last executing test programs: 3.537564357s ago: executing program 2 (id=3): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xeb8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 3.387463202s ago: executing program 2 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.581202495s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff078a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 2.370943493s ago: executing program 2 (id=6): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000003d00)={'filter\x00', 0x7, 0x4, 0x3a8, 0xe8, 0x1d8, 0x0, 0x2c0, 0x1d8, 0x2c0, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @local, 0xff000000, 0xffffffff, 0x0, 0xb, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x3, 0x200, 0x5c, 0x4, 0x40, 'syzkaller1\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x301}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x7ff, 0x2}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x400, 0x0, 0x5}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 2.330038095s ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340), 0x4) 2.287040187s ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = io_uring_setup(0x3b45, &(0x7f00000002c0)={0x0, 0x86a1, 0x800, 0x0, 0x20000004}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) accept$inet6(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 2.256180668s ago: executing program 0 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) socket(0xa, 0x3, 0xff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.152841732s ago: executing program 2 (id=8): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.033523657s ago: executing program 3 (id=9): r0 = msgget$private(0x0, 0x7fc) msgsnd(r0, 0x0, 0x8, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) read(r2, &(0x7f0000000200)=""/202, 0xca) bpf$MAP_CREATE(0x2000000000000013, 0x0, 0x48) 1.924320571s ago: executing program 1 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.715582241s ago: executing program 1 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x8016}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.698553081s ago: executing program 2 (id=12): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) syz_clone(0x900c11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r4, 0x0}]) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, r6, 0xb1d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48850) socket$rds(0x15, 0x5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$kcm(0x2, 0x5, 0x84) 1.288695777s ago: executing program 1 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x34, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="bf000000000000003c001a803800048034"], 0x5c}}, 0x8000) 514.620819ms ago: executing program 0 (id=14): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c00000002060108e80034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 514.152069ms ago: executing program 2 (id=15): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000440)="305701000000739984c32b2de3722603c236124406e8a5d812ca847e3b", 0x1d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) 401.640743ms ago: executing program 1 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 311.597387ms ago: executing program 3 (id=17): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x2, 0x3, 0xff) socket(0x2, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 0s ago: executing program 0 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130005002dbd7000000300", @ANYRES32=r2, @ANYBLOB="01000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 64.892639][ T5758] cgroup: Unknown subsys name 'net' [ 65.056922][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.507379][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.932403][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.942598][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.960548][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.984086][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.993018][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.998344][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.002611][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.008234][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.029893][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.038476][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.046095][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.054454][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.055828][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.062510][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.077775][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.078076][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.085255][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.093368][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.099992][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.108800][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.120610][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.128013][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.136623][ T5771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.159154][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.551725][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 68.574955][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.608848][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 68.652998][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 68.793318][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.802303][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.809812][ T5776] bridge_slave_0: entered allmulticast mode [ 68.816887][ T5776] bridge_slave_0: entered promiscuous mode [ 68.856202][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.863500][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.871234][ T5776] bridge_slave_1: entered allmulticast mode [ 68.877975][ T5776] bridge_slave_1: entered promiscuous mode [ 68.885228][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.894995][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.902306][ T5769] bridge_slave_0: entered allmulticast mode [ 68.909256][ T5769] bridge_slave_0: entered promiscuous mode [ 68.918391][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.925593][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.932823][ T5769] bridge_slave_1: entered allmulticast mode [ 68.939741][ T5769] bridge_slave_1: entered promiscuous mode [ 68.964999][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.972214][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.979586][ T5777] bridge_slave_0: entered allmulticast mode [ 68.986249][ T5777] bridge_slave_0: entered promiscuous mode [ 69.004399][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.011798][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.019085][ T5777] bridge_slave_1: entered allmulticast mode [ 69.026580][ T5777] bridge_slave_1: entered promiscuous mode [ 69.042132][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.049265][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.056941][ T5772] bridge_slave_0: entered allmulticast mode [ 69.063779][ T5772] bridge_slave_0: entered promiscuous mode [ 69.071632][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.078860][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.086594][ T5772] bridge_slave_1: entered allmulticast mode [ 69.093464][ T5772] bridge_slave_1: entered promiscuous mode [ 69.133682][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.163887][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.185796][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.208055][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.222132][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.233943][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.248019][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.286557][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.300832][ T5769] team0: Port device team_slave_0 added [ 69.334364][ T5769] team0: Port device team_slave_1 added [ 69.343681][ T5772] team0: Port device team_slave_0 added [ 69.353453][ T5772] team0: Port device team_slave_1 added [ 69.363036][ T5776] team0: Port device team_slave_0 added [ 69.393540][ T5777] team0: Port device team_slave_0 added [ 69.409667][ T5776] team0: Port device team_slave_1 added [ 69.426562][ T5777] team0: Port device team_slave_1 added [ 69.463072][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.470240][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.496370][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.518603][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.525759][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.553849][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.565789][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.573584][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.599740][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.612774][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.619893][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.646255][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.677130][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.684727][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.710987][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.729103][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.736197][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.764582][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.781405][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.788377][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.814738][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.827498][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.834686][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.861467][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.937282][ T5776] hsr_slave_0: entered promiscuous mode [ 69.944353][ T5776] hsr_slave_1: entered promiscuous mode [ 69.983415][ T5769] hsr_slave_0: entered promiscuous mode [ 69.991261][ T5769] hsr_slave_1: entered promiscuous mode [ 69.997480][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.005647][ T5769] Cannot create hsr debugfs directory [ 70.034460][ T5777] hsr_slave_0: entered promiscuous mode [ 70.040797][ T5777] hsr_slave_1: entered promiscuous mode [ 70.046973][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.054634][ T5777] Cannot create hsr debugfs directory [ 70.065798][ T5772] hsr_slave_0: entered promiscuous mode [ 70.073998][ T5772] hsr_slave_1: entered promiscuous mode [ 70.082756][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.091203][ T5772] Cannot create hsr debugfs directory [ 70.160643][ T5085] Bluetooth: hci3: command tx timeout [ 70.160655][ T5774] Bluetooth: hci1: command tx timeout [ 70.239582][ T5085] Bluetooth: hci0: command tx timeout [ 70.240604][ T5774] Bluetooth: hci2: command tx timeout [ 70.501861][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.523876][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.535979][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.545839][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.622650][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.636486][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.646638][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.659723][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.762398][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.774442][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.785803][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.796526][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.904608][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.918445][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.931256][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.959492][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.970101][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.020168][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.041985][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.054415][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.061898][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.103538][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.110831][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.147604][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.196690][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.204008][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.221424][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.263837][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.271211][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.299724][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.311172][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.346384][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.353755][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.383384][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.390611][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.413836][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.468496][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.476298][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.486792][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.494090][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.723171][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.864392][ T5769] veth0_vlan: entered promiscuous mode [ 71.901579][ T5769] veth1_vlan: entered promiscuous mode [ 72.014281][ T5769] veth0_macvtap: entered promiscuous mode [ 72.043759][ T5769] veth1_macvtap: entered promiscuous mode [ 72.080809][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.102759][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.118035][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.136235][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.164039][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.171020][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.171947][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.196636][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.205953][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.214952][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.223819][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239888][ T5774] Bluetooth: hci1: command tx timeout [ 72.239899][ T5085] Bluetooth: hci3: command tx timeout [ 72.319188][ T5776] veth0_vlan: entered promiscuous mode [ 72.326239][ T5774] Bluetooth: hci0: command tx timeout [ 72.326332][ T5085] Bluetooth: hci2: command tx timeout [ 72.373912][ T5772] veth0_vlan: entered promiscuous mode [ 72.397648][ T5776] veth1_vlan: entered promiscuous mode [ 72.413601][ T5772] veth1_vlan: entered promiscuous mode [ 72.436751][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.454872][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.466707][ T5777] veth0_vlan: entered promiscuous mode [ 72.503994][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.516248][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.531718][ T5777] veth1_vlan: entered promiscuous mode [ 72.544752][ T5776] veth0_macvtap: entered promiscuous mode [ 72.572855][ T5776] veth1_macvtap: entered promiscuous mode [ 72.594856][ T5772] veth0_macvtap: entered promiscuous mode [ 72.622756][ T5772] veth1_macvtap: entered promiscuous mode [ 72.673837][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.692161][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.711338][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.730052][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.755071][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.758110][ T5831] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.765500][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.792316][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.804978][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.836862][ T5777] veth0_macvtap: entered promiscuous mode [ 72.846552][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.875022][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.887558][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.896812][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.913193][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.925256][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.941772][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.953948][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.968285][ T5777] veth1_macvtap: entered promiscuous mode [ 72.992722][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002652][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011764][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.024800][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.043897][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.052934][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.062340][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.071220][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.125901][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.138703][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.151549][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.162201][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.172108][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.182781][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.194088][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.217173][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.228817][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.239673][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.250903][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.261171][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.272095][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.283465][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.309966][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.318943][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.327837][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.336980][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.445624][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.445748][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.456850][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.466148][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.506845][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.517767][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.544603][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.554579][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.622734][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.657535][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.674376][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.708368][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.806263][ T5837] vlan2: entered promiscuous mode [ 73.821058][ T5837] bridge0: entered promiscuous mode [ 74.134852][ T5843] sctp: [Deprecated]: syz.3.4 (pid 5843) Use of int in maxseg socket option. [ 74.134852][ T5843] Use struct sctp_assoc_value instead [ 74.195235][ T5849] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 74.321069][ T5085] Bluetooth: hci1: command tx timeout [ 74.321081][ T5774] Bluetooth: hci3: command tx timeout [ 74.399927][ T5085] Bluetooth: hci2: command tx timeout [ 74.409502][ T5085] Bluetooth: hci0: command tx timeout [ 74.431133][ T5857] batman_adv: batadv0: Adding interface: vlan2 [ 74.437480][ T5857] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.463236][ T5857] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 74.618507][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 75.017225][ T5865] serio: Serial port ptm0 [ 75.763084][ T5873] syz.2.15[5873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.805700][ T5873] loop2: detected capacity change from 0 to 1024 [ 75.851528][ T5873] ======================================================= [ 75.851528][ T5873] WARNING: The mand mount option has been deprecated and [ 75.851528][ T5873] and is ignored by this kernel. Remove the mand [ 75.851528][ T5873] option from the mount to silence this warning. [ 75.851528][ T5873] ======================================================= [ 76.014557][ T5873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.118175][ T5873] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.15: Allocating blocks 497-513 which overlap fs metadata [ 76.139925][ T5873] EXT4-fs (loop2): pa ffff88805cb99000: logic 128, phys. 385, len 8 [ 76.148348][ T5873] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 76.222131][ T5873] ================================================================== [ 76.230268][ T5873] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x311f/0x42e0 [ 76.238329][ T5873] Read of size 4 at addr ffff8880755f6d1c by task syz.2.15/5873 [ 76.245985][ T5873] [ 76.248329][ T5873] CPU: 1 PID: 5873 Comm: syz.2.15 Not tainted syzkaller #0 [ 76.255536][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.265605][ T5873] Call Trace: [ 76.268887][ T5873] [ 76.271813][ T5873] dump_stack_lvl+0x18c/0x250 [ 76.276529][ T5873] ? __lock_acquire+0x7d40/0x7d40 [ 76.281559][ T5873] ? show_regs_print_info+0x20/0x20 [ 76.286762][ T5873] ? load_image+0x400/0x400 [ 76.291295][ T5873] ? __virt_addr_valid+0x469/0x540 [ 76.296463][ T5873] print_report+0xa8/0x210 [ 76.300901][ T5873] ? ext4_ext_remove_space+0x311f/0x42e0 [ 76.306659][ T5873] kasan_report+0x117/0x150 [ 76.311169][ T5873] ? ext4_ext_remove_space+0x311f/0x42e0 [ 76.316838][ T5873] ext4_ext_remove_space+0x311f/0x42e0 [ 76.322592][ T5873] ? __es_remove_extent+0x902/0x1770 [ 76.327970][ T5873] ? kmem_cache_free+0xf8/0x270 [ 76.332937][ T5873] ? __lock_acquire+0x7d40/0x7d40 [ 76.338060][ T5873] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 76.344044][ T5873] ? ext4_es_remove_extent+0x253/0x3e0 [ 76.349502][ T5873] ext4_ext_truncate+0x17d/0x2d0 [ 76.354444][ T5873] ext4_truncate+0x9b8/0x1070 [ 76.359117][ T5873] ? down_write+0x16e/0x200 [ 76.363623][ T5873] ? __ext4_mark_inode_dirty+0x6e0/0x6e0 [ 76.369252][ T5873] ? __ext4_journal_stop+0x34/0x190 [ 76.374449][ T5873] ext4_write_begin+0xa6c/0x1070 [ 76.379568][ T5873] ? ext4_readahead+0x110/0x110 [ 76.384500][ T5873] ? exc_page_fault+0x8c/0x100 [ 76.389259][ T5873] ext4_da_write_begin+0x2df/0x9c0 [ 76.394377][ T5873] ? fault_in_readable+0xcb/0x150 [ 76.399403][ T5873] ? ext4_dirty_folio+0x300/0x300 [ 76.404444][ T5873] ? fault_in_readable+0xef/0x150 [ 76.409568][ T5873] ? fault_in_iov_iter_readable+0xbf/0x2e0 [ 76.415404][ T5873] generic_perform_write+0x2fe/0x5c0 [ 76.420720][ T5873] ? generic_file_direct_write+0x3e0/0x3e0 [ 76.426529][ T5873] ? file_modified_flags+0x267/0x2a0 [ 76.431808][ T5873] ? ext4_write_checks+0x24d/0x2c0 [ 76.436913][ T5873] ext4_buffered_write_iter+0xcc/0x350 [ 76.442367][ T5873] ext4_file_write_iter+0x1d9/0x1880 [ 76.447691][ T5873] ? rcu_read_lock_any_held+0xb4/0x140 [ 76.453146][ T5873] ? ext4_file_read_iter+0x670/0x670 [ 76.458427][ T5873] vfs_write+0x46c/0x990 [ 76.462675][ T5873] ? file_end_write+0x250/0x250 [ 76.467699][ T5873] ? __fget_files+0x43d/0x4b0 [ 76.472467][ T5873] ? __fdget_pos+0x2a3/0x330 [ 76.477051][ T5873] ? ksys_write+0x75/0x260 [ 76.481487][ T5873] ksys_write+0x150/0x260 [ 76.485878][ T5873] ? __ia32_sys_read+0x90/0x90 [ 76.490666][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 76.495867][ T5873] do_syscall_64+0x55/0xa0 [ 76.500284][ T5873] ? clear_bhb_loop+0x40/0x90 [ 76.505006][ T5873] ? clear_bhb_loop+0x40/0x90 [ 76.509697][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.515637][ T5873] RIP: 0033:0x7f293219c799 [ 76.520149][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.540384][ T5873] RSP: 002b:00007f2933094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.548830][ T5873] RAX: ffffffffffffffda RBX: 00007f2932415fa0 RCX: 00007f293219c799 [ 76.556816][ T5873] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 76.564831][ T5873] RBP: 00007f2932232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 76.572830][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.581100][ T5873] R13: 00007f2932416038 R14: 00007f2932415fa0 R15: 00007ffdab39a0a8 [ 76.589100][ T5873] [ 76.592118][ T5873] [ 76.594428][ T5873] The buggy address belongs to the physical page: [ 76.600838][ T5873] page:ffffea0001d57d80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x755f6 [ 76.611066][ T5873] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 76.618265][ T5873] page_type: 0xffffffff() [ 76.622652][ T5873] raw: 00fff00000000000 ffffea0001d89848 ffffea0001d57d48 0000000000000000 [ 76.631230][ T5873] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 76.640066][ T5873] page dumped because: kasan: bad access detected [ 76.646464][ T5873] page_owner tracks the page as freed [ 76.651813][ T5873] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5862, tgid 5861 (syz.2.12), ts 74795278468, free_ts 75688147962 [ 76.669182][ T5873] post_alloc_hook+0x1c1/0x200 [ 76.673950][ T5873] get_page_from_freelist+0x1951/0x19e0 [ 76.679486][ T5873] __alloc_pages+0x1f0/0x460 [ 76.684061][ T5873] __folio_alloc+0x10/0x20 [ 76.688464][ T5873] vma_alloc_folio+0x47a/0x8f0 [ 76.693214][ T5873] shmem_alloc_folio+0x1a9/0x2a0 [ 76.698224][ T5873] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 76.703937][ T5873] shmem_get_folio_gfp+0xcde/0x2aa0 [ 76.709126][ T5873] shmem_fault+0x1b8/0x810 [ 76.713544][ T5873] __do_fault+0x13b/0x4d0 [ 76.717900][ T5873] handle_mm_fault+0x2299/0x4c00 [ 76.722857][ T5873] __get_user_pages+0x5d0/0x1380 [ 76.727813][ T5873] populate_vma_page_range+0x2c1/0x380 [ 76.733272][ T5873] __mm_populate+0x260/0x390 [ 76.737860][ T5873] vm_mmap_pgoff+0x2da/0x3f0 [ 76.742624][ T5873] do_syscall_64+0x55/0xa0 [ 76.747038][ T5873] page last free stack trace: [ 76.751704][ T5873] free_unref_page_prepare+0x7b2/0x8c0 [ 76.757250][ T5873] free_unref_page_list+0xbe/0x860 [ 76.762355][ T5873] release_pages+0x1f7a/0x2200 [ 76.767111][ T5873] __folio_batch_release+0x71/0xe0 [ 76.772221][ T5873] shmem_undo_range+0x630/0x1b20 [ 76.777153][ T5873] shmem_evict_inode+0x245/0x9e0 [ 76.782081][ T5873] evict+0x4ca/0x8d0 [ 76.785966][ T5873] __dentry_kill+0x431/0x650 [ 76.790549][ T5873] dentry_kill+0xb8/0x290 [ 76.794961][ T5873] dput+0xfe/0x1e0 [ 76.798678][ T5873] __fput+0x5e5/0x970 [ 76.802671][ T5873] task_work_run+0x1d4/0x260 [ 76.807310][ T5873] do_exit+0x95a/0x2460 [ 76.811568][ T5873] do_group_exit+0x21b/0x2d0 [ 76.816267][ T5873] get_signal+0x12fc/0x13f0 [ 76.820810][ T5873] arch_do_signal_or_restart+0xc2/0x800 [ 76.826378][ T5873] [ 76.828699][ T5873] Memory state around the buggy address: [ 76.834324][ T5873] ffff8880755f6c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.842484][ T5873] ffff8880755f6c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.850578][ T5873] >ffff8880755f6d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.858715][ T5873] ^ [ 76.863566][ T5873] ffff8880755f6d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.871790][ T5873] ffff8880755f6e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 76.879843][ T5873] ================================================================== [ 76.901617][ T5085] Bluetooth: hci3: command tx timeout [ 76.912359][ T5085] Bluetooth: hci1: command tx timeout [ 76.918018][ T5085] Bluetooth: hci0: command tx timeout [ 76.923736][ T5085] Bluetooth: hci2: command tx timeout [ 76.972957][ T5893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.024189][ T5873] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.031440][ T5873] CPU: 0 PID: 5873 Comm: syz.2.15 Not tainted syzkaller #0 [ 77.038662][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.048747][ T5873] Call Trace: [ 77.052056][ T5873] [ 77.055005][ T5873] dump_stack_lvl+0x18c/0x250 [ 77.059716][ T5873] ? show_regs_print_info+0x20/0x20 [ 77.065042][ T5873] ? load_image+0x400/0x400 [ 77.069585][ T5873] panic+0x2dc/0x730 [ 77.073520][ T5873] ? bpf_jit_dump+0xd0/0xd0 [ 77.078085][ T5873] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 77.084105][ T5873] ? _raw_spin_unlock+0x40/0x40 [ 77.088958][ T5873] ? print_memory_metadata+0x314/0x400 [ 77.094418][ T5873] ? ext4_ext_remove_space+0x311f/0x42e0 [ 77.100056][ T5873] check_panic_on_warn+0x84/0xa0 [ 77.105091][ T5873] ? ext4_ext_remove_space+0x311f/0x42e0 [ 77.110729][ T5873] end_report+0x6f/0x130 [ 77.114976][ T5873] kasan_report+0x128/0x150 [ 77.119467][ T5873] ? ext4_ext_remove_space+0x311f/0x42e0 [ 77.125095][ T5873] ext4_ext_remove_space+0x311f/0x42e0 [ 77.130664][ T5873] ? __es_remove_extent+0x902/0x1770 [ 77.136080][ T5873] ? kmem_cache_free+0xf8/0x270 [ 77.140978][ T5873] ? __lock_acquire+0x7d40/0x7d40 [ 77.146098][ T5873] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 77.152079][ T5873] ? ext4_es_remove_extent+0x253/0x3e0 [ 77.157545][ T5873] ext4_ext_truncate+0x17d/0x2d0 [ 77.162494][ T5873] ext4_truncate+0x9b8/0x1070 [ 77.167211][ T5873] ? down_write+0x16e/0x200 [ 77.171718][ T5873] ? __ext4_mark_inode_dirty+0x6e0/0x6e0 [ 77.177363][ T5873] ? __ext4_journal_stop+0x34/0x190 [ 77.182572][ T5873] ext4_write_begin+0xa6c/0x1070 [ 77.187541][ T5873] ? ext4_readahead+0x110/0x110 [ 77.192404][ T5873] ? exc_page_fault+0x8c/0x100 [ 77.197285][ T5873] ext4_da_write_begin+0x2df/0x9c0 [ 77.202402][ T5873] ? fault_in_readable+0xcb/0x150 [ 77.207434][ T5873] ? ext4_dirty_folio+0x300/0x300 [ 77.212486][ T5873] ? fault_in_readable+0xef/0x150 [ 77.217508][ T5873] ? fault_in_iov_iter_readable+0xbf/0x2e0 [ 77.223345][ T5873] generic_perform_write+0x2fe/0x5c0 [ 77.228644][ T5873] ? generic_file_direct_write+0x3e0/0x3e0 [ 77.234490][ T5873] ? file_modified_flags+0x267/0x2a0 [ 77.239793][ T5873] ? ext4_write_checks+0x24d/0x2c0 [ 77.244991][ T5873] ext4_buffered_write_iter+0xcc/0x350 [ 77.250478][ T5873] ext4_file_write_iter+0x1d9/0x1880 [ 77.255774][ T5873] ? rcu_read_lock_any_held+0xb4/0x140 [ 77.261238][ T5873] ? ext4_file_read_iter+0x670/0x670 [ 77.266555][ T5873] vfs_write+0x46c/0x990 [ 77.271001][ T5873] ? file_end_write+0x250/0x250 [ 77.275932][ T5873] ? __fget_files+0x43d/0x4b0 [ 77.280623][ T5873] ? __fdget_pos+0x2a3/0x330 [ 77.285248][ T5873] ? ksys_write+0x75/0x260 [ 77.289691][ T5873] ksys_write+0x150/0x260 [ 77.294130][ T5873] ? __ia32_sys_read+0x90/0x90 [ 77.298909][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 77.304227][ T5873] do_syscall_64+0x55/0xa0 [ 77.308689][ T5873] ? clear_bhb_loop+0x40/0x90 [ 77.313410][ T5873] ? clear_bhb_loop+0x40/0x90 [ 77.318222][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.324232][ T5873] RIP: 0033:0x7f293219c799 [ 77.328661][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.348381][ T5873] RSP: 002b:00007f2933094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.356916][ T5873] RAX: ffffffffffffffda RBX: 00007f2932415fa0 RCX: 00007f293219c799 [ 77.364901][ T5873] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 77.372909][ T5873] RBP: 00007f2932232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 77.380910][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.388903][ T5873] R13: 00007f2932416038 R14: 00007f2932415fa0 R15: 00007ffdab39a0a8 [ 77.396912][ T5873] [ 77.400263][ T5873] Kernel Offset: disabled [ 77.404580][ T5873] Rebooting in 86400 seconds..