last executing test programs: 20.037697095s ago: executing program 1 (id=179): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x4, "bbaca5114198a94c633075260000001300"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 16.590365316s ago: executing program 1 (id=183): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x203f, &(0x7f0000000000)=""/176) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 16.30709974s ago: executing program 4 (id=184): unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 16.227875712s ago: executing program 2 (id=186): bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) 15.845547124s ago: executing program 2 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x200a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 15.322647788s ago: executing program 0 (id=188): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x803d, 0x107, 0x8000, 0x8, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) 15.305496951s ago: executing program 4 (id=189): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x203f, &(0x7f0000000000)=""/176) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 15.207220419s ago: executing program 1 (id=190): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7", 0x58}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 15.203885967s ago: executing program 3 (id=191): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r1, 0x0, 0x0) syz_open_pts(r1, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write$tcp_mem(0xffffffffffffffff, &(0x7f000003eec0)={0x8000000000000002, 0x20, 0x2000000000001}, 0x48) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 15.14459162s ago: executing program 2 (id=192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1, r2}}, 0x40) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) 15.079663081s ago: executing program 0 (id=193): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 13.540967179s ago: executing program 4 (id=194): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_kvm_add_vcpu$x86(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000180)={0x4, "bbaca5114198a94c633075260000001300"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 13.495049534s ago: executing program 0 (id=195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0xa10812, &(0x7f0000000780)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB="a576ef0c3cf5fbfe738d7fe48eb06fa37052fc860b9ba7133a679ad32571d6feac3852a62d48cac8a0d320d1b112314ee66dc7b3e560dacecad18dd19525", @ANYRES16, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fec606597f9eb63c1eb27e9a7e7c87e551a878c1ff1548dce0557af9986d21054cc6d2e9be1e16bb52e6e9df5b4b95e1b00"/137, @ANYRESDEC, @ANYRES16=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x21, 0x1508, &(0x7f00000035c0)="$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") creat(&(0x7f00000001c0)='./file2\x00', 0x73) sched_setaffinity(0x0, 0xfffffffffffffe35, &(0x7f0000000500)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x440, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000003c0)={0x7, 0xf, 0x908, 0x91c, 0x3, 0x800}) close(0x3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) socket(0x200000000000011, 0x4, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r3 = fanotify_init(0x40, 0x0) fanotify_mark(r3, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00'}, 0x10) 13.480453212s ago: executing program 3 (id=196): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 12.977853121s ago: executing program 2 (id=197): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 12.396988226s ago: executing program 3 (id=198): bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) 11.229579516s ago: executing program 1 (id=199): unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 11.16322491s ago: executing program 3 (id=200): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x203f, &(0x7f0000000000)=""/176) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.162931853s ago: executing program 2 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) 11.161790849s ago: executing program 0 (id=202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 11.062103904s ago: executing program 4 (id=203): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 11.009324525s ago: executing program 1 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000080}, 0x40000d0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40044) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 9.016465529s ago: executing program 3 (id=205): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x3, 0x58f, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x203f, &(0x7f0000000000)=""/176) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.976631737s ago: executing program 0 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 7.320332695s ago: executing program 4 (id=207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x9}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 7.262091289s ago: executing program 2 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_pidfd_open(0x0, 0x0) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 7.027710906s ago: executing program 1 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 718.432162ms ago: executing program 3 (id=210): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7", 0x58}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 508.705332ms ago: executing program 4 (id=211): syz_extract_tcp_res(0x0, 0xd7, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x402, @remote, 0x80}}}, 0x32) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 0s ago: executing program 0 (id=212): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 85.494435][ T5810] cgroup: Unknown subsys name 'net' [ 85.644039][ T5810] cgroup: Unknown subsys name 'cpuset' [ 85.653818][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.537893][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.960570][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.969047][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.977805][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.987138][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.000649][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.003737][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.015423][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.017461][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.023324][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.031139][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.038326][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.044756][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.059423][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.063742][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.068270][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.075087][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.081655][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.090006][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.100284][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.104744][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.110064][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.116583][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.122703][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.130490][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.152385][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.767015][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 90.918127][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 91.020592][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 91.158520][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.166449][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.174169][ T5826] bridge_slave_0: entered allmulticast mode [ 91.181704][ T5826] bridge_slave_0: entered promiscuous mode [ 91.195858][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.203152][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.210479][ T5826] bridge_slave_1: entered allmulticast mode [ 91.217803][ T5826] bridge_slave_1: entered promiscuous mode [ 91.226245][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 91.262310][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.354067][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.409003][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.432551][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.439909][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.447105][ T5820] bridge_slave_0: entered allmulticast mode [ 91.454718][ T5820] bridge_slave_0: entered promiscuous mode [ 91.531065][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.538337][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.545682][ T5820] bridge_slave_1: entered allmulticast mode [ 91.553233][ T5820] bridge_slave_1: entered promiscuous mode [ 91.588932][ T5826] team0: Port device team_slave_0 added [ 91.608196][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.615718][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.623847][ T5825] bridge_slave_0: entered allmulticast mode [ 91.632213][ T5825] bridge_slave_0: entered promiscuous mode [ 91.661522][ T5826] team0: Port device team_slave_1 added [ 91.696865][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.704489][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.711834][ T5825] bridge_slave_1: entered allmulticast mode [ 91.719214][ T5825] bridge_slave_1: entered promiscuous mode [ 91.753733][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.761058][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.768274][ T5821] bridge_slave_0: entered allmulticast mode [ 91.775824][ T5821] bridge_slave_0: entered promiscuous mode [ 91.786653][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.835969][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.844056][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.851325][ T5821] bridge_slave_1: entered allmulticast mode [ 91.858604][ T5821] bridge_slave_1: entered promiscuous mode [ 91.868991][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.890754][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.897957][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.905416][ T5835] bridge_slave_0: entered allmulticast mode [ 91.912850][ T5835] bridge_slave_0: entered promiscuous mode [ 91.921877][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.928850][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.954941][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.995948][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.005758][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.013070][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.020877][ T5835] bridge_slave_1: entered allmulticast mode [ 92.028223][ T5835] bridge_slave_1: entered promiscuous mode [ 92.036390][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.043520][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.069553][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.111316][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.158415][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.171609][ T5820] team0: Port device team_slave_0 added [ 92.180604][ T5840] Bluetooth: hci3: command tx timeout [ 92.186386][ T5840] Bluetooth: hci0: command tx timeout [ 92.192349][ T52] Bluetooth: hci1: command tx timeout [ 92.220614][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.232743][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.245051][ T5820] team0: Port device team_slave_1 added [ 92.254345][ T5825] team0: Port device team_slave_0 added [ 92.260321][ T52] Bluetooth: hci2: command tx timeout [ 92.264267][ T5825] team0: Port device team_slave_1 added [ 92.266242][ T5840] Bluetooth: hci4: command tx timeout [ 92.275367][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.407325][ T5826] hsr_slave_0: entered promiscuous mode [ 92.414875][ T5826] hsr_slave_1: entered promiscuous mode [ 92.451912][ T5821] team0: Port device team_slave_0 added [ 92.458625][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.465803][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.491753][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.505873][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.512920][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.538954][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.551200][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.558162][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.585098][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.598668][ T5835] team0: Port device team_slave_0 added [ 92.607343][ T5821] team0: Port device team_slave_1 added [ 92.633731][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.640776][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.666753][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.680328][ T5835] team0: Port device team_slave_1 added [ 92.714220][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.721292][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.748384][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.811065][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.818050][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.844331][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.929132][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.937985][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.964124][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.977494][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.986514][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.012817][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.099561][ T5820] hsr_slave_0: entered promiscuous mode [ 93.106333][ T5820] hsr_slave_1: entered promiscuous mode [ 93.114037][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 93.119977][ T5820] Cannot create hsr debugfs directory [ 93.150726][ T5821] hsr_slave_0: entered promiscuous mode [ 93.157271][ T5821] hsr_slave_1: entered promiscuous mode [ 93.164362][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 93.170170][ T5821] Cannot create hsr debugfs directory [ 93.202480][ T5825] hsr_slave_0: entered promiscuous mode [ 93.209228][ T5825] hsr_slave_1: entered promiscuous mode [ 93.215776][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 93.221683][ T5825] Cannot create hsr debugfs directory [ 93.282235][ T5835] hsr_slave_0: entered promiscuous mode [ 93.288979][ T5835] hsr_slave_1: entered promiscuous mode [ 93.295750][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 93.301970][ T5835] Cannot create hsr debugfs directory [ 93.818357][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.832098][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.874907][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.903780][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.967544][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.987224][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.998824][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.026697][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.097562][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.127728][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.160218][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.172885][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.259932][ T5840] Bluetooth: hci0: command tx timeout [ 94.265402][ T5840] Bluetooth: hci1: command tx timeout [ 94.270697][ T52] Bluetooth: hci3: command tx timeout [ 94.287494][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.297976][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.336989][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.343892][ T52] Bluetooth: hci4: command tx timeout [ 94.343942][ T52] Bluetooth: hci2: command tx timeout [ 94.367762][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.434992][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.481795][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.496750][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.508590][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.531223][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.588696][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.616836][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.637933][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.645285][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.664995][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.672238][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.715844][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.794347][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.833244][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.844741][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.852025][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.887294][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.894547][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.918353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.925574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.975985][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.989114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.996410][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.099108][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.134615][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.178328][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.185620][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.217876][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.248167][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.255403][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.290720][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.297968][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.335974][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.343273][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.406559][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.646418][ T5826] veth0_vlan: entered promiscuous mode [ 95.694958][ T5826] veth1_vlan: entered promiscuous mode [ 95.727338][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.844454][ T5826] veth0_macvtap: entered promiscuous mode [ 95.898687][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.913313][ T5826] veth1_macvtap: entered promiscuous mode [ 95.997674][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.038869][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.083333][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.128742][ T5825] veth0_vlan: entered promiscuous mode [ 96.142576][ T5820] veth0_vlan: entered promiscuous mode [ 96.165000][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.200913][ T5820] veth1_vlan: entered promiscuous mode [ 96.227722][ T5825] veth1_vlan: entered promiscuous mode [ 96.236073][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.248781][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.272019][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.301864][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.343283][ T5840] Bluetooth: hci3: command tx timeout [ 96.348780][ T5840] Bluetooth: hci1: command tx timeout [ 96.355439][ T52] Bluetooth: hci0: command tx timeout [ 96.390634][ T5825] veth0_macvtap: entered promiscuous mode [ 96.420919][ T5840] Bluetooth: hci2: command tx timeout [ 96.426400][ T5840] Bluetooth: hci4: command tx timeout [ 96.436067][ T5825] veth1_macvtap: entered promiscuous mode [ 96.525892][ T5820] veth0_macvtap: entered promiscuous mode [ 96.553355][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.562268][ T5820] veth1_macvtap: entered promiscuous mode [ 96.571061][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.577918][ T5835] veth0_vlan: entered promiscuous mode [ 96.599122][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.641832][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.657209][ T5835] veth1_vlan: entered promiscuous mode [ 96.676340][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.692499][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.695629][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711713][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.730868][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.740712][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772840][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.798980][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.828020][ T5821] veth0_vlan: entered promiscuous mode [ 96.834181][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.868988][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.884625][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.894719][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.903780][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.963093][ T5835] veth0_macvtap: entered promiscuous mode [ 97.012074][ T5821] veth1_vlan: entered promiscuous mode [ 97.014660][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.034802][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.063346][ T5835] veth1_macvtap: entered promiscuous mode [ 97.130810][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.141712][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.192897][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.217843][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.229032][ T10] cfg80211: failed to load regulatory.db [ 97.241878][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.305508][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.334456][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.356806][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.375170][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.393467][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.402509][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.423698][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.479521][ T5821] veth0_macvtap: entered promiscuous mode [ 97.521710][ T5821] veth1_macvtap: entered promiscuous mode [ 97.678634][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.785772][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.805798][ T5962] Bluetooth: MGMT ver 1.23 [ 98.101421][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.109977][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.140468][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.175201][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.318095][ T5968] loop3: detected capacity change from 0 to 512 [ 98.459861][ T5840] Bluetooth: hci1: command tx timeout [ 98.465480][ T5840] Bluetooth: hci0: command tx timeout [ 98.471116][ T5840] Bluetooth: hci3: command tx timeout [ 98.501133][ T52] Bluetooth: hci4: command tx timeout [ 98.506792][ T52] Bluetooth: hci2: command tx timeout [ 98.648955][ T5968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.663015][ T5968] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.181681][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.199809][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.288288][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.323085][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.845990][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.913804][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.145447][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.200597][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.388503][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.524394][ T5982] syzkaller0: entered promiscuous mode [ 100.530493][ T5982] syzkaller0: entered allmulticast mode [ 100.648006][ T5986] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 100.668663][ T30] audit: type=1326 audit(1762605901.023:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 100.734305][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.743258][ T30] audit: type=1326 audit(1762605901.063:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 100.743381][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.809224][ T30] audit: type=1326 audit(1762605901.073:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 100.871321][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.878632][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.886777][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.894123][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.932390][ T30] audit: type=1326 audit(1762605901.073:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 100.991488][ T5986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.997452][ T5991] loop4: detected capacity change from 0 to 128 [ 101.052012][ T30] audit: type=1326 audit(1762605901.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.089886][ T30] audit: type=1326 audit(1762605901.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.113970][ T5991] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.169829][ T30] audit: type=1326 audit(1762605901.083:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.192316][ T30] audit: type=1326 audit(1762605901.083:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.204701][ T5991] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.215589][ T30] audit: type=1326 audit(1762605901.093:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.307652][ T30] audit: type=1326 audit(1762605901.093:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff75fd8f6c9 code=0x7ffc0000 [ 101.494227][ T5998] genev: entered promiscuous mode [ 101.785867][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.790880][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 102.037166][ T6013] loop0: detected capacity change from 0 to 512 [ 102.049376][ T6013] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.129697][ T6013] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.181890][ T6012] loop4: detected capacity change from 0 to 1024 [ 102.197914][ T6012] ======================================================= [ 102.197914][ T6012] WARNING: The mand mount option has been deprecated and [ 102.197914][ T6012] and is ignored by this kernel. Remove the mand [ 102.197914][ T6012] option from the mount to silence this warning. [ 102.197914][ T6012] ======================================================= [ 102.372525][ T6013] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.437559][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.440781][ T6013] EXT4-fs (loop0): 1 truncate cleaned up [ 102.555587][ T6013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.611609][ T6012] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.697701][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.731657][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.735008][ T6023] syzkaller0: entered promiscuous mode [ 102.770045][ T6023] syzkaller0: entered allmulticast mode [ 102.812574][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.840946][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 103.784593][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 104.013930][ T6051] loop3: detected capacity change from 0 to 164 [ 104.053841][ T6051] Unable to read rock-ridge attributes [ 104.104469][ T6051] Unable to read rock-ridge attributes [ 104.477535][ T6057] loop3: detected capacity change from 0 to 1024 [ 104.502421][ T6057] ext4: Invalid uid '0x00000000ffffffff' [ 104.567373][ T6057] loop3: detected capacity change from 0 to 512 [ 104.600431][ T6057] ext3: Unknown parameter '_want_extra_isize' [ 104.619046][ T6048] process 'syz.2.35' launched './file0' with NULL argv: empty string added [ 105.155847][ T6068] loop0: detected capacity change from 0 to 128 [ 105.230062][ T6068] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 105.357095][ T6079] syz.0.42: attempt to access beyond end of device [ 105.357095][ T6079] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 105.401108][ T6079] syz.0.42: attempt to access beyond end of device [ 105.401108][ T6079] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 105.456230][ T6079] syz.0.42: attempt to access beyond end of device [ 105.456230][ T6079] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 105.503111][ T6079] syz.0.42: attempt to access beyond end of device [ 105.503111][ T6079] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 105.521925][ T6079] syz.0.42: attempt to access beyond end of device [ 105.521925][ T6079] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 105.558701][ T6079] syz.0.42: attempt to access beyond end of device [ 105.558701][ T6079] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 105.587270][ T6079] syz.0.42: attempt to access beyond end of device [ 105.587270][ T6079] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 105.710733][ T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 105.932698][ T6089] loop0: detected capacity change from 0 to 512 [ 105.951630][ T6089] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.983454][ T6089] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm +}[@: EA inode hash validation failed [ 105.996121][ T6089] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.022572][ T6089] EXT4-fs error (device loop0): ext4_do_update_inode:5636: inode #15: comm +}[@: corrupted inode contents [ 106.045112][ T6089] EXT4-fs error (device loop0): ext4_dirty_inode:6521: inode #15: comm +}[@: mark_inode_dirty error [ 106.056843][ T6089] EXT4-fs error (device loop0): ext4_do_update_inode:5636: inode #15: comm +}[@: corrupted inode contents [ 106.072221][ T6089] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm +}[@: mark_inode_dirty error [ 106.085209][ T6089] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm +}[@: mark inode dirty (error -117) [ 106.098011][ T6089] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 106.113357][ T6089] EXT4-fs (loop0): 1 orphan inode deleted [ 106.124087][ T6089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.177255][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.269057][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 106.269075][ T30] audit: type=1326 audit(1762605906.623:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.303212][ T30] audit: type=1326 audit(1762605906.633:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.326289][ T30] audit: type=1326 audit(1762605906.643:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.351911][ T30] audit: type=1326 audit(1762605906.643:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.376204][ T30] audit: type=1326 audit(1762605906.643:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.401228][ T30] audit: type=1326 audit(1762605906.643:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.434863][ T30] audit: type=1326 audit(1762605906.643:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.457567][ T6094] loop0: detected capacity change from 0 to 512 [ 106.461038][ T6094] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.474507][ T30] audit: type=1326 audit(1762605906.653:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.497689][ T6094] EXT4-fs (loop0): 1 truncate cleaned up [ 106.500357][ T30] audit: type=1326 audit(1762605906.653:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.508497][ T6094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.551458][ T30] audit: type=1326 audit(1762605906.653:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87b018f6c9 code=0x7ffc0000 [ 106.597746][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.098890][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 107.144345][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 107.162966][ T6115] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'. [ 107.316656][ T6120] loop1: detected capacity change from 0 to 128 [ 107.317513][ T6121] loop3: detected capacity change from 0 to 512 [ 107.357442][ T6120] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.396336][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.443936][ T6121] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.523251][ T6131] netlink: 'syz.4.65': attribute type 10 has an invalid length. [ 107.543324][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.551439][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.590646][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 107.642432][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.649772][ T6131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.657389][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.664705][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.707996][ T6131] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.733019][ T6136] bridge_slave_1: left allmulticast mode [ 107.740118][ T6136] bridge_slave_1: left promiscuous mode [ 107.769013][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.786571][ T6136] bridge_slave_0: left allmulticast mode [ 107.792634][ T6136] bridge_slave_0: left promiscuous mode [ 107.798478][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.810381][ T6120] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.816742][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 107.857952][ T6136] bond0: (slave bridge0): Releasing backup interface [ 108.049906][ T6148] ALSA: seq fatal error: cannot create timer (-19) [ 108.306331][ T6159] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 108.337470][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.345374][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.408273][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.415659][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.423405][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.430701][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.536631][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.556671][ T6159] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.320517][ T6180] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 109.328647][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.336291][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.419911][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 109.443343][ T6180] bridge_slave_1: left allmulticast mode [ 109.459885][ T6180] bridge_slave_1: left promiscuous mode [ 109.476129][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.509196][ T6180] bridge_slave_0: left allmulticast mode [ 109.531412][ T6180] bridge_slave_0: left promiscuous mode [ 109.555755][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.598429][ T6180] bond0: (slave bridge0): Releasing backup interface [ 110.045009][ T6192] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 111.362454][ T6213] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 111.390295][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.398180][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.415304][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 111.450873][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.458218][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.466460][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.473752][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.517466][ T6213] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.571483][ T6215] bridge_slave_1: left allmulticast mode [ 111.580597][ T6215] bridge_slave_1: left promiscuous mode [ 111.598583][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.631545][ T6215] bridge_slave_0: left allmulticast mode [ 111.637430][ T6215] bridge_slave_0: left promiscuous mode [ 111.651973][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.711987][ T6215] bond0: (slave bridge0): Releasing backup interface [ 112.128016][ T6227] loop3: detected capacity change from 0 to 512 [ 112.190878][ T6227] EXT4-fs: Ignoring removed nobh option [ 112.215153][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #3: comm syz.3.104: corrupted inode contents [ 112.299906][ T6227] EXT4-fs error (device loop3): ext4_dirty_inode:6521: inode #3: comm syz.3.104: mark_inode_dirty error [ 112.339077][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #3: comm syz.3.104: corrupted inode contents [ 112.447427][ T6227] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.104: mark_inode_dirty error [ 112.479182][ T6227] __quota_error: 97 callbacks suppressed [ 112.479206][ T6227] Quota error (device loop3): write_blk: dquota write failed [ 112.534376][ T6239] mmap: syz.4.108 (6239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.546725][ T6227] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 112.622971][ T6227] EXT4-fs error (device loop3): ext4_acquire_dquot:6946: comm syz.3.104: Failed to acquire dquot type 0 [ 112.686167][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #16: comm syz.3.104: corrupted inode contents [ 112.715443][ T6227] EXT4-fs error (device loop3): ext4_dirty_inode:6521: inode #16: comm syz.3.104: mark_inode_dirty error [ 112.742187][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #16: comm syz.3.104: corrupted inode contents [ 112.765262][ T6227] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.104: mark_inode_dirty error [ 112.796371][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #16: comm syz.3.104: corrupted inode contents [ 112.827248][ T6227] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 112.848712][ T6227] EXT4-fs error (device loop3): ext4_do_update_inode:5636: inode #16: comm syz.3.104: corrupted inode contents [ 112.875322][ T6227] EXT4-fs error (device loop3): ext4_truncate:4641: inode #16: comm syz.3.104: mark_inode_dirty error [ 112.902847][ T6227] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 112.937763][ T6227] EXT4-fs (loop3): 1 truncate cleaned up [ 112.948636][ T6227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.987317][ T6227] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.282011][ T6250] loop4: detected capacity change from 0 to 1024 [ 113.289416][ T6250] EXT4-fs: inline encryption not supported [ 113.357571][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.387803][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 113.434648][ T6250] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 113.532884][ T6157] Set syz1 is full, maxelem 65536 reached [ 113.544878][ T6250] EXT4-fs (loop4): Remounting filesystem read-only [ 113.547830][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.194421][ T30] audit: type=1326 audit(1762605914.553:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc164d8f6c9 code=0x7ffc0000 [ 114.228975][ T30] audit: type=1326 audit(1762605914.573:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc164d8f6c9 code=0x7ffc0000 [ 114.485242][ T30] audit: type=1326 audit(1762605914.573:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc164d8f6c9 code=0x7ffc0000 [ 114.512231][ T30] audit: type=1326 audit(1762605914.573:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc164d8f6c9 code=0x7ffc0000 [ 114.526958][ T6287] loop3: detected capacity change from 0 to 512 [ 114.563445][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.597648][ T6287] EXT4-fs error (device loop3): ext4_iget_extra_inode:5079: inode #15: comm syz.3.128: corrupted in-inode xattr: e_value size too large [ 114.685898][ T6287] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.128: couldn't read orphan inode 15 (err -117) [ 114.769197][ T6287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.836017][ T6296] loop2: detected capacity change from 0 to 164 [ 114.918302][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.206991][ T6303] xt_hashlimit: max too large, truncated to 1048576 [ 115.250750][ T6307] syz_tun: entered allmulticast mode [ 115.277731][ T6307] syz_tun: left allmulticast mode [ 115.391899][ T6310] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 115.400353][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.409104][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.435632][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.443015][ T6310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.450636][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.457873][ T6310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.477202][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 115.483631][ T6310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.532304][ T6316] bridge_slave_1: left allmulticast mode [ 115.538183][ T6316] bridge_slave_1: left promiscuous mode [ 115.558610][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.601607][ T6316] bridge_slave_0: left allmulticast mode [ 115.623002][ T6316] bridge_slave_0: left promiscuous mode [ 115.639076][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.656618][ T6323] xt_hashlimit: max too large, truncated to 1048576 [ 115.664500][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.753075][ T6316] bond0: (slave bridge0): Releasing backup interface [ 115.782614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.810079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.256538][ T6319] syzkaller0: entered promiscuous mode [ 116.296810][ T6330] loop4: detected capacity change from 0 to 4096 [ 116.305183][ T6319] syzkaller0: entered allmulticast mode [ 116.392712][ T6330] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 116.416785][ T6318] vlan0: entered promiscuous mode [ 116.428109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.455896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.474696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.504245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.530081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.563598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.574115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 116.584707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.041608][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.146'. [ 118.242547][ T6343] loop2: detected capacity change from 0 to 256 [ 118.254328][ T6343] exfat: Deprecated parameter 'utf8' [ 118.259543][ T6346] netlink: 52 bytes leftover after parsing attributes in process `syz.3.149'. [ 118.311630][ T6347] IPv6: Can't replace route, no match found [ 118.913164][ T6343] exfat: Deprecated parameter 'namecase' [ 118.918922][ T6343] exfat: Deprecated parameter 'namecase' [ 118.973506][ T6343] exfat: Deprecated parameter 'utf8' [ 119.010749][ T6343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 120.932137][ T6364] loop3: detected capacity change from 0 to 4096 [ 121.526667][ T6364] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 123.185241][ T6370] syzkaller0: entered promiscuous mode [ 123.221034][ T6370] syzkaller0: entered allmulticast mode [ 123.254335][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 123.314180][ T6382] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 123.340492][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.358212][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.400326][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.400426][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 123.430745][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.694708][ T6390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.164'. [ 123.727621][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 124.359285][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.166'. [ 124.378352][ T6397] loop3: detected capacity change from 0 to 164 [ 124.389480][ T6397] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿCî' [ 124.529142][ T6397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.473680][ T6402] loop4: detected capacity change from 0 to 164 [ 125.503379][ T6397] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 125.869333][ T6409] Unsupported NM flag settings (240) [ 126.874635][ T5821] Unsupported NM flag settings (240) [ 126.901631][ T5821] Unsupported NM flag settings (240) [ 126.910619][ T5821] Unsupported NM flag settings (240) [ 127.010087][ T5821] Unsupported NM flag settings (240) [ 127.022136][ T5821] Unsupported NM flag settings (240) [ 127.033247][ T5821] Unsupported NM flag settings (240) [ 127.042984][ T6407] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.168'. [ 127.511879][ T6416] loop3: detected capacity change from 0 to 164 [ 127.880190][ T6421] Unsupported NM flag settings (240) [ 129.173718][ T6425] syzkaller0: entered promiscuous mode [ 129.179271][ T6425] syzkaller0: entered allmulticast mode [ 129.264431][ T5825] Unsupported NM flag settings (240) [ 129.278568][ T5825] Unsupported NM flag settings (240) [ 129.323942][ T5825] Unsupported NM flag settings (240) [ 129.382408][ T5825] Unsupported NM flag settings (240) [ 129.388251][ T5825] Unsupported NM flag settings (240) [ 129.394057][ T5825] Unsupported NM flag settings (240) [ 129.440973][ T6432] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 129.459962][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 132.319338][ T6434] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.179'. [ 132.359733][ T6457] loop3: detected capacity change from 0 to 4096 [ 132.421062][ T6457] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 133.370638][ T6457] ntfs3(loop3): Failed to read $UpCase (-4). [ 134.300446][ T6482] loop4: detected capacity change from 0 to 164 [ 134.640697][ T6491] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 134.738441][ T6493] Unsupported NM flag settings (240) [ 135.705242][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 135.881842][ T6496] syzkaller0: entered promiscuous mode [ 135.887502][ T6496] syzkaller0: entered allmulticast mode [ 135.904465][ T5821] Unsupported NM flag settings (240) [ 135.923363][ T5821] Unsupported NM flag settings (240) [ 135.928958][ T5821] Unsupported NM flag settings (240) [ 135.988405][ T5821] Unsupported NM flag settings (240) [ 136.004815][ T5821] Unsupported NM flag settings (240) [ 136.024237][ T5821] Unsupported NM flag settings (240) [ 137.996645][ T6516] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.194'. [ 138.186224][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.199717][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.403165][ T6524] loop3: detected capacity change from 0 to 164 [ 138.910022][ T6535] Unsupported NM flag settings (240) [ 140.422986][ T5825] Unsupported NM flag settings (240) [ 140.428461][ T5825] Unsupported NM flag settings (240) [ 140.469951][ T5825] Unsupported NM flag settings (240) [ 142.109920][ T5825] Unsupported NM flag settings (240) [ 142.118439][ T5825] Unsupported NM flag settings (240) [ 142.198046][ T5825] Unsupported NM flag settings (240) [ 142.408766][ T6547] loop3: detected capacity change from 0 to 164 [ 142.925467][ T6553] Unsupported NM flag settings (240) [ 143.400006][ T6556] 9p: Bad value for 'rfdno' [ 143.408882][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 143.439874][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.372442][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.434786][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.531821][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.721786][ T5825] Unsupported NM flag settings (240) [ 148.727444][ T5825] Unsupported NM flag settings (240) [ 148.755349][ T5825] Unsupported NM flag settings (240) [ 148.775466][ T5825] Unsupported NM flag settings (240) [ 148.781856][ T5825] Unsupported NM flag settings (240) [ 148.788066][ T5825] Unsupported NM flag settings (240) [ 149.007644][ T6563] syzkaller0: entered promiscuous mode [ 149.027419][ T6563] syzkaller0: entered allmulticast mode [ 149.505904][ C0] ------------[ cut here ]------------ [ 149.511694][ C0] WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150, CPU#0: ksoftirqd/0/15 [ 149.522577][ C0] Modules linked in: [ 149.526681][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 149.535973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.546108][ C0] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 149.552011][ C0] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 149.571711][ C0] RSP: 0018:ffffc90000147890 EFLAGS: 00010246 [ 149.577820][ C0] RAX: ffffffff81bde0b7 RBX: ffff888021eb5078 RCX: ffff88801cafbd00 [ 149.585861][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 149.593990][ C0] RBP: 0000000000000002 R08: ffff88806ab60193 R09: 1ffff1100d56c032 [ 149.602033][ C0] R10: dffffc0000000000 R11: ffffed100d56c033 R12: dffffc0000000000 [ 149.610069][ C0] R13: ffffffff81a903d7 R14: ffff88806ab60000 R15: ffff88806ab60190 [ 149.618074][ C0] FS: 0000000000000000(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 149.627077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.633730][ C0] CR2: 00007f383adf03cc CR3: 000000007e39c000 CR4: 00000000003526f0 [ 149.641777][ C0] Call Trace: [ 149.645086][ C0] [ 149.648046][ C0] ? __pfx_delayed_free_pidns+0x10/0x10 [ 149.653667][ C0] rcu_core+0xcab/0x1770 [ 149.657981][ C0] ? __pfx_rcu_core+0x10/0x10 [ 149.662741][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 149.667977][ C0] ? sched_clock_cpu+0x74/0x430 [ 149.672911][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 149.678231][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 149.683738][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 149.689645][ C0] handle_softirqs+0x286/0x870 [ 149.694457][ C0] ? run_ksoftirqd+0x9b/0x100 [ 149.699189][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 149.704567][ C0] ? preempt_schedule_common+0x83/0xd0 [ 149.710122][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 149.715193][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 149.720378][ C0] run_ksoftirqd+0x9b/0x100 [ 149.724931][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 149.730204][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 149.735985][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 149.741363][ C0] smpboot_thread_fn+0x542/0xa60 [ 149.746363][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 149.751521][ C0] kthread+0x711/0x8a0 [ 149.755672][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 149.761241][ C0] ? __pfx_kthread+0x10/0x10 [ 149.765872][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.771183][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.776433][ C0] ? __pfx_kthread+0x10/0x10 [ 149.781097][ C0] ret_from_fork+0x599/0xb30 [ 149.785742][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 149.790949][ C0] ? __switch_to_asm+0x39/0x70 [ 149.795754][ C0] ? __switch_to_asm+0x33/0x70 [ 149.800600][ C0] ? __pfx_kthread+0x10/0x10 [ 149.805231][ C0] ret_from_fork_asm+0x1a/0x30 [ 149.810113][ C0] [ 149.813184][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.820485][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 149.829714][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.839788][ C0] Call Trace: [ 149.843086][ C0] [ 149.846030][ C0] dump_stack_lvl+0x99/0x250 [ 149.850734][ C0] ? __asan_memcpy+0x40/0x70 [ 149.855345][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.860564][ C0] ? __pfx__printk+0x10/0x10 [ 149.865176][ C0] vpanic+0x237/0x6d0 [ 149.869172][ C0] ? __pfx_vpanic+0x10/0x10 [ 149.873701][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 149.878919][ C0] panic+0xb9/0xc0 [ 149.882648][ C0] ? __pfx_panic+0x10/0x10 [ 149.887101][ C0] __warn+0x334/0x4c0 [ 149.891194][ C0] ? delayed_free_pidns+0x118/0x150 [ 149.896843][ C0] ? delayed_free_pidns+0x118/0x150 [ 149.902057][ C0] report_bug+0x2be/0x4f0 [ 149.906411][ C0] ? delayed_free_pidns+0x118/0x150 [ 149.911620][ C0] ? delayed_free_pidns+0x118/0x150 [ 149.916832][ C0] ? delayed_free_pidns+0x11a/0x150 [ 149.922040][ C0] handle_bug+0x84/0x160 [ 149.926295][ C0] exc_invalid_op+0x1a/0x50 [ 149.930817][ C0] asm_exc_invalid_op+0x1a/0x20 [ 149.935677][ C0] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 149.941495][ C0] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 149.961115][ C0] RSP: 0018:ffffc90000147890 EFLAGS: 00010246 [ 149.967199][ C0] RAX: ffffffff81bde0b7 RBX: ffff888021eb5078 RCX: ffff88801cafbd00 [ 149.975195][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 149.983197][ C0] RBP: 0000000000000002 R08: ffff88806ab60193 R09: 1ffff1100d56c032 [ 149.991183][ C0] R10: dffffc0000000000 R11: ffffed100d56c033 R12: dffffc0000000000 [ 149.999175][ C0] R13: ffffffff81a903d7 R14: ffff88806ab60000 R15: ffff88806ab60190 [ 150.007168][ C0] ? rcu_core+0xc37/0x1770 [ 150.011621][ C0] ? delayed_free_pidns+0x117/0x150 [ 150.016839][ C0] ? __pfx_delayed_free_pidns+0x10/0x10 [ 150.022396][ C0] rcu_core+0xcab/0x1770 [ 150.026675][ C0] ? __pfx_rcu_core+0x10/0x10 [ 150.031375][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 150.036613][ C0] ? sched_clock_cpu+0x74/0x430 [ 150.041508][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 150.046813][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 150.052231][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 150.058067][ C0] handle_softirqs+0x286/0x870 [ 150.062860][ C0] ? run_ksoftirqd+0x9b/0x100 [ 150.067581][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 150.072908][ C0] ? preempt_schedule_common+0x83/0xd0 [ 150.078396][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 150.083442][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 150.088484][ C0] run_ksoftirqd+0x9b/0x100 [ 150.093014][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 150.098151][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 150.103920][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 150.109062][ C0] smpboot_thread_fn+0x542/0xa60 [ 150.114037][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 150.119100][ C0] kthread+0x711/0x8a0 [ 150.123202][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 150.128695][ C0] ? __pfx_kthread+0x10/0x10 [ 150.133315][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.138538][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.143752][ C0] ? __pfx_kthread+0x10/0x10 [ 150.148354][ C0] ret_from_fork+0x599/0xb30 [ 150.152968][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 150.158138][ C0] ? __switch_to_asm+0x39/0x70 [ 150.162912][ C0] ? __switch_to_asm+0x33/0x70 [ 150.167684][ C0] ? __pfx_kthread+0x10/0x10 [ 150.172284][ C0] ret_from_fork_asm+0x1a/0x30 [ 150.177084][ C0] [ 150.180508][ C0] Kernel Offset: disabled [ 150.184843][ C0] Rebooting in 86400 seconds..