last executing test programs: 7.731046766s ago: executing program 1 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0x3000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x27, 0x0, 0x0) 7.14119327s ago: executing program 1 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fe0000d60600000ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 5.03611201s ago: executing program 1 (id=104): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}}, 0x20}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4.385789584s ago: executing program 1 (id=107): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x30043, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0), &(0x7f0000000040)=0x8) 4.028876367s ago: executing program 1 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2281, 0x0) ioprio_set$uid(0x3, 0x0, 0x2000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080), &(0x7f0000000280)="5854c443fa8efa10791f91c64f7de668eed6c55ee0204a9602b5ceb074f65fb495372ddd96ff09adac9487c801ded182133ccb3f9650b16825", 0x39, 0x0) execve(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1000000) mmap(&(0x7f0000fe2000/0x11000)=nil, 0x11000, 0x0, 0x1471b8e5a8d12f59, 0xffffffffffffffff, 0xf6690000) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="b805002000b9fa0000000f03d9c4c3d96dfac61bf7b805000000c4c27958fc0fae41d901107c7c00b87f8b7f26ba230000000f30660fc775022e0fe90c9866ba4100ec0f3566b8578b0000b842c700000f23c80f21f890380a0a23f8", 0x5c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000fe9000/0x1000)=nil, 0x1000, 0xb) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r6, 0x1000006, 0x13, r5, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket(0x11, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000100)=0xbe, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newchain={0x24, 0x66, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x6, 0xffff}, {0xa}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 3.962161941s ago: executing program 0 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.787647925s ago: executing program 1 (id=127): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x7c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3ce0d3c3a971cadb}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x2}}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x3}}]}}}]}, 0x7c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2.786170407s ago: executing program 0 (id=128): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0xc002}, 0x400c054) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.407771949s ago: executing program 0 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f0000000500), &(0x7f0000000800)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{}, &(0x7f0000000f00), &(0x7f0000000f40)=r0}, 0x20) 2.178757869s ago: executing program 0 (id=136): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r0, &(0x7f00000037c0)={0x2020}, 0x2020) 2.033289465s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.918634545s ago: executing program 2 (id=140): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x160) r2 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 1.873878202s ago: executing program 4 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) lseek(r0, 0xfffffffffffffffe, 0x0) 1.681881721s ago: executing program 4 (id=142): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="ced311c366c51c2547", 0x9}], 0x4}}], 0x1, 0x40801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.417777146s ago: executing program 4 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x483, 0x0, 0x8}]}) 1.220910069s ago: executing program 4 (id=146): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 1.077450347s ago: executing program 4 (id=148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x22001, 0x7f) r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000280)=@v2={0x5, 0x3, 0x0, 0x3}, 0x9, 0x3) 898.284303ms ago: executing program 4 (id=150): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 897.061997ms ago: executing program 3 (id=151): socket$inet6_sctp(0xa, 0x1, 0x84) ioprio_set$uid(0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 878.513345ms ago: executing program 2 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) lseek(r0, 0xfffffffffffffffe, 0x0) 717.270711ms ago: executing program 3 (id=153): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) eventfd2(0x200000, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 679.472525ms ago: executing program 2 (id=154): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006300)=[{{0x0, 0x0, &(0x7f0000003840)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="ced311c366c51c2547", 0x9}], 0x4}}], 0x1, 0x40801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 533.562259ms ago: executing program 3 (id=155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x48080) 376.770921ms ago: executing program 2 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x483, 0x0, 0x8}]}) 364.992889ms ago: executing program 3 (id=157): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x7, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0xb, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x40000, 0x20}, &(0x7f0000000240)=0xc) 219.622201ms ago: executing program 3 (id=158): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x3}, {0x9, 0x8, 0x9, '\x00', 0xf}, {0xff, 0x7f, 0xd3, '\x00', 0xe9}, {0xfd, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xfb, 0x58, 0xff, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xf, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x9}, {0x4, 0xc, 0x5, '\x00', 0xe9}, {0x7, 0x2, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 142.794419ms ago: executing program 2 (id=159): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0), &(0x7f0000000040)=0x8) 141.332317ms ago: executing program 0 (id=160): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00001f7000/0x1000)=nil) 41.22156ms ago: executing program 3 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x500, 0x1a2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes128, 0x3, '\x00', @a}) open$dir(0x0, 0x40002, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0xc1) mkdirat(r1, &(0x7f0000000380)='./file0\x00', 0xca) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file4\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x4) 0s ago: executing program 2 (id=162): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x160) r2 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 80.375677][ T5827] cgroup: Unknown subsys name 'net' [ 80.509690][ T5827] cgroup: Unknown subsys name 'cpuset' [ 80.518881][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.196660][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.642777][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.659738][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.668230][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.675767][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.687037][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.687046][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.704281][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.704573][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.719941][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.726726][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.734863][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.736233][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.751463][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.762650][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.769834][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.776041][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.783472][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.788504][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.794139][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.799136][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.811659][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.818785][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.827808][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.831315][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.853323][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.514675][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 85.678353][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.809912][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 85.879229][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.886680][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.893965][ T5854] bridge_slave_0: entered allmulticast mode [ 85.902118][ T5854] bridge_slave_0: entered promiscuous mode [ 85.911769][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.954722][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.962466][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.970144][ T5854] bridge_slave_1: entered allmulticast mode [ 85.979920][ T5854] bridge_slave_1: entered promiscuous mode [ 86.119567][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.129214][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.150388][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.157765][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.165294][ T5839] bridge_slave_0: entered allmulticast mode [ 86.173594][ T5839] bridge_slave_0: entered promiscuous mode [ 86.194266][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.233148][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.240679][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.249312][ T5839] bridge_slave_1: entered allmulticast mode [ 86.257598][ T5839] bridge_slave_1: entered promiscuous mode [ 86.363575][ T5854] team0: Port device team_slave_0 added [ 86.369953][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.377497][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.384982][ T5850] bridge_slave_0: entered allmulticast mode [ 86.392951][ T5850] bridge_slave_0: entered promiscuous mode [ 86.438852][ T5854] team0: Port device team_slave_1 added [ 86.457732][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.465079][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.472721][ T5850] bridge_slave_1: entered allmulticast mode [ 86.480669][ T5850] bridge_slave_1: entered promiscuous mode [ 86.493743][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.556758][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.566889][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.574262][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.581726][ T5840] bridge_slave_0: entered allmulticast mode [ 86.590092][ T5840] bridge_slave_0: entered promiscuous mode [ 86.607907][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.614902][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.641065][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.680411][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.687869][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.695135][ T5840] bridge_slave_1: entered allmulticast mode [ 86.703562][ T5840] bridge_slave_1: entered promiscuous mode [ 86.724499][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.731506][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.757550][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.783702][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.848629][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.880764][ T5839] team0: Port device team_slave_0 added [ 86.896425][ T5848] Bluetooth: hci0: command tx timeout [ 86.896472][ T5844] Bluetooth: hci1: command tx timeout [ 86.903034][ T5846] Bluetooth: hci2: command tx timeout [ 86.908429][ T5858] Bluetooth: hci4: command tx timeout [ 86.929424][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.938023][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.945944][ T5842] bridge_slave_0: entered allmulticast mode [ 86.954702][ T5842] bridge_slave_0: entered promiscuous mode [ 86.976165][ T5858] Bluetooth: hci3: command tx timeout [ 87.014118][ T5839] team0: Port device team_slave_1 added [ 87.027070][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.036799][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.045226][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.053443][ T5842] bridge_slave_1: entered allmulticast mode [ 87.062712][ T5842] bridge_slave_1: entered promiscuous mode [ 87.114319][ T5850] team0: Port device team_slave_0 added [ 87.144826][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.199329][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.221070][ T5854] hsr_slave_0: entered promiscuous mode [ 87.229549][ T5854] hsr_slave_1: entered promiscuous mode [ 87.246513][ T5850] team0: Port device team_slave_1 added [ 87.283075][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.324154][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.331393][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.357411][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.386032][ T5840] team0: Port device team_slave_0 added [ 87.420908][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.428175][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.454276][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.481485][ T5840] team0: Port device team_slave_1 added [ 87.505805][ T5842] team0: Port device team_slave_0 added [ 87.513250][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.520317][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.546419][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.594240][ T5842] team0: Port device team_slave_1 added [ 87.609270][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.616700][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.643072][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.670692][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.677920][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.704653][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.754589][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.761690][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.788337][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.880711][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.888061][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.914550][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.963852][ T5850] hsr_slave_0: entered promiscuous mode [ 87.970880][ T5850] hsr_slave_1: entered promiscuous mode [ 87.977949][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 87.983790][ T5850] Cannot create hsr debugfs directory [ 87.999227][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.006784][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.032857][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.050793][ T5839] hsr_slave_0: entered promiscuous mode [ 88.058197][ T5839] hsr_slave_1: entered promiscuous mode [ 88.064886][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 88.070725][ T5839] Cannot create hsr debugfs directory [ 88.199885][ T5840] hsr_slave_0: entered promiscuous mode [ 88.207218][ T5840] hsr_slave_1: entered promiscuous mode [ 88.214022][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.219917][ T5840] Cannot create hsr debugfs directory [ 88.451291][ T5842] hsr_slave_0: entered promiscuous mode [ 88.458434][ T5842] hsr_slave_1: entered promiscuous mode [ 88.465164][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 88.471023][ T5842] Cannot create hsr debugfs directory [ 88.886127][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.934727][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.966348][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.975704][ T5844] Bluetooth: hci1: command tx timeout [ 88.981570][ T5858] Bluetooth: hci4: command tx timeout [ 88.987346][ T5844] Bluetooth: hci2: command tx timeout [ 88.989731][ T5846] Bluetooth: hci0: command tx timeout [ 89.018755][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.055752][ T5846] Bluetooth: hci3: command tx timeout [ 89.113457][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.133032][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.151300][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.163659][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.261773][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.284166][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.314045][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.338766][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.444254][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.458735][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.472518][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.483783][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.612503][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.642596][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.668884][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.681744][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.694497][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.755270][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.816402][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.824148][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.846413][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.873376][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.880581][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.977727][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.046290][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.053469][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.088528][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.110352][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.117862][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.197819][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.238131][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.291147][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.298439][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.343155][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.350552][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.371158][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.401737][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.470946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.478276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.537402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.544688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.659300][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.714980][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.722197][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.751725][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.792498][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.799689][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.893543][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.058726][ T5846] Bluetooth: hci2: command tx timeout [ 91.058748][ T5844] Bluetooth: hci4: command tx timeout [ 91.064262][ T5846] Bluetooth: hci1: command tx timeout [ 91.069721][ T5858] Bluetooth: hci0: command tx timeout [ 91.136263][ T5846] Bluetooth: hci3: command tx timeout [ 91.164776][ T5854] veth0_vlan: entered promiscuous mode [ 91.237826][ T5854] veth1_vlan: entered promiscuous mode [ 91.297108][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.355271][ T5850] veth0_vlan: entered promiscuous mode [ 91.389771][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.446366][ T5850] veth1_vlan: entered promiscuous mode [ 91.497246][ T5854] veth0_macvtap: entered promiscuous mode [ 91.524523][ T5854] veth1_macvtap: entered promiscuous mode [ 91.614376][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.636537][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.649417][ T5850] veth0_macvtap: entered promiscuous mode [ 91.659261][ T5840] veth0_vlan: entered promiscuous mode [ 91.709807][ T5850] veth1_macvtap: entered promiscuous mode [ 91.735471][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.770159][ T5840] veth1_vlan: entered promiscuous mode [ 91.803150][ T5839] veth0_vlan: entered promiscuous mode [ 91.821654][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.845067][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.858155][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.887055][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.901961][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.927503][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.943978][ T5839] veth1_vlan: entered promiscuous mode [ 91.956395][ T1790] cfg80211: failed to load regulatory.db [ 92.023498][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.058955][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.071695][ T1011] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.105213][ T1011] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.150071][ T5840] veth0_macvtap: entered promiscuous mode [ 92.200078][ T5840] veth1_macvtap: entered promiscuous mode [ 92.206806][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.229842][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.320513][ T5839] veth0_macvtap: entered promiscuous mode [ 92.358131][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.370134][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.390665][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.420487][ T5839] veth1_macvtap: entered promiscuous mode [ 92.445136][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.460540][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478041][ T5842] veth0_vlan: entered promiscuous mode [ 92.501105][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.504898][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.573637][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597535][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.620904][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.635639][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.649669][ T1172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.680697][ T1172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.697999][ T5842] veth1_vlan: entered promiscuous mode [ 92.774197][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.847313][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.872539][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.013485][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.036283][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063345][ T5971] overlayfs: invalid origin (0000) [ 93.078608][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.102231][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136940][ T5846] Bluetooth: hci4: command tx timeout [ 93.137587][ T5848] Bluetooth: hci0: command tx timeout [ 93.142411][ T5846] Bluetooth: hci2: command tx timeout [ 93.152058][ T5844] Bluetooth: hci1: command tx timeout [ 93.181723][ T5842] veth0_macvtap: entered promiscuous mode [ 93.221125][ T5848] Bluetooth: hci3: command tx timeout [ 93.300519][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.309877][ T5842] veth1_macvtap: entered promiscuous mode [ 93.334750][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.537690][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.577316][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.592014][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.639604][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.703110][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.735074][ T5983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.754554][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832242][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.843552][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.852913][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.863328][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.873656][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.882979][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.892363][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 93.961131][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980597][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999101][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.051064][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.073843][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.091651][ T5982] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 94.104392][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.122136][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.459912][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.501816][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.667811][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.704973][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.188813][ T6032] kvm: faulting far call emulation tainted memory [ 98.744621][ T29] audit: type=1326 audit(1774022259.663:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.0.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e99c799 code=0x0 [ 98.988105][ T29] audit: type=1326 audit(1774022259.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.012078][ T29] audit: type=1326 audit(1774022259.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.040414][ T29] audit: type=1326 audit(1774022259.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.063723][ T29] audit: type=1326 audit(1774022259.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.115466][ T29] audit: type=1326 audit(1774022259.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.171988][ T29] audit: type=1326 audit(1774022259.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.244029][ T29] audit: type=1326 audit(1774022259.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.295228][ T29] audit: type=1326 audit(1774022259.913:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 99.368536][ T29] audit: type=1326 audit(1774022259.913:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6111 comm="syz.3.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037739c799 code=0x7ffc0000 [ 100.903514][ T6160] __nla_validate_parse: 26 callbacks suppressed [ 100.903533][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 101.179461][ T6170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.193030][ T6170] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.565296][ T6199] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 103.591092][ T6199] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.630855][ T6201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 103.986623][ T6213] kvm: pic: non byte write [ 104.143697][ T6220] Zero length message leads to an empty skb [ 104.656477][ T6236] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 104.698162][ T6236] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.190110][ T6265] process 'syz.1.112' launched './file2' with NULL argv: empty string added [ 106.321862][ T6270] kvm: kvm [6262]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 107.532344][ T6303] syz.2.126 uses obsolete (PF_INET,SOCK_PACKET) [ 107.553799][ T6309] overlayfs: missing 'lowerdir' [ 108.344268][ T6335] overlayfs: missing 'lowerdir' [ 109.356574][ T6362] overlayfs: missing 'workdir' [ 110.174738][ T6380] [ 110.177136][ T6380] ====================================================== [ 110.184183][ T6380] WARNING: possible circular locking dependency detected [ 110.191328][ T6380] syzkaller #0 Not tainted [ 110.195765][ T6380] ------------------------------------------------------ [ 110.202797][ T6380] syz.0.160/6380 is trying to acquire lock: [ 110.208959][ T6380] ffff88807cb5a978 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 110.217903][ T6380] [ 110.217903][ T6380] but task is already holding lock: [ 110.225285][ T6380] ffff888058c7ca30 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 110.235056][ T6380] [ 110.235056][ T6380] which lock already depends on the new lock. [ 110.235056][ T6380] [ 110.245512][ T6380] [ 110.245512][ T6380] the existing dependency chain (in reverse order) is: [ 110.254545][ T6380] [ 110.254545][ T6380] -> #1 (&ctx->map_changing_lock){++++}-{4:4}: [ 110.262930][ T6380] down_write+0x96/0x200 [ 110.267728][ T6380] userfaultfd_unmap_prep+0x24b/0x3e0 [ 110.273648][ T6380] vms_gather_munmap_vmas+0x9c6/0x1370 [ 110.279655][ T6380] do_vmi_align_munmap+0x2b4/0x4b0 [ 110.285314][ T6380] do_vmi_munmap+0x252/0x2d0 [ 110.290486][ T6380] do_munmap+0xf9/0x170 [ 110.295193][ T6380] mremap_to+0x34d/0x850 [ 110.300006][ T6380] __se_sys_mremap+0xe6d/0x11d0 [ 110.305400][ T6380] do_syscall_64+0x14d/0xf80 [ 110.310546][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.316983][ T6380] [ 110.316983][ T6380] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 110.324573][ T6380] __lock_acquire+0x15a5/0x2cf0 [ 110.330002][ T6380] lock_acquire+0x106/0x350 [ 110.335051][ T6380] __might_fault+0xcb/0x130 [ 110.340102][ T6380] userfaultfd_ioctl+0x2c01/0x4c70 [ 110.345762][ T6380] __se_sys_ioctl+0xfc/0x170 [ 110.350892][ T6380] do_syscall_64+0x14d/0xf80 [ 110.356032][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.362741][ T6380] [ 110.362741][ T6380] other info that might help us debug this: [ 110.362741][ T6380] [ 110.372985][ T6380] Possible unsafe locking scenario: [ 110.372985][ T6380] [ 110.380495][ T6380] CPU0 CPU1 [ 110.385878][ T6380] ---- ---- [ 110.391254][ T6380] rlock(&ctx->map_changing_lock); [ 110.396479][ T6380] lock(&mm->mmap_lock); [ 110.403344][ T6380] lock(&ctx->map_changing_lock); [ 110.410998][ T6380] rlock(&mm->mmap_lock); [ 110.415456][ T6380] [ 110.415456][ T6380] *** DEADLOCK *** [ 110.415456][ T6380] [ 110.423618][ T6380] 2 locks held by syz.0.160/6380: [ 110.428650][ T6380] #0: ffff888032b75bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 110.438091][ T6380] #1: ffff888058c7ca30 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660 [ 110.448384][ T6380] [ 110.448384][ T6380] stack backtrace: [ 110.454313][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 110.454333][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.454352][ T6380] Call Trace: [ 110.454363][ T6380] [ 110.454370][ T6380] dump_stack_lvl+0xe8/0x150 [ 110.454399][ T6380] print_circular_bug+0x2e1/0x300 [ 110.454422][ T6380] check_noncircular+0x12e/0x150 [ 110.454443][ T6380] __lock_acquire+0x15a5/0x2cf0 [ 110.454474][ T6380] ? mfill_atomic_copy+0x125b/0x1580 [ 110.454492][ T6380] ? __kernel_text_address+0xd/0x30 [ 110.454547][ T6380] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 110.454572][ T6380] ? __might_fault+0xaf/0x130 [ 110.454595][ T6380] lock_acquire+0x106/0x350 [ 110.454621][ T6380] ? __might_fault+0xaf/0x130 [ 110.454649][ T6380] ? __might_fault+0xaf/0x130 [ 110.454672][ T6380] __might_fault+0xcb/0x130 [ 110.454695][ T6380] ? __might_fault+0xaf/0x130 [ 110.454719][ T6380] userfaultfd_ioctl+0x2c01/0x4c70 [ 110.454743][ T6380] ? __kasan_slab_free+0x5c/0x80 [ 110.454757][ T6380] ? kfree+0x1c5/0x640 [ 110.454785][ T6380] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 110.454820][ T6380] ? kasan_quarantine_put+0xbb/0x1f0 [ 110.454847][ T6380] ? tomoyo_path_number_perm+0x219/0x630 [ 110.454870][ T6380] ? tomoyo_path_number_perm+0x219/0x630 [ 110.454893][ T6380] ? do_vfs_ioctl+0x1166/0x1530 [ 110.454911][ T6380] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 110.454932][ T6380] ? do_futex+0x333/0x420 [ 110.454954][ T6380] ? __fget_files+0x2a/0x420 [ 110.454985][ T6380] ? __fget_files+0x2a/0x420 [ 110.455006][ T6380] ? __fget_files+0x3a0/0x420 [ 110.455028][ T6380] ? __fget_files+0x2a/0x420 [ 110.455051][ T6380] ? bpf_lsm_file_ioctl+0x9/0x20 [ 110.455068][ T6380] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 110.455092][ T6380] __se_sys_ioctl+0xfc/0x170 [ 110.455110][ T6380] do_syscall_64+0x14d/0xf80 [ 110.455131][ T6380] ? trace_irq_disable+0x3b/0x140 [ 110.455152][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.455168][ T6380] ? clear_bhb_loop+0x40/0x90 [ 110.455186][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.455203][ T6380] RIP: 0033:0x7f9d0e99c799 [ 110.455225][ T6380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.455240][ T6380] RSP: 002b:00007f9d0f7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.455258][ T6380] RAX: ffffffffffffffda RBX: 00007f9d0ec15fa0 RCX: 00007f9d0e99c799 [ 110.455271][ T6380] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 110.455282][ T6380] RBP: 00007f9d0ea32c99 R08: 0000000000000000 R09: 0000000000000000 [ 110.455293][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.455302][ T6380] R13: 00007f9d0ec16038 R14: 00007f9d0ec15fa0 R15: 00007ffe8de829a8 [ 110.455322][ T6380]