep0 maxpacket: 16 [ 65.886393][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.904999][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.917538][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.928199][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.938810][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.950255][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.960342][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.971976][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.981931][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.993631][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.005049][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.015795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.023811][ T4228] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.026322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.034303][ T4228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.049477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.060639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.069948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.097184][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.107503][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.109312][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.119222][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135843][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.137531][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.178280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.206223][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.207549][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.222562][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.233108][ T4228] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.242452][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.252697][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.264899][ T4228] usb 1-1: Product: syz [ 66.269111][ T4228] usb 1-1: Manufacturer: syz [ 66.275203][ T4228] usb 1-1: SerialNumber: syz [ 66.290571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.299138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.356697][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.390369][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.506277][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.533553][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.624956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.644191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.041293][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.143496][ T4224] Bluetooth: hci1: command 0x0419 tx timeout [ 67.185451][ T4224] Bluetooth: hci2: command 0x0419 tx timeout [ 67.328949][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.336796][ T4228] usb 1-1: 0:2 : does not exist [ 67.353186][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 67.356587][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.466050][ T4224] Bluetooth: hci3: command 0x0419 tx timeout [ 67.467609][ T4228] usb 1-1: USB disconnect, device number 2 [ 67.486915][ T4224] Bluetooth: hci4: command 0x0419 tx timeout [ 67.582015][ T4282] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.863730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.983278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.033617][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.042980][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.177248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.187552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 68.197688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.434047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.604945][ T4228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.817926][ T4289] loop3: detected capacity change from 0 to 1024 [ 68.874393][ T4289] ======================================================= [ 68.874393][ T4289] WARNING: The mand mount option has been deprecated and [ 68.874393][ T4289] and is ignored by this kernel. Remove the mand [ 68.874393][ T4289] option from the mount to silence this warning. [ 68.874393][ T4289] ======================================================= [ 68.984718][ T4269] loop1: detected capacity change from 0 to 32768 [ 69.008643][ T4281] loop2: detected capacity change from 0 to 40427 [ 69.023352][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.047251][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.069793][ T4289] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,jqfmt=vfsv0,auto_da_alloc=0x0000000000000005,max_batch_time=0x0000000000000003,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: none. [ 69.074512][ T4228] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 69.101624][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.114320][ T4269] JBD2: Ignoring recovery information on journal [ 69.123785][ T4228] usb 1-1: config 0 descriptor?? [ 69.193545][ T4281] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 69.210202][ T4269] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 69.233946][ T4281] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 69.375296][ T4281] F2FS-fs (loop2): invalid crc value [ 69.492877][ T4281] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 70.008370][ T4228] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 70.037937][ T4301] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3885: comm syz.3.8: Allocating blocks 497-513 which overlap fs metadata [ 70.059909][ T4228] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 70.112065][ T4301] EXT4-fs (loop3): pa ffff888074bf9700: logic 131104, phys. 177, len 21 [ 70.120956][ T4301] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 70.166203][ T4287] loop4: detected capacity change from 0 to 32768 [ 70.175789][ T4281] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 70.186894][ T4281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.203137][ T4228] cp2112 0003:10C4:EA90.0001: error requesting version [ 70.205865][ T4287] XFS: attr2 mount option is deprecated. [ 70.232226][ T4228] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 70.286477][ T4192] ocfs2: Unmounting device (7,1) on (node local) [ 70.334539][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.443903][ T4287] XFS (loop4): Mounting V5 Filesystem [ 70.566463][ T4183] attempt to access beyond end of device [ 70.566463][ T4183] loop2: rw=2049, want=45104, limit=40427 [ 70.607671][ T4287] XFS (loop4): Ending clean mount [ 70.715743][ T4287] XFS (loop4): Quotacheck needed: Please wait. [ 70.913485][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 71.387185][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.394036][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.451077][ T4287] XFS (loop4): Quotacheck: Done. [ 71.458820][ T4275] usb 1-1: USB disconnect, device number 3 [ 71.521716][ T4316] input: syz1 as /devices/virtual/input/input5 [ 71.585106][ T26] audit: type=1800 audit(1774984628.028:2): pid=4287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 71.669527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.679004][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.095047][ T4195] XFS (loop4): Unmounting Filesystem [ 73.257041][ T4344] 9pnet: Insufficient options for proto=fd [ 74.288342][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.553008][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 74.673883][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.985169][ T4351] loop1: detected capacity change from 0 to 8 [ 74.992317][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.230312][ T21] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.241028][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.249707][ T21] usb 4-1: Product: syz [ 75.255361][ T21] usb 4-1: Manufacturer: syz [ 75.260084][ T21] usb 4-1: SerialNumber: syz [ 77.273257][ T21] usb 4-1: 0:2 : does not exist [ 77.363879][ T21] usb 4-1: USB disconnect, device number 2 [ 77.663018][ T4275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.665148][ T4172] udevd[4172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.872214][ T4369] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 77.942979][ T4275] usb 5-1: Using ep0 maxpacket: 32 [ 78.083182][ T4369] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 78.473192][ T4275] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 78.485317][ T4275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.529564][ T4275] usb 5-1: config 0 descriptor?? [ 78.644113][ T4379] device syzkaller0 entered promiscuous mode [ 78.775542][ T4275] as10x_usb: device has been detected [ 79.567471][ T4275] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 79.588472][ T4275] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 79.626199][ T4275] as10x_usb: error during firmware upload part1 [ 79.654877][ T4275] Registered device nBox DVB-T Dongle [ 79.670393][ T4275] usb 5-1: USB disconnect, device number 2 [ 79.698163][ T4391] device syzkaller0 entered promiscuous mode [ 79.713195][ T4275] Unregistered device nBox DVB-T Dongle [ 79.717660][ T4275] as10x_usb: device has been disconnected [ 79.854254][ T4398] 9pnet: Insufficient options for proto=fd [ 80.833352][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.636872][ T13] cfg80211: failed to load regulatory.db [ 81.651570][ T4408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.33'. [ 81.836992][ T4228] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 81.848021][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.865691][ T4228] usb 4-1: config 0 descriptor?? [ 81.962223][ T4416] loop0: detected capacity change from 0 to 16 [ 82.028604][ T4416] erofs: Unknown parameter '0xffffffffffffffffS2/b*DOb h*wR [ 82.028604][ T4416] ߱̏Z+ ' [ 82.049383][ T4189] block nbd0: Receive control failed (result -1) [ 82.674926][ T4228] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 83.412779][ T4434] loop4: detected capacity change from 0 to 8 [ 84.431525][ T4442] loop2: detected capacity change from 0 to 2048 [ 84.572209][ T4442] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.639849][ T4442] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.717669][ T4228] gspca_stv06xx: I2C: Read error writing address: -71 [ 84.744805][ T4228] usb 4-1: USB disconnect, device number 3 [ 84.774305][ T4438] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 85.074414][ T4452] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 86.790006][ T4469] loop0: detected capacity change from 0 to 1024 [ 86.924456][ T4471] 9pnet: Insufficient options for proto=fd [ 88.745929][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,jqfmt=vfsv0,auto_da_alloc=0x0000000000000005,max_batch_time=0x0000000000000003,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: none. [ 88.769249][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.219145][ T4476] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3885: comm syz.0.47: Allocating blocks 497-513 which overlap fs metadata [ 89.373863][ T4476] EXT4-fs (loop0): pa ffff888074bf99a0: logic 131104, phys. 177, len 21 [ 89.383058][ T4476] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 89.487075][ T4478] loop2: detected capacity change from 0 to 1024 [ 90.211794][ T4419] hfsplus: b-tree write err: -5, ino 25 [ 90.269287][ T4419] hfsplus: b-tree write err: -5, ino 4 [ 90.711408][ T4419] hfsplus: b-tree write err: -5, ino 2 [ 90.736226][ T4419] hfsplus: b-tree write err: -5, ino 26 [ 91.967034][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 92.263155][ T4197] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.481708][ T4490] loop2: detected capacity change from 0 to 32768 [ 92.563720][ T4490] (syz.2.52,4490,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.581486][ T4507] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.620789][ T4490] (syz.2.52,4490,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.625193][ T4507] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.683976][ T4197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.710444][ T4490] JBD2: Ignoring recovery information on journal [ 92.718402][ T4197] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.747396][ T4197] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 92.768388][ T4197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.796436][ T4197] usb 2-1: config 0 descriptor?? [ 92.933755][ T4490] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 93.104938][ T4520] 9pnet: Insufficient options for proto=fd [ 93.885699][ T4197] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 94.185810][ T4197] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 94.528280][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 94.586370][ T4197] cp2112 0003:10C4:EA90.0002: error requesting version [ 94.620155][ T4197] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 95.396758][ T4534] ptrace attach of "./syz-executor exec"[4535] was attempted by "./syz-executor exec"[4534] [ 95.951492][ T23] usb 2-1: USB disconnect, device number 2 [ 97.226164][ T4549] loop2: detected capacity change from 0 to 2048 [ 97.359907][ T4549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.374196][ T4549] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.414169][ T4548] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 98.883493][ T4572] loop2: detected capacity change from 0 to 1024 [ 99.636770][ T4207] hfsplus: b-tree write err: -5, ino 3 [ 99.939088][ T4579] 9pnet: Insufficient options for proto=fd [ 100.816611][ T4583] loop0: detected capacity change from 0 to 128 [ 100.844243][ T4582] device syzkaller0 entered promiscuous mode [ 100.878208][ T4585] loop1: detected capacity change from 0 to 1024 [ 102.219209][ T4295] hfsplus: b-tree write err: -5, ino 25 [ 102.230950][ T4295] hfsplus: b-tree write err: -5, ino 4 [ 102.245827][ T4295] hfsplus: b-tree write err: -5, ino 2 [ 102.265783][ T4295] hfsplus: b-tree write err: -5, ino 26 [ 102.284736][ T4593] loop0: detected capacity change from 0 to 8 [ 102.522717][ T4596] ptrace attach of "./syz-executor exec"[4597] was attempted by "./syz-executor exec"[4596] [ 104.492368][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.551003][ T4608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.377489][ T4655] loop3: detected capacity change from 0 to 8 [ 108.386462][ T4658] loop1: detected capacity change from 0 to 512 [ 108.631890][ T4659] ptrace attach of "./syz-executor exec"[4660] was attempted by "./syz-executor exec"[4659] [ 109.837566][ T4658] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.95: invalid indirect mapped block 256 (level 2) [ 109.933458][ T4658] EXT4-fs (loop1): 2 truncates cleaned up [ 109.939348][ T4658] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 111.405108][ T4658] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.95: bg 0: block 5: invalid block bitmap [ 111.486771][ T4658] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 111.563093][ T4658] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.563093][ T4658] [ 111.623560][ T4658] EXT4-fs (loop1): Total free blocks count 0 [ 111.630010][ T4658] EXT4-fs (loop1): Free/Dirty block details [ 111.635818][ T4673] ================================================================== [ 111.645029][ T4673] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 111.654948][ T4673] Read of size 1 at addr ffff888077d46608 by task syz.3.99/4673 [ 111.662770][ T4673] [ 111.665122][ T4673] CPU: 1 PID: 4673 Comm: syz.3.99 Not tainted syzkaller #0 [ 111.672807][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.672963][ T4658] EXT4-fs (loop1): free_blocks=0 [ 111.683121][ T4673] Call Trace: [ 111.683141][ T4673] [ 111.683152][ T4673] dump_stack_lvl+0x188/0x250 [ 111.683184][ T4673] ? show_regs_print_info+0x20/0x20 [ 111.683212][ T4673] ? load_image+0x400/0x400 [ 111.683230][ T4673] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 111.683259][ T4673] print_address_description+0x60/0x2d0 [ 111.683280][ T4673] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 111.683303][ T4673] kasan_report+0xdf/0x130 [ 111.683327][ T4673] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 111.683355][ T4673] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 111.683391][ T4673] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 111.683431][ T4673] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 111.683455][ T4673] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 111.703001][ T4658] EXT4-fs (loop1): dirty_blocks=2 [ 111.705512][ T4673] xfrm_policy_inexact_insert+0xe0/0x1460 [ 111.722927][ T4658] EXT4-fs (loop1): Block reservation details [ 111.728393][ T4673] ? do_raw_spin_lock+0x128/0x2f0 [ 111.728431][ T4673] ? __rwlock_init+0x140/0x140 [ 111.743581][ T4658] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 111.746143][ T4673] ? policy_hash_bysel+0x135/0x7b0 [ 111.804501][ T4673] xfrm_policy_insert+0x112/0x930 [ 111.809702][ T4673] xfrm_add_policy+0x4f2/0x880 [ 111.814790][ T4673] ? xfrm_dump_sa_done+0xc0/0xc0 [ 111.819845][ T4673] ? apparmor_capable+0x12c/0x190 [ 111.825354][ T4673] ? __nla_parse+0x3c/0x50 [ 111.829968][ T4673] xfrm_user_rcv_msg+0x5e5/0x910 [ 111.835516][ T4673] ? xfrm_netlink_rcv+0x90/0x90 [ 111.841173][ T4673] ? xfrm_netlink_rcv+0x66/0x90 [ 111.846417][ T4673] ? __mutex_lock_common+0x465/0x2400 [ 111.852028][ T4673] ? __skb_clone+0x480/0x790 [ 111.856951][ T4673] netlink_rcv_skb+0x1f5/0x440 [ 111.861778][ T4673] ? xfrm_netlink_rcv+0x90/0x90 [ 111.867117][ T4673] ? netlink_ack+0xb50/0xb50 [ 111.872042][ T4673] ? __lock_acquire+0x7d10/0x7d10 [ 111.877494][ T4673] xfrm_netlink_rcv+0x75/0x90 [ 111.882317][ T4673] netlink_unicast+0x774/0x920 [ 111.887550][ T4673] netlink_sendmsg+0x8ba/0xbe0 [ 111.892666][ T4673] ? netlink_getsockopt+0x570/0x570 [ 111.898507][ T4673] ? aa_sock_msg_perm+0x94/0x150 [ 111.904066][ T4673] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 111.909636][ T4673] ? security_socket_sendmsg+0x7c/0xa0 [ 111.915125][ T4673] ? netlink_getsockopt+0x570/0x570 [ 111.920443][ T4673] ____sys_sendmsg+0x5b7/0x8f0 [ 111.925506][ T4673] ? __sys_sendmsg_sock+0x30/0x30 [ 111.930657][ T4673] ? import_iovec+0x6f/0xa0 [ 111.935473][ T4673] ___sys_sendmsg+0x236/0x2e0 [ 111.940193][ T4673] ? __sys_sendmsg+0x2a0/0x2a0 [ 111.945008][ T4673] ? percpu_counter_add_batch+0x13b/0x160 [ 111.950974][ T4673] __se_sys_sendmsg+0x1af/0x290 [ 111.956038][ T4673] ? __x64_sys_sendmsg+0x80/0x80 [ 111.961072][ T4673] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 111.967205][ T4673] ? lockdep_hardirqs_on+0x94/0x140 [ 111.972450][ T4673] do_syscall_64+0x4c/0xa0 [ 111.977185][ T4673] ? clear_bhb_loop+0x30/0x80 [ 111.982050][ T4673] ? clear_bhb_loop+0x30/0x80 [ 111.987464][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.994294][ T4673] RIP: 0033:0x7f3ff297c819 [ 111.998772][ T4673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.019779][ T4673] RSP: 002b:00007f3ff0bd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.028436][ T4673] RAX: ffffffffffffffda RBX: 00007f3ff2bf5fa0 RCX: 00007f3ff297c819 [ 112.036795][ T4673] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 112.045082][ T4673] RBP: 00007f3ff2a12c91 R08: 0000000000000000 R09: 0000000000000000 [ 112.053191][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.061305][ T4673] R13: 00007f3ff2bf6038 R14: 00007f3ff2bf5fa0 R15: 00007fff17987078 [ 112.069642][ T4673] [ 112.072709][ T4673] [ 112.075181][ T4673] Allocated by task 4673: [ 112.079712][ T4673] __kasan_kmalloc+0xb5/0xf0 [ 112.084613][ T4673] sk_prot_alloc+0xe7/0x210 [ 112.089242][ T4673] sk_alloc+0x2f/0x310 [ 112.093449][ T4673] pfkey_create+0xd8/0x560 [ 112.097908][ T4673] __sock_create+0x47b/0x900 [ 112.102794][ T4673] __sys_socket+0xe2/0x170 [ 112.107784][ T4673] __x64_sys_socket+0x76/0x80 [ 112.112786][ T4673] do_syscall_64+0x4c/0xa0 [ 112.117345][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.123615][ T4673] [ 112.125986][ T4673] Last potentially related work creation: [ 112.131994][ T4673] kasan_save_stack+0x35/0x60 [ 112.137037][ T4673] kasan_record_aux_stack+0xb8/0x100 [ 112.144393][ T4673] insert_work+0x54/0x3d0 [ 112.150218][ T4673] __queue_work+0x9c5/0xd50 [ 112.155108][ T4673] queue_work_on+0x124/0x1f0 [ 112.160367][ T4673] tty_release_struct+0xb4/0xd0 [ 112.165743][ T4673] tty_release+0xd0c/0x16c0 [ 112.170464][ T4673] __fput+0x234/0x930 [ 112.174557][ T4673] task_work_run+0x125/0x1a0 [ 112.179652][ T4673] exit_to_user_mode_loop+0x10f/0x130 [ 112.185526][ T4673] exit_to_user_mode_prepare+0xee/0x180 [ 112.191459][ T4673] syscall_exit_to_user_mode+0x16/0x40 [ 112.197307][ T4673] do_syscall_64+0x58/0xa0 [ 112.202826][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.209620][ T4673] [ 112.212267][ T4673] The buggy address belongs to the object at ffff888077d46000 [ 112.212267][ T4673] which belongs to the cache kmalloc-2k of size 2048 [ 112.227336][ T4673] The buggy address is located 1544 bytes inside of [ 112.227336][ T4673] 2048-byte region [ffff888077d46000, ffff888077d46800) [ 112.242077][ T4673] The buggy address belongs to the page: [ 112.248141][ T4673] page:ffffea0001df5000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77d40 [ 112.259042][ T4673] head:ffffea0001df5000 order:3 compound_mapcount:0 compound_pincount:0 [ 112.268114][ T4673] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 112.278212][ T4673] raw: 00fff00000010200 ffffea0001d04a00 0000000200000002 ffff888016c42000 [ 112.287094][ T4673] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 112.296358][ T4673] page dumped because: kasan: bad access detected [ 112.303058][ T4673] page_owner tracks the page as allocated [ 112.309072][ T4673] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 61807440182, free_ts 61741720738 [ 112.328469][ T4673] get_page_from_freelist+0x1bbd/0x1ca0 [ 112.335070][ T4673] __alloc_pages+0x1ee/0x480 [ 112.340232][ T4673] new_slab+0xc0/0x4b0 [ 112.344559][ T4673] ___slab_alloc+0x80a/0xdd0 [ 112.350272][ T4673] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 112.356424][ T4673] __alloc_skb+0x22c/0x750 [ 112.360981][ T4673] inet6_ifinfo_notify+0x6c/0x110 [ 112.367309][ T4673] addrconf_notify+0xbec/0xf00 [ 112.373355][ T4673] raw_notifier_call_chain+0xcb/0x160 [ 112.379565][ T4673] __dev_notify_flags+0x194/0x300 [ 112.385438][ T4673] dev_change_flags+0xe3/0x1a0 [ 112.390880][ T4673] do_setlink+0xcdb/0x3d60 [ 112.395836][ T4673] rtnl_newlink+0x1658/0x1a50 [ 112.401030][ T4673] rtnetlink_rcv_msg+0x844/0xf30 [ 112.406252][ T4673] netlink_rcv_skb+0x1f5/0x440 [ 112.412046][ T4673] netlink_unicast+0x774/0x920 [ 112.417863][ T4673] page last free stack trace: [ 112.422645][ T4673] free_unref_page_prepare+0x637/0x6c0 [ 112.428474][ T4673] free_unref_page+0x8f/0x2a0 [ 112.433648][ T4673] qlist_free_all+0x35/0x90 [ 112.438620][ T4673] kasan_quarantine_reduce+0x150/0x160 [ 112.444185][ T4673] __kasan_slab_alloc+0x2f/0xd0 [ 112.449325][ T4673] slab_post_alloc_hook+0x4c/0x380 [ 112.454737][ T4673] kmem_cache_alloc_node+0x12d/0x2d0 [ 112.460323][ T4673] __alloc_skb+0xf4/0x750 [ 112.464994][ T4673] netlink_ack+0x372/0xb50 [ 112.469428][ T4673] netlink_rcv_skb+0x27a/0x440 [ 112.474211][ T4673] netlink_unicast+0x774/0x920 [ 112.479094][ T4673] netlink_sendmsg+0x8ba/0xbe0 [ 112.484062][ T4673] __sys_sendto+0x46d/0x620 [ 112.488794][ T4673] __x64_sys_sendto+0xda/0xf0 [ 112.493602][ T4673] do_syscall_64+0x4c/0xa0 [ 112.498205][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.504661][ T4673] [ 112.507077][ T4673] Memory state around the buggy address: [ 112.513992][ T4673] ffff888077d46500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 112.522766][ T4673] ffff888077d46580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 112.532034][ T4673] >ffff888077d46600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.540703][ T4673] ^ [ 112.545060][ T4673] ffff888077d46680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.553523][ T4673] ffff888077d46700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.562324][ T4673] ================================================================== [ 112.571104][ T4673] Disabling lock debugging due to kernel taint [ 112.578296][ T4673] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.586354][ T4673] CPU: 1 PID: 4673 Comm: syz.3.99 Tainted: G B syzkaller #0 [ 112.595332][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.605802][ T4673] Call Trace: [ 112.609653][ T4673] [ 112.612619][ T4673] dump_stack_lvl+0x188/0x250 [ 112.617522][ T4673] ? show_regs_print_info+0x20/0x20 [ 112.623012][ T4673] ? load_image+0x400/0x400 [ 112.627914][ T4673] panic+0x2e5/0x810 [ 112.631987][ T4673] ? bpf_jit_dump+0xd0/0xd0 [ 112.636752][ T4673] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 112.642793][ T4673] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.649024][ T4673] ? _raw_spin_unlock+0x40/0x40 [ 112.654378][ T4673] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 112.661195][ T4673] check_panic_on_warn+0x80/0xa0 [ 112.666439][ T4673] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 112.673066][ T4673] end_report+0x6d/0xf0 [ 112.677442][ T4673] kasan_report+0x102/0x130 [ 112.682169][ T4673] ? xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 112.689555][ T4673] xfrm_policy_inexact_list_reinsert+0x5d2/0x690 [ 112.696043][ T4673] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 112.702638][ T4673] xfrm_policy_inexact_alloc_chain+0x7ce/0xea0 [ 112.709097][ T4673] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 112.715466][ T4673] xfrm_policy_inexact_insert+0xe0/0x1460 [ 112.721491][ T4673] ? do_raw_spin_lock+0x128/0x2f0 [ 112.726755][ T4673] ? __rwlock_init+0x140/0x140 [ 112.731960][ T4673] ? policy_hash_bysel+0x135/0x7b0 [ 112.737472][ T4673] xfrm_policy_insert+0x112/0x930 [ 112.743303][ T4673] xfrm_add_policy+0x4f2/0x880 [ 112.748579][ T4673] ? xfrm_dump_sa_done+0xc0/0xc0 [ 112.754006][ T4673] ? apparmor_capable+0x12c/0x190 [ 112.760706][ T4673] ? __nla_parse+0x3c/0x50 [ 112.766632][ T4673] xfrm_user_rcv_msg+0x5e5/0x910 [ 112.772440][ T4673] ? xfrm_netlink_rcv+0x90/0x90 [ 112.777591][ T4673] ? xfrm_netlink_rcv+0x66/0x90 [ 112.783693][ T4673] ? __mutex_lock_common+0x465/0x2400 [ 112.790768][ T4673] ? __skb_clone+0x480/0x790 [ 112.796747][ T4673] netlink_rcv_skb+0x1f5/0x440 [ 112.801962][ T4673] ? xfrm_netlink_rcv+0x90/0x90 [ 112.807666][ T4673] ? netlink_ack+0xb50/0xb50 [ 112.813061][ T4673] ? __lock_acquire+0x7d10/0x7d10 [ 112.818476][ T4673] xfrm_netlink_rcv+0x75/0x90 [ 112.823278][ T4673] netlink_unicast+0x774/0x920 [ 112.829583][ T4673] netlink_sendmsg+0x8ba/0xbe0 [ 112.834935][ T4673] ? netlink_getsockopt+0x570/0x570 [ 112.840964][ T4673] ? aa_sock_msg_perm+0x94/0x150 [ 112.847014][ T4673] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 112.853241][ T4673] ? security_socket_sendmsg+0x7c/0xa0 [ 112.860352][ T4673] ? netlink_getsockopt+0x570/0x570 [ 112.866046][ T4673] ____sys_sendmsg+0x5b7/0x8f0 [ 112.871028][ T4673] ? __sys_sendmsg_sock+0x30/0x30 [ 112.876462][ T4673] ? import_iovec+0x6f/0xa0 [ 112.881889][ T4673] ___sys_sendmsg+0x236/0x2e0 [ 112.887439][ T4673] ? __sys_sendmsg+0x2a0/0x2a0 [ 112.893441][ T4673] ? percpu_counter_add_batch+0x13b/0x160 [ 112.899396][ T4673] __se_sys_sendmsg+0x1af/0x290 [ 112.904822][ T4673] ? __x64_sys_sendmsg+0x80/0x80 [ 112.910517][ T4673] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 112.916932][ T4673] ? lockdep_hardirqs_on+0x94/0x140 [ 112.923076][ T4673] do_syscall_64+0x4c/0xa0 [ 112.927623][ T4673] ? clear_bhb_loop+0x30/0x80 [ 112.932684][ T4673] ? clear_bhb_loop+0x30/0x80 [ 112.937787][ T4673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.943987][ T4673] RIP: 0033:0x7f3ff297c819 [ 112.949665][ T4673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.971012][ T4673] RSP: 002b:00007f3ff0bd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.980193][ T4673] RAX: ffffffffffffffda RBX: 00007f3ff2bf5fa0 RCX: 00007f3ff297c819 [ 112.988210][ T4673] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 112.989900][ T4679] loop0: detected capacity change from 0 to 32768 [ 112.996751][ T4673] RBP: 00007f3ff2a12c91 R08: 0000000000000000 R09: 0000000000000000 [ 112.996767][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.996778][ T4673] R13: 00007f3ff2bf6038 R14: 00007f3ff2bf5fa0 R15: 00007fff17987078 [ 112.996796][ T4673] [ 112.996894][ T4673] Kernel Offset: disabled [ 113.035508][ T4673] Rebooting in 86400 seconds..