last executing test programs: 1m22.106058763s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = syz_open_pts(r4, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xf) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000000c0)=0x6c) 1m12.912008583s ago: executing program 3 (id=95): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m6.723154434s ago: executing program 3 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0x9, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.454618387s ago: executing program 3 (id=105): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mount$9p_fd(0x0, 0x0, 0x0, 0x1200810, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 1m2.762569863s ago: executing program 3 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4004091) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000440)={0x48}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x144) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) 1m0.564619576s ago: executing program 3 (id=111): socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), &(0x7f0000000300)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r3, &(0x7f0000001bc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1) 44.949778652s ago: executing program 32 (id=111): socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), &(0x7f0000000300)=0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004151) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r3, &(0x7f0000001bc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1) 23.982125177s ago: executing program 2 (id=169): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getscheduler(r0) socket(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, 0x0, 0xfe) 22.709526946s ago: executing program 2 (id=171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x2, 0x7fff7ffc}]}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = syz_pidfd_open(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='rpc_pipefs\x00', 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000080)='./mnt\x00', &(0x7f0000000200)='nfs\x00', 0x0, 0x0) nanosleep(0x0, 0x0) setns(r2, 0x24020000) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 20.987350337s ago: executing program 0 (id=173): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.647604639s ago: executing program 2 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r6, 0x0, 0x1, 0x4000}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x98, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xae}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x4, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x34, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc488}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x8}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000e00)={{r2, &(0x7f00000007c0)='\xbb\xbb\xbb\xbb\xbb\xbb', 0x80800, &(0x7f0000000800)={@_ha_fsid={[0x1ee, 0x400]}, {0x81, 0xfff, 0x40, 0x3ff}}, 0x3, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0xdf}, {[0xffffffff, 0x6, 0x3]}, 0x6c, 0x23, &(0x7f0000000940)=""/35}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x75) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f00)={'wlan1\x00'}) 20.099818201s ago: executing program 4 (id=175): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0x2, 0x3, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r7, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) 19.922544157s ago: executing program 4 (id=176): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}}, 0x40000) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x8040) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000001, 0x200) ioctl$USBDEVFS_DROP_PRIVILEGES(r9, 0x4004551e, &(0x7f0000000080)=0x2) 19.362965277s ago: executing program 0 (id=177): r0 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) 18.345024967s ago: executing program 0 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) 15.890625106s ago: executing program 0 (id=179): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004045) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.881144301s ago: executing program 2 (id=180): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x881, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x8, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.477904554s ago: executing program 4 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0) writev(r5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x105) 13.167920845s ago: executing program 4 (id=184): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) close(r0) 11.833541943s ago: executing program 2 (id=186): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x142, 0x193) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x300}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb4}}, 0x0) 9.563588404s ago: executing program 1 (id=187): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000010000000000000000000000000000000000022b0000000a000000ac1e010100000020000000000000000000000000040200000000000000000000004000"/180], 0xfc}, 0x1, 0x0, 0x0, 0x40041}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000005c0)={r4, 0x1f, 0x0, 0x1000000}) 9.563043001s ago: executing program 2 (id=188): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0xc}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) landlock_restrict_self(r1, 0x3) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x2) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 8.53430048s ago: executing program 1 (id=189): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000000000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0) 7.459604896s ago: executing program 1 (id=190): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x250942, 0x50) io_uring_setup(0x3749, &(0x7f0000000180)={0x0, 0x9aa6, 0x4000, 0x0, 0x21f, 0x0, r3}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) 5.704863925s ago: executing program 4 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) 5.155336902s ago: executing program 1 (id=192): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 3.525665301s ago: executing program 4 (id=193): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x4100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) stat(&(0x7f00000002c0)='./sec/apparmor/policy/namespaces\x00', &(0x7f0000000300)) 2.913418901s ago: executing program 0 (id=194): socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x8, 0x20000006, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x15, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0xf6e, 0x800c, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x9, 0x1000005, 0x9, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc23, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0xffffffff, 0x2, 0x3, 0xf36, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x937, 0x5, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0xe6d4, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x57, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff8, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.894694032s ago: executing program 1 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) socket$pppoe(0x18, 0x1, 0x0) 17.194722ms ago: executing program 1 (id=196): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 0 (id=197): socket$netlink(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41e, &(0x7f0000000900)={[{@orlov}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@oldalloc}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nogrpid}], [], 0x2c}, 0x1, 0x47a, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x1, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 64.732882][ T5595] cgroup: Unknown subsys name 'net' [ 64.863139][ T5595] cgroup: Unknown subsys name 'cpuset' [ 64.871647][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.192874][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.462000][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.463206][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.463919][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.464469][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.464512][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.466033][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.466452][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.466902][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.467243][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.467925][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.468350][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.468535][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.470391][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.471386][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.474233][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.477639][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.487495][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.487689][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.503437][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.504218][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.579695][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.588628][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.596281][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.611761][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.625921][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.145757][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.145859][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.146624][ T5607] bridge_slave_0: entered allmulticast mode [ 70.148368][ T5607] bridge_slave_0: entered promiscuous mode [ 70.229373][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.229476][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.229598][ T5607] bridge_slave_1: entered allmulticast mode [ 70.233612][ T5607] bridge_slave_1: entered promiscuous mode [ 70.321122][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.366218][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.366423][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.366549][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.366814][ T5608] bridge_slave_0: entered allmulticast mode [ 70.368370][ T5608] bridge_slave_0: entered promiscuous mode [ 70.402738][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.402838][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.402998][ T5606] bridge_slave_0: entered allmulticast mode [ 70.405168][ T5606] bridge_slave_0: entered promiscuous mode [ 70.441622][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.441735][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.441848][ T5608] bridge_slave_1: entered allmulticast mode [ 70.443252][ T5608] bridge_slave_1: entered promiscuous mode [ 70.449199][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.449304][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.449402][ T5606] bridge_slave_1: entered allmulticast mode [ 70.451155][ T5606] bridge_slave_1: entered promiscuous mode [ 70.482536][ T5607] team0: Port device team_slave_0 added [ 70.486358][ T5607] team0: Port device team_slave_1 added [ 70.556650][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.561015][ T5621] Bluetooth: hci0: command tx timeout [ 70.561568][ T5621] Bluetooth: hci2: command tx timeout [ 70.561682][ T5621] Bluetooth: hci1: command tx timeout [ 70.561784][ T5621] Bluetooth: hci3: command tx timeout [ 70.605519][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.605535][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.605556][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.607125][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.607279][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.607393][ T5616] bridge_slave_0: entered allmulticast mode [ 70.609235][ T5616] bridge_slave_0: entered promiscuous mode [ 70.614152][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.614244][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.614927][ T5616] bridge_slave_1: entered allmulticast mode [ 70.616842][ T5616] bridge_slave_1: entered promiscuous mode [ 70.621500][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.637460][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.637702][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.637802][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.637924][ T5609] bridge_slave_0: entered allmulticast mode [ 70.641050][ T5609] bridge_slave_0: entered promiscuous mode [ 70.686374][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.687278][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.687289][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.687311][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.701965][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.702074][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.702428][ T5609] bridge_slave_1: entered allmulticast mode [ 70.704166][ T5609] bridge_slave_1: entered promiscuous mode [ 70.709652][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.713502][ T5608] team0: Port device team_slave_0 added [ 70.725353][ T5611] Bluetooth: hci4: command tx timeout [ 70.753922][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.768682][ T5608] team0: Port device team_slave_1 added [ 70.867251][ T5606] team0: Port device team_slave_0 added [ 70.905648][ T5606] team0: Port device team_slave_1 added [ 70.907997][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.910730][ T5616] team0: Port device team_slave_0 added [ 70.913724][ T5616] team0: Port device team_slave_1 added [ 70.949187][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.962353][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.962368][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.962389][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.969517][ T5607] hsr_slave_0: entered promiscuous mode [ 70.970724][ T5607] hsr_slave_1: entered promiscuous mode [ 71.011932][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.011949][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.011971][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.036293][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.036310][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.036332][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.052794][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.052810][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.052831][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.055908][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.055921][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.055944][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.129660][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.129687][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.129710][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.134183][ T5609] team0: Port device team_slave_0 added [ 71.150914][ T5608] hsr_slave_0: entered promiscuous mode [ 71.151959][ T5608] hsr_slave_1: entered promiscuous mode [ 71.152654][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 71.152752][ T5608] Cannot create hsr debugfs directory [ 71.178557][ T5609] team0: Port device team_slave_1 added [ 71.293943][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.293959][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.293980][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.346264][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.346280][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.346306][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.360354][ T5616] hsr_slave_0: entered promiscuous mode [ 71.361226][ T5616] hsr_slave_1: entered promiscuous mode [ 71.361838][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 71.361855][ T5616] Cannot create hsr debugfs directory [ 71.382273][ T5606] hsr_slave_0: entered promiscuous mode [ 71.383141][ T5606] hsr_slave_1: entered promiscuous mode [ 71.383943][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 71.383961][ T5606] Cannot create hsr debugfs directory [ 71.524254][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.524324][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.572967][ T5609] hsr_slave_0: entered promiscuous mode [ 71.573626][ T5609] hsr_slave_1: entered promiscuous mode [ 71.574003][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 71.574020][ T5609] Cannot create hsr debugfs directory [ 71.840442][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.845132][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.846146][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.866254][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.887260][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.892439][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.893256][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.902040][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.998858][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.011392][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.015218][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.027901][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.030551][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.038609][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.042546][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.049232][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.154916][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.158661][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.181363][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.184208][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.184835][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.187430][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.188922][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.193445][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.229512][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.317884][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.323157][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.324012][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.337904][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.344362][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.354188][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.364129][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.373269][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.382301][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.415862][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.415955][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.457113][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.457173][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.505218][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.508552][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.524785][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.527523][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.534743][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.535538][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.542490][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.559690][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.576788][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.626606][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.640335][ T5611] Bluetooth: hci3: command tx timeout [ 72.640371][ T5611] Bluetooth: hci1: command tx timeout [ 72.640393][ T5611] Bluetooth: hci2: command tx timeout [ 72.640414][ T5611] Bluetooth: hci0: command tx timeout [ 72.682175][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.682279][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.719207][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.719319][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.742301][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.801222][ T4928] Bluetooth: hci4: command tx timeout [ 72.838746][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.892663][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.892769][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.913587][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.939146][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.939254][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.018250][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.046805][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.086455][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.086582][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.153258][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153704][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.207817][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.227230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.227330][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.271327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.271449][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.581038][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.978327][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.183177][ T5608] veth0_vlan: entered promiscuous mode [ 74.227420][ T5608] veth1_vlan: entered promiscuous mode [ 74.342830][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.358026][ T5607] veth0_vlan: entered promiscuous mode [ 74.396880][ T5607] veth1_vlan: entered promiscuous mode [ 74.407409][ T5608] veth0_macvtap: entered promiscuous mode [ 74.434826][ T5608] veth1_macvtap: entered promiscuous mode [ 74.514288][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.542636][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.548513][ T5607] veth0_macvtap: entered promiscuous mode [ 74.575171][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.578996][ T5606] veth0_vlan: entered promiscuous mode [ 74.583980][ T5607] veth1_macvtap: entered promiscuous mode [ 74.591010][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591157][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591190][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.591222][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628453][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.657002][ T5606] veth1_vlan: entered promiscuous mode [ 74.675937][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.712635][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.720587][ T4928] Bluetooth: hci2: command tx timeout [ 74.720617][ T4928] Bluetooth: hci3: command tx timeout [ 74.720637][ T4928] Bluetooth: hci0: command tx timeout [ 74.720656][ T4928] Bluetooth: hci1: command tx timeout [ 74.808297][ T5609] veth0_vlan: entered promiscuous mode [ 74.815453][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.816833][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.875654][ T5606] veth0_macvtap: entered promiscuous mode [ 74.880670][ T5611] Bluetooth: hci4: command tx timeout [ 74.885663][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.885685][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.902318][ T5609] veth1_vlan: entered promiscuous mode [ 74.936854][ T5616] veth0_vlan: entered promiscuous mode [ 74.938407][ T5606] veth1_macvtap: entered promiscuous mode [ 74.972314][ T4105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.998393][ T5616] veth1_vlan: entered promiscuous mode [ 75.017691][ T4105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.017712][ T4105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.025094][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025113][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.042952][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.069765][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.143539][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.168318][ T5609] veth0_macvtap: entered promiscuous mode [ 75.182996][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.183015][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.196314][ T5609] veth1_macvtap: entered promiscuous mode [ 75.217878][ T4105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.218718][ T4105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271458][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271521][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.271937][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.331369][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.363061][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.378558][ T5616] veth0_macvtap: entered promiscuous mode [ 75.446925][ T5616] veth1_macvtap: entered promiscuous mode [ 75.489483][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489503][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.534307][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.557692][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.560772][ T254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.561641][ T254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.561677][ T254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.735698][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.767070][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.767094][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.802277][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.802297][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.892710][ T4105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.892732][ T4105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.902450][ T4105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910394][ T254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910710][ T254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.910848][ T254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.196699][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.196721][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.308952][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.308973][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.500215][ T5816] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.654533][ T5824] loop4: detected capacity change from 0 to 512 [ 76.666912][ T5824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 76.666930][ T5824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.726823][ T5824] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.6: corrupted in-inode xattr: invalid ea_ino [ 76.726987][ T5824] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.730009][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.730027][ C0] EXT4-fs (loop4): initial error at time 1791543855: ext4_iget_extra_inode:5210: inode 15 [ 76.730069][ C0] EXT4-fs (loop4): last error at time 1791543855: ext4_iget_extra_inode:5210: inode 15 [ 76.732602][ T5824] EXT4-fs (loop4): Remounting filesystem read-only [ 76.742468][ T5824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.800461][ T5611] Bluetooth: hci1: command tx timeout [ 76.800495][ T5611] Bluetooth: hci0: command tx timeout [ 76.800515][ T5611] Bluetooth: hci3: command tx timeout [ 76.800534][ T5611] Bluetooth: hci2: command tx timeout [ 76.985072][ T4928] Bluetooth: hci4: command tx timeout [ 77.017854][ T5829] loop3: detected capacity change from 0 to 512 [ 77.027985][ T5829] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 77.028018][ T5829] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.028264][ T5829] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 77.028420][ T5829] loop3: lost filesystem error report for type 5 error -117 [ 77.037241][ T5829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.915974][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.934464][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.230343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.124746][ T5861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.380004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.899021][ T5865] loop0: detected capacity change from 0 to 512 [ 82.944680][ T5865] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 82.966282][ T5865] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 82.966309][ T5865] loop0: lost filesystem error report for type 5 error -12 [ 82.976424][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 82.976446][ C1] EXT4-fs (loop0): initial error at time 1791543861: ext4_process_orphan:346 [ 82.976469][ C1] EXT4-fs (loop0): last error at time 1791543861: ext4_process_orphan:346 [ 83.015026][ T5865] EXT4-fs (loop0): 1 truncate cleaned up [ 83.017036][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.927423][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.206768][ T5883] Bluetooth: MGMT ver 1.23 [ 84.953994][ T5892] netlink: 'syz.4.22': attribute type 4 has an invalid length. [ 84.998519][ T5893] tipc: Started in network mode [ 84.998558][ T5893] tipc: Node identity a20991865e2c, cluster identity 4711 [ 84.998894][ T5893] tipc: Enabled bearer , priority 0 [ 85.022192][ T5893] syzkaller0: entered promiscuous mode [ 85.022214][ T5893] syzkaller0: entered allmulticast mode [ 85.181571][ T5893] tipc: Resetting bearer [ 85.204632][ T5891] tipc: Resetting bearer [ 85.232395][ T5891] tipc: Disabling bearer [ 87.020418][ T5909] use of bytesused == 0 is deprecated and will be removed in the future, [ 87.020453][ T5909] use the actual size instead. [ 87.718973][ T1187] cfg80211: failed to load regulatory.db [ 87.904420][ T5906] loop1: detected capacity change from 0 to 128 [ 87.982501][ T5906] omfs: sysblock size (-58445445) is out of range [ 88.072189][ T5906] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.127505][ T5914] loop0: detected capacity change from 0 to 512 [ 89.258152][ T5914] EXT4-fs (loop0): 1 orphan inode deleted [ 89.337743][ T1116] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.337865][ T1116] EXT4-fs error (device loop0): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 1 [ 89.337886][ T1116] loop0: lost filesystem error report for type 5 error -117 [ 89.344983][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.376288][ T5914] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.512751][ T5928] netlink: 'syz.1.31': attribute type 12 has an invalid length. [ 90.627637][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.682929][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.453313][ T46] usb 3-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 91.462931][ T46] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 91.462967][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.463000][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.494034][ T46] usb 3-1: config 0 descriptor?? [ 91.500414][ T5920] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.915391][ T5741] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.939159][ T5948] loop0: detected capacity change from 0 to 512 [ 91.944242][ T5948] EXT4-fs: Ignoring removed i_version option [ 92.040809][ T5948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.133019][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.133433][ T5948] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.499206][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 92.499274][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.552161][ T46] usb 3-1: USB disconnect, device number 2 [ 92.586351][ T5953] tipc: Started in network mode [ 92.586370][ T5953] tipc: Node identity 7f000001, cluster identity 4711 [ 92.586399][ T5953] tipc: Enabling of bearer rejected, failed to enable media [ 92.635836][ T5741] usb 4-1: Using ep0 maxpacket: 32 [ 92.637893][ T5741] usb 4-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 92.644056][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 92.644089][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.644109][ T5741] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 92.644131][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 92.644153][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 92.764884][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.764910][ T5741] usb 4-1: Product: syz [ 92.764925][ T5741] usb 4-1: Manufacturer: syz [ 92.764939][ T5741] usb 4-1: SerialNumber: syz [ 92.765688][ T5953] tipc: Enabling of bearer rejected, failed to enable media [ 92.783456][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.822895][ T5741] usb 4-1: config 0 descriptor?? [ 92.859499][ T5741] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 93.229036][ T5957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.362397][ T5960] tmpfs: Bad value for 'mpol' [ 93.363067][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 93.410483][ T5938] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 93.456325][ T46] usb 4-1: USB disconnect, device number 2 [ 93.926853][ T5960] syz.1.42 (5960) used greatest stack depth: 18088 bytes left [ 94.796596][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 95.590177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.690676][ T5995] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 96.718974][ T5994] loop0: detected capacity change from 0 to 164 [ 96.736419][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 96.838600][ T5995] bridge1: entered promiscuous mode [ 96.925324][ T5996] loop1: detected capacity change from 0 to 4096 [ 97.139769][ T5998] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.598843][ T6000] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 98.354779][ T6008] usb usb5: usbfs: interface 0 claimed by hub while 'syz.4.56' sets config #1 [ 100.710281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.520666][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 101.616085][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562b6000: rx timeout, send abort [ 102.111219][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562b7800: rx timeout, send abort [ 102.116876][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562b6000: abort rx timeout. Force session deactivation [ 102.511205][ T6035] loop3: detected capacity change from 0 to 128 [ 102.542469][ T6035] ======================================================= [ 102.542469][ T6035] WARNING: The mand mount option has been deprecated and [ 102.542469][ T6035] and is ignored by this kernel. Remove the mand [ 102.542469][ T6035] option from the mount to silence this warning. [ 102.542469][ T6035] ======================================================= [ 102.611265][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880562b7800: abort rx timeout. Force session deactivation [ 102.614753][ T6035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.642054][ T6035] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.460075][ T5616] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.245707][ T32] audit: type=1800 audit(1791543882.161:2): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.67" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 106.650068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.926585][ T6065] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.091289][ T6070] loop1: detected capacity change from 0 to 256 [ 107.101928][ T6070] exfat: Deprecated parameter 'utf8' [ 107.260355][ T6070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d) [ 110.861042][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 116.317729][ T6122] loop4: detected capacity change from 0 to 512 [ 116.320938][ T6122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.320997][ T6122] ext4: Unknown parameter 'fsname' [ 116.540078][ T6125] loop0: detected capacity change from 0 to 4096 [ 116.570389][ T6127] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.624505][ T6137] trusted_key: encrypted_key: insufficient parameters specified [ 118.576574][ T6142] jffs2: notice: (6142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 120.306986][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 120.649356][ T6155] FAULT_INJECTION: forcing a failure. [ 120.649356][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 120.649449][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.2.92 Not tainted syzkaller #0 PREEMPT(full) [ 120.649477][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.649496][ T6155] Call Trace: [ 120.649504][ T6155] [ 120.649517][ T6155] dump_stack_lvl+0xe8/0x150 [ 120.649552][ T6155] should_fail_ex+0x3eb/0x540 [ 120.649577][ T6155] ? alloc_pwq+0xb7b/0x12f0 [ 120.649595][ T6155] should_failslab+0xa8/0x100 [ 120.649617][ T6155] ? alloc_pwq+0xb7b/0x12f0 [ 120.649632][ T6155] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 120.649652][ T6155] ? alloc_pwq+0xb7b/0x12f0 [ 120.649676][ T6155] alloc_pwq+0xb7b/0x12f0 [ 120.649706][ T6155] apply_wqattrs_prepare+0x3ff/0xe70 [ 120.649753][ T6155] __alloc_workqueue+0x11b8/0x21d0 [ 120.649795][ T6155] alloc_workqueue_noprof+0xe3/0x210 [ 120.649815][ T6155] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 120.649838][ T6155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.649864][ T6155] nci_register_device+0x22c/0xa00 [ 120.649883][ T6155] ? preempt_schedule_common+0x7f/0xd0 [ 120.649908][ T6155] ? __pfx_nci_register_device+0x10/0x10 [ 120.649925][ T6155] ? __raw_spin_lock_init+0x45/0x100 [ 120.649947][ T6155] ? __raw_spin_lock_init+0x45/0x100 [ 120.649969][ T6155] ? __init_waitqueue_head+0xa8/0x150 [ 120.650007][ T6155] virtual_ncidev_open+0x129/0x1a0 [ 120.650029][ T6155] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 120.650047][ T6155] misc_open+0x2d5/0x350 [ 120.650070][ T6155] chrdev_open+0x4d9/0x600 [ 120.650092][ T6155] ? __pfx_chrdev_open+0x10/0x10 [ 120.650116][ T6155] ? __sanitizer_cov_trace_pc+0x8/0x80 [ 120.650138][ T6155] ? __pfx_chrdev_open+0x10/0x10 [ 120.650156][ T6155] do_dentry_open+0x80e/0x1360 [ 120.650187][ T6155] vfs_open_consume+0x4a/0x350 [ 120.650204][ T6155] ? path_openat+0x148a/0x1da0 [ 120.650225][ T6155] path_openat+0x14a6/0x1da0 [ 120.650275][ T6155] do_file_open+0x23e/0x4a0 [ 120.650293][ T6155] ? __pfx___schedule+0x10/0x10 [ 120.650316][ T6155] ? __pfx_do_file_open+0x10/0x10 [ 120.650358][ T6155] ? _raw_spin_unlock+0x41/0x50 [ 120.650375][ T6155] ? alloc_fd+0x6af/0x760 [ 120.650406][ T6155] do_sys_openat2+0x115/0x200 [ 120.650428][ T6155] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.650462][ T6155] __x64_sys_openat+0x138/0x170 [ 120.650486][ T6155] do_syscall_64+0x166/0x520 [ 120.650504][ T6155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.650523][ T6155] ? clear_bhb_loop+0x70/0xc0 [ 120.650544][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.650563][ T6155] RIP: 0033:0x7f3f4919e1d9 [ 120.650587][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.650603][ T6155] RSP: 002b:00007f3f49fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.650624][ T6155] RAX: ffffffffffffffda RBX: 00007f3f49426180 RCX: 00007f3f4919e1d9 [ 120.650639][ T6155] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 120.650652][ T6155] RBP: 00007f3f49235888 R08: 0000000000000000 R09: 0000000000000000 [ 120.650664][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.650676][ T6155] R13: 00007f3f49426218 R14: 00007f3f49426180 R15: 00007ffcf8c1dfe8 [ 120.650709][ T6155] [ 125.270035][ T5606] svc: failed to register nfsdv3 RPC service (errno 5). [ 125.270359][ T5606] failed to unregister udp with rpcbind [ 126.719860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.933812][ T6190] Failed to get privilege flags for destination (handle=0x2:0x0) [ 128.086705][ T6200] syzkaller0: entered promiscuous mode [ 128.086869][ T6200] syzkaller0: entered allmulticast mode [ 128.101052][ T6200] tipc: Started in network mode [ 128.101079][ T6200] tipc: Node identity 12c46564197d, cluster identity 4711 [ 128.107957][ T6200] tipc: Enabled bearer , priority 0 [ 128.118464][ T6200] tipc: Resetting bearer [ 128.764079][ T6199] tipc: Resetting bearer [ 129.169634][ T6199] tipc: Disabling bearer [ 130.921429][ T6220] FAULT_INJECTION: forcing a failure. [ 130.921429][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 130.921480][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 130.921504][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.921516][ T6220] Call Trace: [ 130.921523][ T6220] [ 130.921532][ T6220] dump_stack_lvl+0xe8/0x150 [ 130.921559][ T6220] should_fail_ex+0x3eb/0x540 [ 130.921585][ T6220] should_failslab+0xa8/0x100 [ 130.921607][ T6220] __kmalloc_noprof+0xf9/0x710 [ 130.921628][ T6220] ? apply_wqattrs_prepare+0xef/0xe70 [ 130.921646][ T6220] ? apply_wqattrs_prepare+0xef/0xe70 [ 130.921672][ T6220] apply_wqattrs_prepare+0xef/0xe70 [ 130.921705][ T6220] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 130.921726][ T6220] ? __alloc_workqueue+0x117e/0x21d0 [ 130.921752][ T6220] __alloc_workqueue+0x11b8/0x21d0 [ 130.921792][ T6220] alloc_workqueue_noprof+0xe3/0x210 [ 130.921818][ T6220] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 130.921844][ T6220] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.921869][ T6220] nci_register_device+0x22c/0xa00 [ 130.921888][ T6220] ? preempt_schedule_common+0x7f/0xd0 [ 130.921912][ T6220] ? __pfx_nci_register_device+0x10/0x10 [ 130.921929][ T6220] ? __raw_spin_lock_init+0x45/0x100 [ 130.921951][ T6220] ? __raw_spin_lock_init+0x45/0x100 [ 130.921971][ T6220] ? __init_waitqueue_head+0xa8/0x150 [ 130.921994][ T6220] virtual_ncidev_open+0x129/0x1a0 [ 130.922015][ T6220] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 130.922032][ T6220] misc_open+0x2d5/0x350 [ 130.922055][ T6220] chrdev_open+0x4d9/0x600 [ 130.922085][ T6220] ? __pfx_chrdev_open+0x10/0x10 [ 130.922106][ T6220] ? devcgroup_check_permission+0x31/0x8f0 [ 130.922131][ T6220] ? __pfx_chrdev_open+0x10/0x10 [ 130.922149][ T6220] do_dentry_open+0x80e/0x1360 [ 130.922180][ T6220] vfs_open_consume+0x4a/0x350 [ 130.922196][ T6220] ? path_openat+0x148a/0x1da0 [ 130.922217][ T6220] path_openat+0x14a6/0x1da0 [ 130.922256][ T6220] do_file_open+0x23e/0x4a0 [ 130.922280][ T6220] ? __pfx_do_file_open+0x10/0x10 [ 130.922321][ T6220] ? _raw_spin_unlock+0x28/0x50 [ 130.922338][ T6220] ? alloc_fd+0x6af/0x760 [ 130.922368][ T6220] do_sys_openat2+0x115/0x200 [ 130.922389][ T6220] ? __se_sys_futex+0x3a8/0x450 [ 130.922408][ T6220] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.922433][ T6220] ? rcu_is_watching+0x16/0xb0 [ 130.922456][ T6220] __x64_sys_openat+0x138/0x170 [ 130.922480][ T6220] do_syscall_64+0x166/0x520 [ 130.922498][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.922518][ T6220] ? clear_bhb_loop+0x70/0xc0 [ 130.922539][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.922557][ T6220] RIP: 0033:0x7fde6759e1d9 [ 130.922576][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.922592][ T6220] RSP: 002b:00007fde6843b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.922613][ T6220] RAX: ffffffffffffffda RBX: 00007fde67826180 RCX: 00007fde6759e1d9 [ 130.922627][ T6220] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 130.922640][ T6220] RBP: 00007fde67635888 R08: 0000000000000000 R09: 0000000000000000 [ 130.922653][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.922664][ T6220] R13: 00007fde67826218 R14: 00007fde67826180 R15: 00007ffe2b8a30c8 [ 130.922695][ T6220] [ 133.152514][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152569][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.558771][ T6242] loop4: detected capacity change from 0 to 8192 [ 136.423163][ T6262] loop1: detected capacity change from 0 to 512 [ 136.767867][ T6262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.894342][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.187821][ T6278] loop4: detected capacity change from 0 to 256 [ 138.982642][ T6278] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 138.988075][ T6278] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 139.009972][ T32] audit: type=1800 audit(1791543917.451:3): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.120" name="file1" dev="loop4" ino=23 res=0 errno=-22 [ 140.177880][ T6291] syz.0.121(6291): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 141.260564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.463078][ T6326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.125'. [ 146.463100][ T6326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 146.463110][ T6326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.125'. [ 147.435460][ T6337] o2cb: This node has not been configured. [ 147.435497][ T6337] o2cb: Cluster check failed. Fix errors before retrying. [ 147.435619][ T6337] (syz.1.135,6337,0):user_dlm_register:674 ERROR: status = -22 [ 147.435662][ T6337] (syz.1.135,6337,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 148.940688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 149.480282][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.487707][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.488268][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.489270][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.520578][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.611223][ T5795] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 151.612204][ T5611] Bluetooth: hci5: command tx timeout [ 152.298721][ T5795] usb 5-1: New USB device found: idVendor=1532, idProduct=010d, bcdDevice=0.00 [ 152.311981][ T5795] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 152.312014][ T5795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.312046][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.367094][ T5795] usb 5-1: config 0 descriptor?? [ 152.376011][ T6369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.591896][ T6378] loop2: detected capacity change from 0 to 512 [ 153.321333][ T5795] usbhid 5-1:0.0: can't add hid device: -71 [ 153.321398][ T5795] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.351703][ T5795] usb 5-1: USB disconnect, device number 2 [ 153.496182][ T1116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.046379][ T6386] capability: warning: `syz.1.139' uses 32-bit capabilities (legacy support in use) [ 154.880460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 155.211045][ T5611] Bluetooth: hci5: command tx timeout [ 155.423905][ T4105] IPVS: starting estimator thread 0... [ 155.511590][ T6391] IPVS: using max 37 ests per chain, 88800 per kthread [ 155.640675][ T6398] jffs2: notice: (6398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 156.266504][ T1116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.237198][ T1116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.280420][ T4928] Bluetooth: hci5: command tx timeout [ 157.337635][ T6412] netlink: 'syz.2.151': attribute type 21 has an invalid length. [ 157.337658][ T6412] netlink: 128 bytes leftover after parsing attributes in process `syz.2.151'. [ 158.308510][ T6412] netlink: 'syz.2.151': attribute type 4 has an invalid length. [ 158.308534][ T6412] netlink: 'syz.2.151': attribute type 5 has an invalid length. [ 158.308545][ T6412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.151'. [ 158.632732][ T1116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.659172][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.659279][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.659436][ T6343] bridge_slave_0: entered allmulticast mode [ 158.684166][ T6343] bridge_slave_0: entered promiscuous mode [ 158.693120][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.693340][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.693480][ T6343] bridge_slave_1: entered allmulticast mode [ 158.721119][ T6343] bridge_slave_1: entered promiscuous mode [ 159.005029][ T6422] ceph: No mds server is up or the cluster is laggy [ 159.185368][ T46] libceph: connect (1)[c::]:6789 error -101 [ 159.879923][ T4928] Bluetooth: hci5: command tx timeout [ 161.002593][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 161.110962][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.158971][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.366528][ T6343] team0: Port device team_slave_0 added [ 161.408435][ T6343] team0: Port device team_slave_1 added [ 163.114114][ T32] audit: type=1400 audit(1791543940.401:4): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6434 comm="syz.0.157" name="unknown" offset=16 [ 163.161314][ T1187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.192946][ T6439] Zero length message leads to an empty skb [ 163.319892][ T1187] usb 3-1: Using ep0 maxpacket: 8 [ 163.320709][ T1187] usb 3-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 163.321721][ T1187] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 163.321744][ T1187] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.321761][ T1187] usb 3-1: config 0 has no interface number 0 [ 163.323845][ T1187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.323867][ T1187] usb 3-1: Product: syz [ 163.323878][ T1187] usb 3-1: Manufacturer: syz [ 163.323891][ T1187] usb 3-1: SerialNumber: syz [ 163.401098][ T1187] usb 3-1: config 0 descriptor?? [ 163.417695][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.417711][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.417733][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.418169][ T1187] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 163.475167][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.475183][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.475208][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.661095][ T1187] usb 3-1: USB disconnect, device number 3 [ 163.768889][ T1116] bridge_slave_1: left allmulticast mode [ 163.768922][ T1116] bridge_slave_1: left promiscuous mode [ 163.786277][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.001345][ T1116] bridge_slave_0: left allmulticast mode [ 164.001370][ T1116] bridge_slave_0: left promiscuous mode [ 164.001555][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.719071][ T6463] loop4: detected capacity change from 0 to 4096 [ 164.747562][ T6464] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.020451][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.648389][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.655410][ T1116] bond0 (unregistering): Released all slaves [ 165.722769][ T6343] hsr_slave_0: entered promiscuous mode [ 165.725409][ T6343] hsr_slave_1: entered promiscuous mode [ 165.726202][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 165.726220][ T6343] Cannot create hsr debugfs directory [ 165.756779][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.899021][ T1116] tipc: Left network mode [ 165.978561][ T6475] syzkaller0: entered promiscuous mode [ 165.978583][ T6475] syzkaller0: entered allmulticast mode [ 167.638050][ T6492] loop1: detected capacity change from 0 to 512 [ 169.630506][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 169.807840][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 169.809031][ T5709] usb 1-1: New USB device found: idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 169.859380][ T5709] usb 1-1: config 9 has an invalid interface number: 27 but max is 0 [ 169.859994][ T5709] usb 1-1: config 9 has no interface number 0 [ 169.860025][ T5709] usb 1-1: config 9 interface 27 has no altsetting 0 [ 169.868654][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.868737][ T5709] usb 1-1: Product: syz [ 169.868779][ T5709] usb 1-1: Manufacturer: syz [ 169.868849][ T5709] usb 1-1: SerialNumber: syz [ 170.337559][ T5709] qmi_wwan 1-1:9.27: bogus CDC Union: master=0, slave=1 [ 170.345787][ T5709] qmi_wwan 1-1:9.27: probe with driver qmi_wwan failed with error -22 [ 170.403985][ T5709] usb 1-1: USB disconnect, device number 2 [ 170.560702][ T1116] hsr_slave_0: left promiscuous mode [ 170.562124][ T1116] hsr_slave_1: left promiscuous mode [ 170.563099][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.563135][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.565937][ T1116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.565954][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.615832][ T1116] veth1_macvtap: left promiscuous mode [ 170.615868][ T1116] veth0_macvtap: left promiscuous mode [ 170.615934][ T1116] veth1_vlan: left promiscuous mode [ 170.616027][ T1116] veth0_vlan: left promiscuous mode [ 171.711623][ T6518] loop4: detected capacity change from 0 to 512 [ 171.740583][ T6518] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 174.215414][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 174.292114][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 174.358361][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 174.662507][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 174.684451][ T6523] batman_adv: batadv0: Adding interface: veth0 [ 174.684463][ T6523] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.684481][ T6523] batman_adv: batadv0: Interface activated: veth0 [ 174.751629][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.751656][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.768933][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.768957][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.799269][ T6524] batman_adv: batadv0: Interface deactivated: veth0 [ 174.799291][ T6524] batman_adv: batadv0: Removing interface: veth0 [ 174.916242][ T6550] trusted_key: encrypted_key: insufficient parameters specified [ 178.500702][ T6343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.539278][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.543029][ T6343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.572227][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.586118][ T6343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.733750][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.737019][ T6343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.287964][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.248435][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.330824][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.363078][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.364363][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.411786][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.411907][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.148173][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 186.922196][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.036099][ T6625] loop1: detected capacity change from 0 to 512 [ 187.058182][ T6625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.153235][ T6632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.245352][ T6625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.245483][ T6625] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.696694][ T6638] loop0: detected capacity change from 0 to 512 [ 189.093106][ T6638] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.131385][ T5606] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.803594][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.076076][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 194.076178][ T5620] Bluetooth: hci0: command 0x0406 tx timeout [ 194.076216][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 194.076270][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 194.107003][ T4139] IPVS: starting estimator thread 0... [ 194.244957][ T6674] IPVS: using max 37 ests per chain, 88800 per kthread [ 194.420663][ T6679] ------------[ cut here ]------------ [ 194.420679][ T6679] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 194.420702][ T6679] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.2.188/6679 [ 194.428602][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428654][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.458155][ T6679] Modules linked in: [ 194.462392][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 194.471714][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.481897][ T6679] RIP: 0010:__fortify_report+0x89/0xa0 [ 194.484352][ T6677] loop0: detected capacity change from 0 to 512 [ 194.485283][ T6677] EXT4-fs: Ignoring removed orlov option [ 194.485352][ T6677] EXT4-fs: Ignoring removed oldalloc option [ 194.505296][ T6679] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 194.525319][ T6679] RSP: 0018:ffffc90004f47dc8 EFLAGS: 00010246 [ 194.531822][ T6679] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 194.539968][ T6679] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 194.548067][ T6679] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100ef25ab1 [ 194.556147][ T6679] R10: dffffc0000000000 R11: ffffed100ef25ab2 R12: 0000000000000000 [ 194.564190][ T6679] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 194.572361][ T6679] FS: 00007f3f49fe96c0(0000) GS:ffff888123bb6000(0000) knlGS:0000000000000000 [ 194.581402][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.588008][ T6679] CR2: 000000110c2563a6 CR3: 0000000077660000 CR4: 00000000003526f0 [ 194.596055][ T6679] Call Trace: [ 194.599354][ T6679] [ 194.602408][ T6679] __fortify_panic+0x9/0x10 [ 194.606977][ T6679] landlock_merge_ruleset+0xc46/0xc90 [ 194.612777][ T6679] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 194.618979][ T6679] do_syscall_64+0x166/0x520 [ 194.623834][ T6679] ? trace_irq_disable+0x3b/0x140 [ 194.628885][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.635098][ T6679] ? clear_bhb_loop+0x70/0xc0 [ 194.639874][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.645785][ T6679] RIP: 0033:0x7f3f4919e1d9 [ 194.650282][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.670020][ T6679] RSP: 002b:00007f3f49fe9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 194.679041][ T6679] RAX: ffffffffffffffda RBX: 00007f3f49425fa0 RCX: 00007f3f4919e1d9 [ 194.687121][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.695161][ T6679] RBP: 00007f3f49235888 R08: 0000000000000000 R09: 0000000000000000 [ 194.703236][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.711264][ T6679] R13: 00007f3f49426038 R14: 00007f3f49425fa0 R15: 00007ffcf8c1dfe8 [ 194.719563][ T6679] [ 194.722734][ T6679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.730008][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.2.188 Not tainted syzkaller #0 PREEMPT(full) [ 194.739190][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.749239][ T6679] Call Trace: [ 194.752536][ T6679] [ 194.755454][ T6679] vpanic+0x26f/0x710 [ 194.759420][ T6679] panic+0xc5/0xd0 [ 194.763128][ T6679] ? __pfx_panic+0x10/0x10 [ 194.767532][ T6679] __warn+0x315/0x4c0 [ 194.771497][ T6679] ? __fortify_report+0x6b/0xa0 [ 194.776337][ T6679] ? __fortify_report+0x6b/0xa0 [ 194.781167][ T6679] __report_bug+0x276/0x570 [ 194.785657][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.791725][ T6679] ? __fortify_report+0x6b/0xa0 [ 194.796560][ T6679] ? __pfx___report_bug+0x10/0x10 [ 194.801581][ T6679] report_bug_entry+0x19b/0x290 [ 194.806415][ T6679] ? __fortify_report+0x89/0xa0 [ 194.811245][ T6679] ? __fortify_report+0x8e/0xa0 [ 194.816081][ T6679] handle_bug+0xce/0x200 [ 194.820311][ T6679] exc_invalid_op+0x1a/0x50 [ 194.824802][ T6679] asm_exc_invalid_op+0x1a/0x20 [ 194.829631][ T6679] RIP: 0010:__fortify_report+0x89/0xa0 [ 194.835092][ T6679] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 194.854704][ T6679] RSP: 0018:ffffc90004f47dc8 EFLAGS: 00010246 [ 194.860761][ T6679] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 194.868732][ T6679] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 194.876686][ T6679] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100ef25ab1 [ 194.884647][ T6679] R10: dffffc0000000000 R11: ffffed100ef25ab2 R12: 0000000000000000 [ 194.892616][ T6679] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 194.900613][ T6679] ? __fortify_report+0x2c/0xa0 [ 194.905455][ T6679] __fortify_panic+0x9/0x10 [ 194.909939][ T6679] landlock_merge_ruleset+0xc46/0xc90 [ 194.915301][ T6679] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 194.921442][ T6679] do_syscall_64+0x166/0x520 [ 194.926016][ T6679] ? trace_irq_disable+0x3b/0x140 [ 194.931023][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.937074][ T6679] ? clear_bhb_loop+0x70/0xc0 [ 194.941740][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.947611][ T6679] RIP: 0033:0x7f3f4919e1d9 [ 194.952016][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.971603][ T6679] RSP: 002b:00007f3f49fe9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 194.980003][ T6679] RAX: ffffffffffffffda RBX: 00007f3f49425fa0 RCX: 00007f3f4919e1d9 [ 194.987969][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.995923][ T6679] RBP: 00007f3f49235888 R08: 0000000000000000 R09: 0000000000000000 [ 195.003888][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.011840][ T6679] R13: 00007f3f49426038 R14: 00007f3f49425fa0 R15: 00007ffcf8c1dfe8 [ 195.019812][ T6679] [ 195.023385][ T6679] Kernel Offset: disabled [ 195.027713][ T6679] Rebooting in 86400 seconds..