last executing test programs: 12.300556944s ago: executing program 2 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0xf7, @loopback, 0x7}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 10.581776436s ago: executing program 2 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 10.195726641s ago: executing program 2 (id=150): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.02294439s ago: executing program 2 (id=157): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={[{@name={'name', 0x3d, 'user.incfs.id\x00'}}]}) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) io_uring_setup(0x54a4, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) 8.680631295s ago: executing program 2 (id=163): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x9, 0x8, 0x0, 0x1, 0xca, 0x2, 0x3, 0x81, 0x1, 0x60, 0x40, 0x6, 0x7}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="d6", 0x1, 0x8000, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/186, 0xba}], 0x1) 8.20206161s ago: executing program 2 (id=167): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) 5.05396262s ago: executing program 1 (id=187): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x21a, &(0x7f0000000240)="$eJzsmDGLE0EUx/8zm+xeUngndiIoGDAW7t3uIQhicdUVIgiKYiMGbz1Oc54kKVSQi51W9xn8CGJhJyfY2gm2Kgg2go1gdSNvZjaZSya74TTVvV+x+3/z3rx5M7v7AgHDMIeWb19/f3n28vtRCfRraCCy4z+CgYR04juvLzdPfFxN3t3+cPHzm9VPo/lOAVBq+vUp9+5KgF7FDihntgAagBAArkOiARXls87akJsQiK2+A4kbVmcQuGX1fa1DrbcoPo7vbbSz+O5We41EleITUildlt36qKyfzwXWhuWpuuPvPnn6oNVuZ52BQC7CMdcEEXrzDEXR+en6ViQuASrQI3XlPq+4b+5L2Kaz1CSQSKxehsA1qy8gsmcjR/YPHK/Yg1fKrjNh/7/Kdjsq6tME0yPqdOlt8cVso7szefoxn0vNU8Kx4Dl3ZE8ZMDY9/zQmLjoHOLMqJQ/4fwmhiwqLCkNhnqBsXwPx9oXHpeZnt0H0jYjeY+CSpad6ZQb1RLk4kveaAybEvpfkAGLnz/RrLZhaZ/n67RfD/qFeCZxx+mfF6R+Lvc1HdD+3sdlaz9azh/U94zifLlIzXjLXgv5X0/1Z9+SaWaDqC6wCoQjxuNXrdRJzJXuXVKrt1NdxQ93/JJqnjS3smIv+7BYE/fShGVjbE8cwDMMwDMMwDMMwDMMwDPNvnISA8pH/LWms9Ko2/gYAAP//blRLeA==") mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x40, 0xe0c00) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, 0x0, 0x0) 4.670804472s ago: executing program 1 (id=191): socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="43800a6be0e3e76932bc3507cf2a30885267b179cb2a33ec7f658402cc60513481d801dc6532f3f3fcc1cf07ffe36589c2f43e11f80aed9a02f796c507d4df01d6aaa92d0bffc896bde08913260d0f0e57fee64335df374498f3c679aa298a656d4593e9c3e639b11429767551173bdaff5efd786127d2ca7e2726c957c406564caa02a20d19f640a9ee5fa8d1bd", @ANYRES64], 0x1, 0x2ab, &(0x7f0000000740)="$eJzs3U9rY1UUAPDz8q8ZXaSIG0XwgS5clalbN40ygtiVEkFdaHBmQJIwMIWAFUy76idw6ffwI7hx4zcQ3Aru2kXlycvL60vaxJYaU5j+fqsz995z73nvDukqJ1+/MRo8fpbE8env0W4nUduLvThLYjtqUTqKRgAAL46zLIu/sttkPqitvxoAYBOKv/+Fu64FANiMTz//4uPu/v6jT9K0Ha91Tsa9JCJGJ+NeMd99Gt/GMJ7Ew+jEeUR2oYib+aJGmtuOt0eTcS/PHH3162z/7p8R0/zd6MT21fwPP9p/tJsWLvJfKqtLo/u0Wf6jE68uz3/3cn6MJtFrxTtvzdW/E5347Zt4FsN4HHlulf/Dbpp+kP14+v2X+TF5flKL3tZ0XSWrb+ZGAAAAAAAAAAAAAAAAAAAAAAC4D3bSNCna90z79+RD0/454179fDq/k5bm+/tMyv5ASblR0R8oi1mLnkkWP5X9dR6maZrNFlb5jXi94YcFAAAAAAAAAAAAAAAAAAAAIHfw3eGgPxw+eb6WoOwGUH6t/7b77M2NvBmHg3599YZbNz+rcVQ9eF7rvy6ORiPW9FquCx7k9ax9563qcj+LIigvZq1nvfJ+senhoJ/OpsqXPOgn153VLi/u5/mpVvzXwrLpf4nzbPFO2xelLma11vQ2Wi8vnfo7y7Kb7fPeH8UdzUaSaYuNm53enAVLHzAP2lfv4pfVG678yKiv55MHAAAAAAAAAAAAAAAAAAC4rPrS75LJ4xVJxXjtfy0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADao+v3/MmhHxOLIYtCskleuqYJWPD+4y+cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfvgnAAD///PnTH8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) unshare(0x2000400) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', 0x0}) 3.895214418s ago: executing program 3 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x4c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xf8, 0xff, 0x0, 0x0, 0x1, 0x1000a}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'rose0\x00'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x87}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 3.371971218s ago: executing program 1 (id=199): socket(0x2, 0x3, 0xff) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000300)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.360387493s ago: executing program 0 (id=203): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='vcan0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.282141978s ago: executing program 1 (id=204): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) write$tun(r0, 0x0, 0x24) 2.153172803s ago: executing program 0 (id=205): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x119000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x48000, 0x41) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x4, 0xc, "faf98317e5a1149989fc8dbe2dc3bd3f8bbad0099cebdc25f5ab60c9e6881a7beda9b3adf4f7350b464c516bdd8a418000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad33000100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 1.977865913s ago: executing program 3 (id=206): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xffff6986, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.868658074s ago: executing program 0 (id=207): r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.868228991s ago: executing program 4 (id=208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0xc0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x60008844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.729503053s ago: executing program 3 (id=209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 1.625137483s ago: executing program 1 (id=210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 1.624933846s ago: executing program 4 (id=211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0xce5}}, 0xb, 0x1000, 0x1ffff, 0x0, 0x28, 0x1000, 0x4}, 0x9c) 1.406608701s ago: executing program 0 (id=212): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000023c0)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x4, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x40, 0x0}, {0x2, 0x0, 0xfffffffa, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x90000000, 0x0}, {0x0, 0x0, 0x54e8, 0x0}, {0x1, 0x10, 0x3, &(0x7f0000002000)="5f03"}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x3, 0x0, 0x2, 0x0}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.405679341s ago: executing program 3 (id=213): signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) io_submit(0x0, 0x1, &(0x7f0000000500)=[0x0]) 1.16265045s ago: executing program 4 (id=214): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) 891.281621ms ago: executing program 4 (id=215): socket$inet(0x2, 0x2, 0x0) close(0x3) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x82, 0xfffffffffffffffe, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) listen(r0, 0xd9) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close(0x3) 761.907145ms ago: executing program 0 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, 0x0, 0xfffffffffffffcb7}, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 552.135529ms ago: executing program 1 (id=217): socket(0x2, 0x3, 0xff) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007140)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 388.075596ms ago: executing program 4 (id=218): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003340)=@vmx={0x1, 0x0, 0x2080, {0x0, 0xdddf3000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 371.847045ms ago: executing program 3 (id=219): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xffff6986, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 134.304207ms ago: executing program 4 (id=220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 116.7452ms ago: executing program 3 (id=221): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = dup(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x4d4801, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 84.684069][ T5830] cgroup: Unknown subsys name 'net' [ 84.820667][ T5830] cgroup: Unknown subsys name 'cpuset' [ 84.829750][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.448300][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.945454][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.963780][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.975172][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.984239][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.993143][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.002516][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.005661][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.017516][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.023653][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.032594][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.040562][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.049035][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.056965][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.064665][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.064675][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.079614][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.083700][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.093793][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.102075][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.110333][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.112483][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.124972][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.134530][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.138116][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.173189][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.930602][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.944030][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.037874][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 90.162668][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 90.191705][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 90.383647][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.391346][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.399235][ T5850] bridge_slave_0: entered allmulticast mode [ 90.407531][ T5850] bridge_slave_0: entered promiscuous mode [ 90.418081][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.425534][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.433322][ T5847] bridge_slave_0: entered allmulticast mode [ 90.441728][ T5847] bridge_slave_0: entered promiscuous mode [ 90.486557][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.493898][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.502207][ T5850] bridge_slave_1: entered allmulticast mode [ 90.510330][ T5850] bridge_slave_1: entered promiscuous mode [ 90.518403][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.525668][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.533158][ T5847] bridge_slave_1: entered allmulticast mode [ 90.541170][ T5847] bridge_slave_1: entered promiscuous mode [ 90.557089][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.564420][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.572152][ T5849] bridge_slave_0: entered allmulticast mode [ 90.580060][ T5849] bridge_slave_0: entered promiscuous mode [ 90.588906][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.597267][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.605076][ T5849] bridge_slave_1: entered allmulticast mode [ 90.613153][ T5849] bridge_slave_1: entered promiscuous mode [ 90.750752][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.758286][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.765528][ T5848] bridge_slave_0: entered allmulticast mode [ 90.773599][ T5848] bridge_slave_0: entered promiscuous mode [ 90.788715][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.802973][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.831225][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.843767][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.851314][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.858769][ T5848] bridge_slave_1: entered allmulticast mode [ 90.867172][ T5848] bridge_slave_1: entered promiscuous mode [ 90.879587][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.893054][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.902556][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.909897][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.917283][ T5856] bridge_slave_0: entered allmulticast mode [ 90.925231][ T5856] bridge_slave_0: entered promiscuous mode [ 90.938017][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.001346][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.008899][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.016454][ T5856] bridge_slave_1: entered allmulticast mode [ 91.024318][ T5856] bridge_slave_1: entered promiscuous mode [ 91.118365][ T5849] team0: Port device team_slave_0 added [ 91.129287][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.142645][ T5850] team0: Port device team_slave_0 added [ 91.151839][ T5847] team0: Port device team_slave_0 added [ 91.163500][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.176323][ T5849] team0: Port device team_slave_1 added [ 91.177666][ T5854] Bluetooth: hci4: command tx timeout [ 91.188489][ T5860] Bluetooth: hci1: command tx timeout [ 91.188752][ T5164] Bluetooth: hci0: command tx timeout [ 91.197703][ T5852] Bluetooth: hci3: command tx timeout [ 91.210063][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.237158][ T5850] team0: Port device team_slave_1 added [ 91.246827][ T5847] team0: Port device team_slave_1 added [ 91.256360][ T5852] Bluetooth: hci2: command tx timeout [ 91.264084][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.359188][ T5848] team0: Port device team_slave_0 added [ 91.407847][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.414902][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.441402][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.457629][ T5848] team0: Port device team_slave_1 added [ 91.464991][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.472242][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.498369][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.511454][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.518477][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.545178][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.560149][ T5856] team0: Port device team_slave_0 added [ 91.570327][ T5856] team0: Port device team_slave_1 added [ 91.578218][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.585396][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.611610][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.637747][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.644728][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.670775][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.683476][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.690521][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.716558][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.800797][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.807902][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.834860][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.849048][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.856080][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.882215][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.926628][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.933792][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.960771][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.983770][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.992143][ T29] cfg80211: failed to load regulatory.db [ 91.996058][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.024142][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.077178][ T5850] hsr_slave_0: entered promiscuous mode [ 92.084372][ T5850] hsr_slave_1: entered promiscuous mode [ 92.140905][ T5849] hsr_slave_0: entered promiscuous mode [ 92.148219][ T5849] hsr_slave_1: entered promiscuous mode [ 92.155301][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 92.161244][ T5849] Cannot create hsr debugfs directory [ 92.208537][ T5847] hsr_slave_0: entered promiscuous mode [ 92.215501][ T5847] hsr_slave_1: entered promiscuous mode [ 92.223814][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.229961][ T5847] Cannot create hsr debugfs directory [ 92.280208][ T5856] hsr_slave_0: entered promiscuous mode [ 92.287411][ T5856] hsr_slave_1: entered promiscuous mode [ 92.294143][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 92.300319][ T5856] Cannot create hsr debugfs directory [ 92.346939][ T5848] hsr_slave_0: entered promiscuous mode [ 92.354305][ T5848] hsr_slave_1: entered promiscuous mode [ 92.361970][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 92.367785][ T5848] Cannot create hsr debugfs directory [ 93.074923][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.091360][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.108398][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.132058][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.215006][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.228726][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.240791][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.256167][ T5852] Bluetooth: hci3: command tx timeout [ 93.256177][ T5164] Bluetooth: hci4: command tx timeout [ 93.256204][ T5164] Bluetooth: hci1: command tx timeout [ 93.267972][ T5852] Bluetooth: hci0: command tx timeout [ 93.284789][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.336596][ T5852] Bluetooth: hci2: command tx timeout [ 93.388097][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.418120][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.429903][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.454852][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.583456][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.599487][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.612231][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.639824][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.729392][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.812826][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.824395][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.849414][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.861103][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.880889][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.945261][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.953053][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.999891][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.007121][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.034020][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.117616][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.135445][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.192166][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.199571][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.229949][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.237143][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.299036][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.318618][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.365489][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.372749][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.432938][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.440242][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.459514][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.541730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.549001][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.608782][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.619200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.626497][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.769498][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.810986][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.818361][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.877047][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.908498][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.916451][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.122402][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.287707][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.336879][ T5852] Bluetooth: hci1: command tx timeout [ 95.342772][ T5852] Bluetooth: hci0: command tx timeout [ 95.345983][ T5164] Bluetooth: hci3: command tx timeout [ 95.349655][ T5854] Bluetooth: hci4: command tx timeout [ 95.363184][ T5850] veth0_vlan: entered promiscuous mode [ 95.417541][ T5854] Bluetooth: hci2: command tx timeout [ 95.430626][ T5850] veth1_vlan: entered promiscuous mode [ 95.493965][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.537939][ T5849] veth0_vlan: entered promiscuous mode [ 95.608877][ T5849] veth1_vlan: entered promiscuous mode [ 95.632118][ T5850] veth0_macvtap: entered promiscuous mode [ 95.681470][ T5850] veth1_macvtap: entered promiscuous mode [ 95.733665][ T5856] veth0_vlan: entered promiscuous mode [ 95.751871][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.823890][ T5848] veth0_vlan: entered promiscuous mode [ 95.835466][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.857057][ T5856] veth1_vlan: entered promiscuous mode [ 95.875026][ T5849] veth0_macvtap: entered promiscuous mode [ 95.893485][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.948231][ T5849] veth1_macvtap: entered promiscuous mode [ 95.961550][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973281][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.993439][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.003927][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.014698][ T5848] veth1_vlan: entered promiscuous mode [ 96.128603][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.176143][ T5856] veth0_macvtap: entered promiscuous mode [ 96.209223][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.254103][ T5856] veth1_macvtap: entered promiscuous mode [ 96.273238][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.283466][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.291606][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.305078][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.332051][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.341774][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.391166][ T5848] veth0_macvtap: entered promiscuous mode [ 96.458833][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.482229][ T5848] veth1_macvtap: entered promiscuous mode [ 96.499598][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.509109][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.520566][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.572486][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.582594][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.594658][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.620536][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.631407][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.670486][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.701206][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.742611][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.761696][ T5847] veth0_vlan: entered promiscuous mode [ 96.781517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.794436][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.825237][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.888500][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900937][ T1011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.911892][ T1011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.929492][ T1011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.999905][ T5847] veth1_vlan: entered promiscuous mode [ 97.032918][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.073001][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.144006][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.300076][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.328056][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.416936][ T5854] Bluetooth: hci4: command tx timeout [ 97.422756][ T5852] Bluetooth: hci0: command tx timeout [ 97.428550][ T5860] Bluetooth: hci3: command tx timeout [ 97.428564][ T5164] Bluetooth: hci1: command tx timeout [ 97.476540][ T5847] veth0_macvtap: entered promiscuous mode [ 97.492313][ T5847] veth1_macvtap: entered promiscuous mode [ 97.498824][ T5860] Bluetooth: hci2: command tx timeout [ 97.543461][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.571375][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.735497][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.768685][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.783561][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.798705][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.872123][ T1011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.893664][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.929171][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.954501][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.340531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.363865][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.557526][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.579276][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.928338][ T6018] x_tables: ip_tables: osf match: only valid for protocol 6 [ 99.957155][ T6018] loop3: detected capacity change from 0 to 128 [ 99.966033][ T6018] msdos: Bad value for 'gid' [ 99.970684][ T6018] msdos: Bad value for 'gid' [ 101.270987][ T6041] team0: Port device team_slave_0 removed [ 101.858045][ T6061] loop4: detected capacity change from 0 to 128 [ 101.904767][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.921809][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.931837][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.942855][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.955200][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.973792][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 101.998947][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.015462][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.027752][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.040250][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.049219][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.068263][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.079581][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.090298][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.129333][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.160009][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.181130][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.228739][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.263025][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.311854][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.349140][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.365987][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.400657][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.423052][ T6061] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 102.452951][ T30] audit: type=1800 audit(1773966151.109:2): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.33" name="file1" dev="loop4" ino=1048605 res=0 errno=0 [ 102.699982][ T6082] loop1: detected capacity change from 0 to 256 [ 102.848354][ T6082] ======================================================= [ 102.848354][ T6082] WARNING: The mand mount option has been deprecated and [ 102.848354][ T6082] and is ignored by this kernel. Remove the mand [ 102.848354][ T6082] option from the mount to silence this warning. [ 102.848354][ T6082] ======================================================= [ 103.193668][ T6082] FAT-fs (loop1): Directory bread(block 64) failed [ 103.243119][ T6082] FAT-fs (loop1): Directory bread(block 65) failed [ 103.296574][ T6082] FAT-fs (loop1): Directory bread(block 66) failed [ 103.325932][ T6082] FAT-fs (loop1): Directory bread(block 67) failed [ 103.340886][ T6082] FAT-fs (loop1): Directory bread(block 68) failed [ 103.354856][ T6082] FAT-fs (loop1): Directory bread(block 69) failed [ 103.369339][ T6082] FAT-fs (loop1): Directory bread(block 70) failed [ 103.381848][ T6082] FAT-fs (loop1): Directory bread(block 71) failed [ 103.397078][ T6082] FAT-fs (loop1): Directory bread(block 72) failed [ 103.411444][ T6082] FAT-fs (loop1): Directory bread(block 73) failed [ 106.547490][ T6152] Illegal XDP return value 4294967274 on prog (id 7) dev syz_tun, expect packet loss! [ 106.608202][ T6152] loop1: detected capacity change from 0 to 128 [ 106.962516][ T6168] loop1: detected capacity change from 0 to 128 [ 107.017263][ T6165] loop3: detected capacity change from 0 to 8192 [ 107.122175][ T6168] syz.1.74: attempt to access beyond end of device [ 107.122175][ T6168] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 107.192579][ T6168] syz.1.74: attempt to access beyond end of device [ 107.192579][ T6168] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 107.254173][ T6168] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 107.284892][ T6168] syz.1.74: attempt to access beyond end of device [ 107.284892][ T6168] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 107.311422][ T6168] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 107.321340][ T6168] syz.1.74: attempt to access beyond end of device [ 107.321340][ T6168] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 107.341913][ T6168] syz.1.74: attempt to access beyond end of device [ 107.341913][ T6168] loop1: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 107.361862][ T6168] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 107.370975][ T6168] syz.1.74: attempt to access beyond end of device [ 107.370975][ T6168] loop1: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 107.396448][ T6168] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 107.421766][ T6168] syz.1.74: attempt to access beyond end of device [ 107.421766][ T6168] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 107.473987][ T6168] syz.1.74: attempt to access beyond end of device [ 107.473987][ T6168] loop1: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 107.551091][ T6168] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 107.596618][ T6168] syz.1.74: attempt to access beyond end of device [ 107.596618][ T6168] loop1: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 107.662856][ T6168] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 107.703854][ T6168] syz.1.74: attempt to access beyond end of device [ 107.703854][ T6168] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 107.867291][ T6168] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 107.902616][ T6168] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 107.930537][ T6168] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 107.972076][ T6168] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 108.541116][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 108.733927][ T6206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.790599][ T6222] sctp: [Deprecated]: syz.3.92 (pid 6222) Use of int in max_burst socket option. [ 108.790599][ T6222] Use struct sctp_assoc_value instead [ 109.368943][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 109.624259][ T6253] Zero length message leads to an empty skb [ 109.863921][ T6257] batadv_slave_1: entered promiscuous mode [ 109.919001][ T6255] batadv_slave_1: left promiscuous mode [ 110.670067][ T6279] loop0: detected capacity change from 0 to 16 [ 111.027509][ T30] audit: type=1800 audit(1773966159.689:3): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.108" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 111.071463][ T6286] loop1: detected capacity change from 0 to 8192 [ 111.822769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.450694][ T6343] raw_sendmsg: syz.3.138 forgot to set AF_INET. Fix it! [ 114.736895][ T6355] loop3: detected capacity change from 0 to 512 [ 114.745643][ T6355] vfat: Bad value for 'shortname' [ 114.944442][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 114.954747][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 114.964550][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 114.974281][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 115.857198][ T6359] loop0: detected capacity change from 0 to 16 [ 115.873296][ T6359] erofs (device loop0): mounted with root inode @ nid 36. [ 116.073304][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'. [ 116.112221][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'. [ 117.642628][ T6400] cgroup: No subsys list or none specified [ 117.679909][ T6400] cgroup: fork rejected by pids controller in /syz2 [ 118.210588][ T6416] loop3: detected capacity change from 0 to 128 [ 118.517025][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 118.545139][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 118.558704][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.597136][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 118.619977][ T6423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 118.820915][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.100087][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.402806][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.533338][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.559039][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.569547][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.581208][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.605543][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.462191][ T12] bridge_slave_1: left allmulticast mode [ 120.479562][ T12] bridge_slave_1: left promiscuous mode [ 120.499161][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.549426][ T12] bridge_slave_0: left allmulticast mode [ 120.558533][ T12] bridge_slave_0: left promiscuous mode [ 120.570051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.214387][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.245672][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.273001][ T12] bond0 (unregistering): Released all slaves [ 121.553256][ T6486] loop1: detected capacity change from 0 to 16 [ 121.615440][ T6486] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 121.656677][ T5852] Bluetooth: hci3: command tx timeout [ 121.674362][ T6486] erofs (device loop1): mounted with root inode @ nid 36. [ 122.053712][ T6497] fuse: Bad value for 'fd' [ 122.467838][ T6511] loop1: detected capacity change from 0 to 256 [ 122.738379][ T12] hsr_slave_0: left promiscuous mode [ 122.774817][ T12] hsr_slave_1: left promiscuous mode [ 122.803088][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.836553][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.871151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.911288][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.990572][ T12] veth1_macvtap: left promiscuous mode [ 123.002529][ T12] veth0_macvtap: left promiscuous mode [ 123.014771][ T12] veth1_vlan: left promiscuous mode [ 123.033266][ T12] veth0_vlan: left promiscuous mode [ 123.736876][ T5852] Bluetooth: hci3: command tx timeout [ 124.017674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.077682][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.689215][ T6445] chnl_net:caif_netlink_parms(): no params data found [ 125.390604][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.402086][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.424690][ T6445] bridge_slave_0: entered allmulticast mode [ 125.444280][ T6445] bridge_slave_0: entered promiscuous mode [ 125.469694][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.493682][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.513910][ T6445] bridge_slave_1: entered allmulticast mode [ 125.555251][ T6445] bridge_slave_1: entered promiscuous mode [ 125.708779][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.762510][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.816312][ T5852] Bluetooth: hci3: command tx timeout [ 125.892343][ T6445] team0: Port device team_slave_0 added [ 125.914283][ T6445] team0: Port device team_slave_1 added [ 126.060031][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.098242][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.181703][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.230571][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.260022][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.359327][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.612752][ T6610] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 126.624699][ T6610] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 126.633272][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) [ 126.642487][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.652644][ T6610] RIP: 0010:do_dentry_open+0xaf/0x14e0 [ 126.658134][ T6610] Code: 44 24 28 80 3c 28 00 74 08 4c 89 ff e8 ba 5b ef ff 4c 89 7c 24 20 4d 89 27 4d 8d 7c 24 30 4c 89 f8 48 c1 e8 03 48 89 44 24 58 <80> 3c 28 00 74 08 4c 89 ff e8 a3 5a ef ff 4c 89 7c 24 60 4d 8b 3f [ 126.677769][ T6610] RSP: 0018:ffffc900032c7638 EFLAGS: 00010206 [ 126.683875][ T6610] RAX: 0000000000000006 RBX: ffff8880569778a0 RCX: 0000000000000000 [ 126.691869][ T6610] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 126.699853][ T6610] RBP: dffffc0000000000 R08: ffff88807f68fca3 R09: 1ffff1100fed1f94 [ 126.707859][ T6610] R10: dffffc0000000000 R11: ffffed100fed1f95 R12: 0000000000000000 [ 126.715852][ T6610] R13: 1ffff1100ad2ef25 R14: ffff888056977928 R15: 0000000000000030 [ 126.723837][ T6610] FS: 00007fb2cbb406c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 126.732866][ T6610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.739462][ T6610] CR2: 0000001b32418ff8 CR3: 00000000640b6000 CR4: 00000000003526f0 [ 126.747454][ T6610] Call Trace: [ 126.750797][ T6610] [ 126.753841][ T6610] ? vfs_open+0x31/0x340 [ 126.758117][ T6610] vfs_open+0x3b/0x340 [ 126.762214][ T6610] ? backing_file_open_user_path+0x12/0x50 [ 126.768046][ T6610] backing_file_open_user_path+0x24/0x50 [ 126.773799][ T6610] backing_tmpfile_open+0x9b/0xf0 [ 126.778862][ T6610] ovl_tmpfile+0x400/0x810 [ 126.783344][ T6610] ? __pfx_ovl_tmpfile+0x10/0x10 [ 126.788320][ T6610] ? _raw_spin_unlock+0x28/0x50 [ 126.793213][ T6610] ? d_alloc+0x144/0x190 [ 126.797489][ T6610] ? mode_strip_sgid+0x6a/0x1b0 [ 126.802382][ T6610] vfs_tmpfile+0x3ff/0x890 [ 126.806817][ T6610] do_tmpfile+0xd3/0x240 [ 126.811084][ T6610] path_openat+0x300d/0x3860 [ 126.815687][ T6610] ? arch_stack_walk+0xfb/0x150 [ 126.820556][ T6610] ? do_getname+0x2e/0x250 [ 126.824995][ T6610] ? stack_trace_save+0xa9/0x100 [ 126.829958][ T6610] ? __pfx_stack_trace_save+0x10/0x10 [ 126.835443][ T6610] ? __futex_wait+0x371/0x420 [ 126.840151][ T6610] ? do_getname+0x2e/0x250 [ 126.844598][ T6610] ? stack_depot_save_flags+0x33/0x810 [ 126.850074][ T6610] ? kasan_save_track+0x3e/0x80 [ 126.854947][ T6610] ? __kasan_slab_alloc+0x6c/0x80 [ 126.859985][ T6610] ? __pfx_path_openat+0x10/0x10 [ 126.865022][ T6610] ? __x64_sys_openat+0x138/0x170 [ 126.870078][ T6610] ? do_syscall_64+0x14d/0xf80 [ 126.874895][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.881330][ T6610] ? __lock_acquire+0x6b5/0x2cf0 [ 126.886321][ T6610] do_file_open+0x23e/0x4a0 [ 126.890857][ T6610] ? __pfx_do_file_open+0x10/0x10 [ 126.895905][ T6610] ? _raw_spin_unlock+0x28/0x50 [ 126.900773][ T6610] ? alloc_fd+0x64b/0x6c0 [ 126.905144][ T6610] do_sys_openat2+0x113/0x200 [ 126.909899][ T6610] ? __se_sys_futex+0x3a8/0x450 [ 126.914785][ T6610] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.920107][ T6610] ? rcu_is_watching+0x15/0xb0 [ 126.924983][ T6610] __x64_sys_openat+0x138/0x170 [ 126.929863][ T6610] do_syscall_64+0x14d/0xf80 [ 126.934487][ T6610] ? trace_irq_disable+0x3b/0x150 [ 126.939618][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.945706][ T6610] ? clear_bhb_loop+0x40/0x90 [ 126.950589][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.956760][ T6610] RIP: 0033:0x7fb2cab9c799 [ 126.961203][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.980835][ T6610] RSP: 002b:00007fb2cbb40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.989314][ T6610] RAX: ffffffffffffffda RBX: 00007fb2cae15fa0 RCX: 00007fb2cab9c799 [ 126.997479][ T6610] RDX: 00000000004d4801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 127.005558][ T6610] RBP: 00007fb2cac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 127.013547][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.021552][ T6610] R13: 00007fb2cae16038 R14: 00007fb2cae15fa0 R15: 00007ffcb623c7e8 [ 127.029568][ T6610] [ 127.032788][ T6610] Modules linked in: [ 127.037968][ T6610] ---[ end trace 0000000000000000 ]--- [ 127.077756][ T6445] hsr_slave_0: entered promiscuous mode [ 127.089143][ T6445] hsr_slave_1: entered promiscuous mode [ 127.109023][ T6610] RIP: 0010:do_dentry_open+0xaf/0x14e0 [ 127.125313][ T6610] Code: 44 24 28 80 3c 28 00 74 08 4c 89 ff e8 ba 5b ef ff 4c 89 7c 24 20 4d 89 27 4d 8d 7c 24 30 4c 89 f8 48 c1 e8 03 48 89 44 24 58 <80> 3c 28 00 74 08 4c 89 ff e8 a3 5a ef ff 4c 89 7c 24 60 4d 8b 3f [ 127.167028][ T6610] RSP: 0018:ffffc900032c7638 EFLAGS: 00010206 [ 127.188448][ T6610] RAX: 0000000000000006 RBX: ffff8880569778a0 RCX: 0000000000000000 [ 127.206918][ T6610] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 127.224722][ T6610] RBP: dffffc0000000000 R08: ffff88807f68fca3 R09: 1ffff1100fed1f94 [ 127.242350][ T6610] R10: dffffc0000000000 R11: ffffed100fed1f95 R12: 0000000000000000 [ 127.265907][ T6610] R13: 1ffff1100ad2ef25 R14: ffff888056977928 R15: 0000000000000030 [ 127.314866][ T6610] FS: 00007fb2cbb406c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 127.324610][ T6610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.333198][ T6610] CR2: 00007f10017e92f8 CR3: 00000000640b6000 CR4: 00000000003526f0 [ 127.342927][ T6610] Kernel panic - not syncing: Fatal exception [ 127.349189][ T6610] Kernel Offset: disabled [ 127.353528][ T6610] Rebooting in 86400 seconds..