last executing test programs: 23.083807319s ago: executing program 3 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 19.924494807s ago: executing program 3 (id=196): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 16.999564955s ago: executing program 4 (id=204): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 16.746432197s ago: executing program 3 (id=206): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 15.00250035s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 11.112642112s ago: executing program 2 (id=215): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000f67000/0x3000)=nil, 0x3000, 0x6, 0x4c831, 0xffffffffffffffff, 0x9fbfb000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$NBD_DO_IT(r0, 0xab03) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x5502000000000000, 0x0, 0x4040004}, 0x44080) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 10.787661681s ago: executing program 3 (id=217): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 8.512789621s ago: executing program 3 (id=218): getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xee00]) keyctl$chown(0x4, 0x0, 0x0, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 000000000'], 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x11, 0x2, 0x300) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xb) 7.191172768s ago: executing program 0 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x4) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 6.868870356s ago: executing program 4 (id=223): ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x502) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000340)}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x2, 0x200400) ioctl$DVB_DEMUX_DMX_DQBUF(r1, 0xc0186f40, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0x3, 0x18, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setregid(0xee00, 0xee00) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) close_range(r2, r2, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x4000041, 0xff92, 0x0, 0x1, 0x3}]}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) 6.467622802s ago: executing program 1 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0), 0x0) 6.393163848s ago: executing program 0 (id=225): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$nfs4(0x0, 0x0, &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[]) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) dup(r5) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000001180)=""/4096) 6.03155866s ago: executing program 1 (id=226): socket(0xa, 0x802, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000940), 0x8) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$media(&(0x7f0000000180), 0x1, 0x408002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) read(r4, 0x0, 0x3c) 4.906446559s ago: executing program 1 (id=227): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 4.811726487s ago: executing program 2 (id=228): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_setup(0x79c4, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'geneve1\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 4.263734135s ago: executing program 0 (id=229): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) 2.522815648s ago: executing program 2 (id=230): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.191699137s ago: executing program 0 (id=231): r0 = socket$nl_crypto(0x10, 0x3, 0x15) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 2.157040921s ago: executing program 1 (id=232): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}}, 0x0) 1.391708508s ago: executing program 3 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 1.380434489s ago: executing program 4 (id=234): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000280aff"], 0x70}}, 0x0) 1.328146694s ago: executing program 2 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a3100000000080002400000000304000600140000001100", @ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x4) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1.211761684s ago: executing program 4 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x80001) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) 1.210297254s ago: executing program 0 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 1.072728306s ago: executing program 1 (id=238): socket(0xa, 0x802, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000940), 0x8) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$media(&(0x7f0000000180), 0x1, 0x408002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) read(r4, 0x0, 0x3c) 988.610193ms ago: executing program 4 (id=239): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000500), &(0x7f0000001040)=ANY=[], 0x841, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18}, 0xfffffdef) 905.918381ms ago: executing program 2 (id=240): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) socket$inet(0x2, 0x2, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 99.726932ms ago: executing program 0 (id=241): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x4c) 54.537236ms ago: executing program 2 (id=242): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=243): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 70.910571][ T4255] cgroup: Unknown subsys name 'net' [ 71.043631][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.411614][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.418187][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.592607][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.548807][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.569943][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.580152][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.589303][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.597435][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.605013][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.614073][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.622089][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.630353][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.638481][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.648806][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.655914][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.663529][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.672289][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.675763][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.681034][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.689720][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.695972][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.701170][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.708329][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.716863][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.724066][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.730275][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.736007][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.750104][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.750448][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.758191][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.771428][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.779244][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.786547][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.233973][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 75.296206][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 75.364508][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 75.395772][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 75.413652][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 75.485438][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.493327][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.501641][ T4277] device bridge_slave_0 entered promiscuous mode [ 75.543163][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.553051][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.561641][ T4277] device bridge_slave_1 entered promiscuous mode [ 75.578069][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.585245][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.593595][ T4267] device bridge_slave_0 entered promiscuous mode [ 75.631461][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.638776][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.646753][ T4267] device bridge_slave_1 entered promiscuous mode [ 75.673553][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.704394][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.711957][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.721713][ T4276] device bridge_slave_0 entered promiscuous mode [ 75.731233][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.756200][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.773464][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.783324][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.793077][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.801412][ T4276] device bridge_slave_1 entered promiscuous mode [ 75.823062][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.830477][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.839363][ T4269] device bridge_slave_0 entered promiscuous mode [ 75.862534][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.869983][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.878595][ T4275] device bridge_slave_0 entered promiscuous mode [ 75.903988][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.911225][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.919855][ T4269] device bridge_slave_1 entered promiscuous mode [ 75.942951][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.950226][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.961662][ T4275] device bridge_slave_1 entered promiscuous mode [ 75.988433][ T4277] team0: Port device team_slave_0 added [ 76.013704][ T4267] team0: Port device team_slave_0 added [ 76.022690][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.034017][ T4277] team0: Port device team_slave_1 added [ 76.042555][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.054253][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.065216][ T4267] team0: Port device team_slave_1 added [ 76.083334][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.102033][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.122436][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.171041][ T4276] team0: Port device team_slave_0 added [ 76.197406][ T4269] team0: Port device team_slave_0 added [ 76.214417][ T4276] team0: Port device team_slave_1 added [ 76.221111][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.228846][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.255256][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.270037][ T4275] team0: Port device team_slave_0 added [ 76.277965][ T4269] team0: Port device team_slave_1 added [ 76.284515][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.292217][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.319022][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.340537][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.347960][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.374866][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.388473][ T4275] team0: Port device team_slave_1 added [ 76.402447][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.409562][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.435717][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.489000][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.496028][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.522764][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.552106][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.559414][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.587396][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.599538][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.606541][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.632871][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.645098][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.652162][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.678164][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.695319][ T4267] device hsr_slave_0 entered promiscuous mode [ 76.702291][ T4267] device hsr_slave_1 entered promiscuous mode [ 76.717400][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.724407][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.750407][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.762234][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.769621][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.795842][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.847956][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 76.847970][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 76.848307][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 76.854329][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 76.868679][ T4277] device hsr_slave_0 entered promiscuous mode [ 76.879753][ T4277] device hsr_slave_1 entered promiscuous mode [ 76.886522][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.894524][ T4277] Cannot create hsr debugfs directory [ 76.937375][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 76.947814][ T4276] device hsr_slave_0 entered promiscuous mode [ 76.954830][ T4276] device hsr_slave_1 entered promiscuous mode [ 76.961857][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.970076][ T4276] Cannot create hsr debugfs directory [ 77.008995][ T4269] device hsr_slave_0 entered promiscuous mode [ 77.016198][ T4269] device hsr_slave_1 entered promiscuous mode [ 77.023044][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.030743][ T4269] Cannot create hsr debugfs directory [ 77.064309][ T4275] device hsr_slave_0 entered promiscuous mode [ 77.071666][ T4275] device hsr_slave_1 entered promiscuous mode [ 77.078590][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.086164][ T4275] Cannot create hsr debugfs directory [ 77.454256][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.472941][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.483403][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.502201][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.540188][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.552936][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.582471][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.594364][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.642995][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.671477][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.681228][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.691790][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.789870][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.818662][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.829354][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.839696][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.865514][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.913994][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.948586][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.964505][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.972986][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.983292][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.991928][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.001255][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.015139][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.027700][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.043158][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.065718][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.090672][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.100140][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.113282][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.120666][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.133244][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.143064][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.152528][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.159714][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.173406][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.183382][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.191810][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.201763][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.211672][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.218845][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.226764][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.267702][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.276646][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.289831][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.297080][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.305088][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.314867][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.325388][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.334141][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.343891][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.353296][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.381385][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.391039][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.400335][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.427920][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.436592][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.445776][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.461131][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.479992][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.500286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.514334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.525599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.561296][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.573946][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.583650][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.593175][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.605046][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.614800][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.624169][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.645321][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.674146][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.683812][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.693784][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.712627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.726495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.748676][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.755850][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.763963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.799833][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.810376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.832778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.893012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.917934][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.926671][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.933885][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.942100][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 78.949094][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 78.949119][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 78.955120][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 79.007364][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 79.008145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.030195][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.043441][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.055221][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.062428][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.094193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.110503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.121953][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.129196][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.139554][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.172344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.186487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.203586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.214414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.225352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.234466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.243646][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.256627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.266415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.281622][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.317827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.325883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.340006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.350398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.359029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.366595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.381285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.396007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.411773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.425978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.451491][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.474259][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.491033][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.502901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.516014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.532521][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.550453][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.562262][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.580816][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.599722][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.616209][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.632273][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.643740][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.650994][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.685517][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.732620][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.747326][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.762822][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.787474][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.825289][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.839298][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.858550][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.880904][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.888141][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.902684][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.967589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.987141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.009002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.028518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.047906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.063530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.073390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.098678][ T4277] device veth0_vlan entered promiscuous mode [ 80.111690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.126718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.142286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.153352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.170762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.203768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.223226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.262199][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.302085][ T4277] device veth1_vlan entered promiscuous mode [ 80.324597][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.379401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.398701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.428382][ T4277] device veth0_macvtap entered promiscuous mode [ 80.454535][ T4277] device veth1_macvtap entered promiscuous mode [ 80.486916][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.497980][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.506340][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.522409][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.553059][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.580358][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.616933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.625038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.659393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.678095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.713949][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.726933][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.740823][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.767408][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.776187][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807348][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835427][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.847985][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.898139][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.908805][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.953841][ T4276] device veth0_vlan entered promiscuous mode [ 81.007559][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 81.013746][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 81.023462][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 81.023485][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 81.061475][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.070824][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.080667][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.088933][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 81.096492][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.106457][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.115665][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.127482][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.138313][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.161330][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.173053][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.182943][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.191455][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.205485][ T4276] device veth1_vlan entered promiscuous mode [ 81.218471][ T4267] device veth0_vlan entered promiscuous mode [ 81.265343][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.273944][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.283050][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.292661][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.340018][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.348683][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.356769][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.366784][ T4267] device veth1_vlan entered promiscuous mode [ 81.382892][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.392530][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.401759][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.413724][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.422621][ T4269] device veth0_vlan entered promiscuous mode [ 81.446016][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.455952][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.476818][ T4276] device veth0_macvtap entered promiscuous mode [ 81.490112][ T4269] device veth1_vlan entered promiscuous mode [ 81.519021][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.528900][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.545320][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.558493][ T4276] device veth1_macvtap entered promiscuous mode [ 81.576343][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.587457][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.614993][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.630224][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.641856][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.660467][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.669651][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.678652][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.687489][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.696120][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.705326][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.738539][ T4267] device veth0_macvtap entered promiscuous mode [ 81.752881][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.765676][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.778062][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.785886][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.798448][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.808290][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.819513][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.829021][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.846117][ T4275] device veth0_vlan entered promiscuous mode [ 81.858816][ T4267] device veth1_macvtap entered promiscuous mode [ 81.878780][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.890935][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.900579][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.909641][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.923642][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.932466][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.941579][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.971969][ T4269] device veth0_macvtap entered promiscuous mode [ 82.026856][ T4275] device veth1_vlan entered promiscuous mode [ 82.042957][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.052855][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.063348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.077034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.085275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.093513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.101759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.109993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.118996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.127253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.137028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.147043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 82.983906][ T4356] xt_TCPMSS: Only works on TCP SYN packets [ 83.796470][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 83.803591][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 83.803641][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 83.803673][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 83.803710][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 84.176882][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.224734][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.234145][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.243440][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.285034][ T4269] device veth1_macvtap entered promiscuous mode [ 84.312502][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.331883][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.359199][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.380748][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.400935][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.432319][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.443751][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.460448][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.471665][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.482043][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.492955][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.508066][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.521086][ T4275] device veth0_macvtap entered promiscuous mode [ 84.549919][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.563089][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.586219][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.601159][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.614284][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.623853][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.633701][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643135][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.675551][ T4275] device veth1_macvtap entered promiscuous mode [ 84.703686][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.720459][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.742629][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 84.763547][ T4366] delete_channel: no stack [ 84.788273][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.801658][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.812299][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.822936][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.834138][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.851201][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.887932][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.905649][ T4369] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.912383][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.944456][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.954835][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.971566][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.981772][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.993474][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.004053][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.015100][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.025617][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.036871][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.063177][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.077669][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.091538][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.109079][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.111422][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.126651][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.137859][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.149901][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.160671][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.174553][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.183911][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.203701][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.215747][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.230054][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.270621][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.305353][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.323681][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.337259][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.357612][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.377142][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.392929][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.404059][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.415709][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.428962][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.441667][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.452091][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.461393][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.470430][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.490679][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.502894][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.519845][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528794][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.538668][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549329][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.633219][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.651564][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.693086][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.701288][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.722046][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.766435][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.796575][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.836370][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.879628][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.919578][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.933626][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.398289][ T128] cfg80211: failed to load regulatory.db [ 87.491003][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.493411][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.520257][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.572795][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.581337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.607899][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.642150][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.763932][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.787138][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.839695][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.279194][ T4391] loop4: detected capacity change from 0 to 256 [ 88.333210][ T4391] FAT-fs (loop4): bogus number of FAT sectors [ 88.340236][ T4391] FAT-fs (loop4): Can't find a valid FAT filesystem [ 90.535254][ T4394] o2cb: This node has not been configured. [ 90.541870][ T4394] o2cb: Cluster check failed. Fix errors before retrying. [ 90.549287][ T4394] (syz.0.1,4394,0):user_dlm_register:674 ERROR: status = -22 [ 90.556757][ T4394] (syz.0.1,4394,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 90.585170][ T4351] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.181272][ T4404] delete_channel: no stack [ 95.175269][ T4422] block nbd3: shutting down sockets [ 95.297327][ T4442] loop4: detected capacity change from 0 to 256 [ 95.316428][ T4442] FAT-fs (loop4): bogus number of FAT sectors [ 95.322804][ T4442] FAT-fs (loop4): Can't find a valid FAT filesystem [ 96.275162][ T4396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.412504][ T4444] loop0: detected capacity change from 0 to 1024 [ 96.759064][ T4445] delete_channel: no stack [ 97.994336][ T4458] mmap: syz.4.29 (4458) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.850499][ T4480] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 102.215263][ T4491] delete_channel: no stack [ 103.072990][ T4500] vxfs: WRONG superblock magic 00000000 at 1 [ 103.079635][ T4500] vxfs: WRONG superblock magic 00000000 at 8 [ 103.085683][ T4500] vxfs: can't find superblock. [ 105.961225][ T4516] xt_TCPMSS: Only works on TCP SYN packets [ 106.762798][ T4529] loop0: detected capacity change from 0 to 256 [ 107.262672][ T4530] xt_TCPMSS: Only works on TCP SYN packets [ 108.167559][ T4529] FAT-fs (loop0): bogus number of FAT sectors [ 108.173728][ T4529] FAT-fs (loop0): Can't find a valid FAT filesystem [ 110.799938][ T4567] loop4: detected capacity change from 0 to 128 [ 110.850405][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.534639][ T4573] xt_TCPMSS: Only works on TCP SYN packets [ 112.345154][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.377915][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.537912][ T4570] device bridge_slave_0 left promiscuous mode [ 112.545792][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.582458][ T4567] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 112.626568][ T4570] device bridge_slave_1 left promiscuous mode [ 112.633629][ T48] block nbd2: Receive control failed (result -32) [ 112.717508][ T4558] block nbd2: shutting down sockets [ 112.737397][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.780810][ T4570] bond0: (slave bond_slave_0): Releasing backup interface [ 112.839392][ T4570] bond0: (slave bond_slave_1): Releasing backup interface [ 113.517662][ T4582] xt_TCPMSS: Only works on TCP SYN packets [ 114.457966][ T4570] team0: Port device team_slave_0 removed [ 114.561798][ T4570] team0: Port device team_slave_1 removed [ 114.582981][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.609411][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.643675][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.668715][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.927003][ T4603] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 116.191799][ T4605] loop2: detected capacity change from 0 to 256 [ 116.249637][ T4605] FAT-fs (loop2): bogus number of FAT sectors [ 116.255977][ T4605] FAT-fs (loop2): Can't find a valid FAT filesystem [ 116.663332][ T4612] loop0: detected capacity change from 0 to 128 [ 116.686601][ T4612] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.572058][ T4623] xt_TCPMSS: Only works on TCP SYN packets [ 121.203529][ T4651] loop2: detected capacity change from 0 to 256 [ 122.666525][ T4651] FAT-fs (loop2): bogus number of FAT sectors [ 122.672803][ T4651] FAT-fs (loop2): Can't find a valid FAT filesystem [ 123.380079][ T4664] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 124.008717][ T4667] Bluetooth: MGMT ver 1.22 [ 124.724307][ T4679] loop4: detected capacity change from 0 to 128 [ 124.760680][ T4679] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 128.404308][ T4705] loop0: detected capacity change from 0 to 256 [ 128.674206][ T4705] FAT-fs (loop0): bogus number of FAT sectors [ 128.680696][ T4705] FAT-fs (loop0): Can't find a valid FAT filesystem [ 131.354453][ T4715] loop4: detected capacity change from 0 to 32768 [ 132.850147][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893658][ T4715] (syz.4.103,4715,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.528294][ T4721] block nbd2: shutting down sockets [ 134.535896][ T4715] (syz.4.103,4715,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.763367][ T4715] (syz.4.103,4715,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 134.780212][ T4715] (syz.4.103,4715,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 136.900743][ T4772] loop1: detected capacity change from 0 to 128 [ 136.922535][ T4772] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 139.970011][ T4782] loop0: detected capacity change from 0 to 1024 [ 141.390298][ T4794] Zero length message leads to an empty skb [ 143.116206][ T4823] loop2: detected capacity change from 0 to 1024 [ 143.806407][ T4832] loop0: detected capacity change from 0 to 128 [ 143.861277][ T4832] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 144.096060][ T4835] fuse: Unknown parameter 'grou00000000000000000000' [ 145.964748][ T4870] loop1: detected capacity change from 0 to 1024 [ 148.566128][ T4866] device syzkaller0 entered promiscuous mode [ 148.679329][ T4866] tipc: Started in network mode [ 148.772212][ T4866] tipc: Node identity f2e698f10a4f, cluster identity 4711 [ 149.217772][ T4866] tipc: Enabled bearer , priority 0 [ 149.228210][ T4880] fuse: Unknown parameter 'grou00000000000000000000' [ 149.270130][ T4864] tipc: Resetting bearer [ 149.371635][ T48] block nbd0: Receive control failed (result -32) [ 149.382057][ T4867] block nbd0: shutting down sockets [ 149.583738][ T4864] tipc: Disabling bearer [ 149.897669][ T4895] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 152.134331][ T4921] loop3: detected capacity change from 0 to 512 [ 152.150535][ T4922] fuse: Unknown parameter 'group_i00000000000000000000' [ 153.691471][ T4935] loop1: detected capacity change from 0 to 256 [ 153.941805][ T4935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 153.957393][ T4926] block nbd2: shutting down sockets [ 155.361891][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 155.382670][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.793988][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.693975][ T4962] fuse: Unknown parameter 'group_i00000000000000000000' [ 157.038820][ T4968] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 158.720835][ T4984] loop2: detected capacity change from 0 to 256 [ 158.736338][ T4977] block nbd4: shutting down sockets [ 158.765441][ T4984] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 159.886387][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.939821][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.959944][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.982420][ T4994] device bridge_slave_0 left promiscuous mode [ 160.036213][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.067735][ T4994] device bridge_slave_1 left promiscuous mode [ 160.108796][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.124492][ T5002] fuse: Unknown parameter 'group_i00000000000000000000' [ 160.255906][ T4994] bond0: (slave bond_slave_0): Releasing backup interface [ 160.385896][ T4994] bond0: (slave bond_slave_1): Releasing backup interface [ 160.592575][ T4994] team0: Port device team_slave_0 removed [ 162.333247][ T4994] team0: Port device team_slave_1 removed [ 162.366113][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.443522][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.472796][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.514421][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.487827][ T5034] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 164.492990][ T5042] fuse: Unknown parameter 'group_id00000000000000000000' [ 165.092610][ T5051] loop1: detected capacity change from 0 to 1024 [ 165.363468][ T5053] loop4: detected capacity change from 0 to 256 [ 165.590078][ T5053] FAT-fs (loop4): bogus number of FAT sectors [ 165.590183][ T5053] FAT-fs (loop4): Can't find a valid FAT filesystem [ 171.064728][ T5094] xt_TCPMSS: Only works on TCP SYN packets [ 172.342109][ T5100] loop1: detected capacity change from 0 to 256 [ 172.693999][ T5100] FAT-fs (loop1): bogus number of FAT sectors [ 172.700297][ T5100] FAT-fs (loop1): Can't find a valid FAT filesystem [ 174.547810][ T4351] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.802553][ T5107] loop0: detected capacity change from 0 to 1024 [ 176.926685][ T5129] loop0: detected capacity change from 0 to 512 [ 177.110629][ T5129] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.141308][ T5129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.342540][ T5129] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 177.357265][ T48] block nbd2: Receive control failed (result -32) [ 177.365899][ T5116] block nbd2: shutting down sockets [ 177.900395][ T5129] EXT4-fs (loop0): 1 truncate cleaned up [ 178.114937][ T5129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.581491][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 180.700443][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 182.759087][ T5189] loop4: detected capacity change from 0 to 1024 [ 182.775146][ T5189] ======================================================= [ 182.775146][ T5189] WARNING: The mand mount option has been deprecated and [ 182.775146][ T5189] and is ignored by this kernel. Remove the mand [ 182.775146][ T5189] option from the mount to silence this warning. [ 182.775146][ T5189] ======================================================= [ 182.924853][ T5189] EXT4-fs: Ignoring removed oldalloc option [ 182.934939][ T5189] EXT4-fs: Ignoring removed orlov option [ 183.037886][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.251346][ T5189] ================================================================== [ 183.259486][ T5189] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 183.266926][ T5189] Read of size 4 at addr ffff888053a2ce18 by task syz.4.239/5189 [ 183.274675][ T5189] [ 183.277045][ T5189] CPU: 0 PID: 5189 Comm: syz.4.239 Not tainted syzkaller #0 [ 183.284368][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.294481][ T5189] Call Trace: [ 183.297814][ T5189] [ 183.300846][ T5189] dump_stack_lvl+0x188/0x24e [ 183.305579][ T5189] ? __lock_acquire+0x7d10/0x7d10 [ 183.310661][ T5189] ? show_regs_print_info+0x12/0x12 [ 183.315916][ T5189] ? load_image+0x400/0x400 [ 183.320473][ T5189] ? __virt_addr_valid+0x465/0x540 [ 183.325672][ T5189] ? ext4_find_extent+0xbcc/0xe00 [ 183.330747][ T5189] print_report+0xa8/0x210 [ 183.335213][ T5189] kasan_report+0x10b/0x140 [ 183.339779][ T5189] ? ext4_find_extent+0xbcc/0xe00 [ 183.344856][ T5189] ext4_find_extent+0xbcc/0xe00 [ 183.349761][ T5189] ext4_ext_map_blocks+0x29e/0x6810 [ 183.355004][ T5189] ? verify_lock_unused+0x140/0x140 [ 183.360270][ T5189] ? ext4_ext_release+0x10/0x10 [ 183.365179][ T5189] ? __might_sleep+0xd0/0xd0 [ 183.369901][ T5189] ? down_read+0x1a8/0x2d0 [ 183.374374][ T5189] ext4_map_blocks+0x3a8/0x1b70 [ 183.379278][ T5189] ? check_path+0x21/0x40 [ 183.383674][ T5189] ? add_chain_block+0x940/0x940 [ 183.388664][ T5189] ? ext4_issue_zeroout+0x250/0x250 [ 183.393923][ T5189] _ext4_get_block+0x1e7/0x540 [ 183.398743][ T5189] ? ext4_get_block+0x40/0x40 [ 183.403478][ T5189] ext4_block_write_begin+0x644/0x1300 [ 183.408976][ T5189] ? page_cache_prev_miss+0x380/0x380 [ 183.414394][ T5189] ? ext4_es_is_delayed+0x40/0x40 [ 183.419465][ T5189] ? ext4_print_free_blocks+0x390/0x390 [ 183.425048][ T5189] ? folio_wait_stable+0xb/0x80 [ 183.429937][ T5189] ext4_write_begin+0x629/0xf80 [ 183.434831][ T5189] ? ext4_readahead+0x110/0x110 [ 183.439720][ T5189] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 183.446006][ T5189] ? lockdep_hardirqs_on+0x94/0x140 [ 183.451244][ T5189] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 183.457108][ T5189] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 183.463481][ T5189] ext4_da_write_begin+0x30a/0x960 [ 183.468631][ T5189] ? verify_lock_unused+0x140/0x140 [ 183.473930][ T5189] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 183.479972][ T5189] ? ext4_dirty_folio+0x310/0x310 [ 183.485048][ T5189] ? fault_in_readable+0x15d/0x1f0 [ 183.490226][ T5189] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 183.496102][ T5189] generic_perform_write+0x2fa/0x5c0 [ 183.501450][ T5189] ? generic_file_direct_write+0x330/0x330 [ 183.507311][ T5189] ? ext4_write_checks+0x24b/0x2c0 [ 183.512454][ T5189] ext4_buffered_write_iter+0x11a/0x390 [ 183.518037][ T5189] ext4_file_write_iter+0x1cf/0x1710 [ 183.523355][ T5189] ? lock_acquire+0x225/0x4a0 [ 183.528068][ T5189] ? rcu_read_lock_any_held+0xb0/0x130 [ 183.533557][ T5189] ? ext4_file_read_iter+0x650/0x650 [ 183.538864][ T5189] ? end_current_label_crit_section+0x14b/0x170 [ 183.545131][ T5189] ? common_file_perm+0x171/0x1c0 [ 183.550185][ T5189] vfs_write+0x4b1/0xa30 [ 183.554459][ T5189] ? file_end_write+0x250/0x250 [ 183.559339][ T5189] ? __fget_files+0x43d/0x4b0 [ 183.564041][ T5189] ? __fdget_pos+0x2ae/0x360 [ 183.568660][ T5189] ? ksys_write+0x71/0x250 [ 183.573131][ T5189] ksys_write+0x14c/0x250 [ 183.577489][ T5189] ? __ia32_sys_read+0x80/0x80 [ 183.582282][ T5189] ? lockdep_hardirqs_on+0x94/0x140 [ 183.587503][ T5189] do_syscall_64+0x4c/0xa0 [ 183.591948][ T5189] ? clear_bhb_loop+0x60/0xb0 [ 183.596645][ T5189] ? clear_bhb_loop+0x60/0xb0 [ 183.601437][ T5189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.607356][ T5189] RIP: 0033:0x7fcf20b9c629 [ 183.611798][ T5189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.631441][ T5189] RSP: 002b:00007fcf21ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.639879][ T5189] RAX: ffffffffffffffda RBX: 00007fcf20e15fa0 RCX: 00007fcf20b9c629 [ 183.647869][ T5189] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 183.655856][ T5189] RBP: 00007fcf20c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 183.663849][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.671839][ T5189] R13: 00007fcf20e16038 R14: 00007fcf20e15fa0 R15: 00007ffce3b865a8 [ 183.679835][ T5189] [ 183.682876][ T5189] [ 183.685216][ T5189] The buggy address belongs to the physical page: [ 183.691650][ T5189] page:ffffea00014e8b00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x53a2c [ 183.701822][ T5189] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.708960][ T5189] raw: 00fff00000000000 ffffea00014e2748 ffffea00014e8bc8 0000000000000000 [ 183.717591][ T5189] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 183.726190][ T5189] page dumped because: kasan: bad access detected [ 183.732648][ T5189] page_owner tracks the page as freed [ 183.738026][ T5189] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5179, tgid 5179 (syz.0.237), ts 182017126134, free_ts 182923592897 [ 183.755676][ T5189] post_alloc_hook+0x173/0x1a0 [ 183.760474][ T5189] get_page_from_freelist+0x1a1e/0x1ab0 [ 183.766045][ T5189] __alloc_pages+0x1ec/0x4f0 [ 183.770659][ T5189] __folio_alloc+0xe/0x30 [ 183.775010][ T5189] vma_alloc_folio+0x4a3/0x900 [ 183.779840][ T5189] wp_page_copy+0x2bd/0x1680 [ 183.784448][ T5189] handle_mm_fault+0x1d19/0x3ee0 [ 183.789402][ T5189] do_user_addr_fault+0x51f/0xb10 [ 183.794445][ T5189] exc_page_fault+0x60/0x100 [ 183.799050][ T5189] asm_exc_page_fault+0x22/0x30 [ 183.803922][ T5189] page last free stack trace: [ 183.808608][ T5189] free_unref_page_prepare+0x8b4/0x9a0 [ 183.814090][ T5189] free_unref_page_list+0xbb/0x8e0 [ 183.819220][ T5189] release_pages+0x1fa6/0x2220 [ 183.824035][ T5189] tlb_flush_mmu+0x105/0x220 [ 183.828659][ T5189] tlb_finish_mmu+0xbd/0x1c0 [ 183.833271][ T5189] exit_mmap+0x384/0x960 [ 183.837535][ T5189] __mmput+0x118/0x3c0 [ 183.841624][ T5189] exit_mm+0x1fe/0x2d0 [ 183.845715][ T5189] do_exit+0x905/0x2480 [ 183.849903][ T5189] do_group_exit+0x217/0x2d0 [ 183.854523][ T5189] get_signal+0x1272/0x1350 [ 183.859081][ T5189] arch_do_signal_or_restart+0xc4/0x1350 [ 183.865258][ T5189] exit_to_user_mode_loop+0x70/0x110 [ 183.870573][ T5189] exit_to_user_mode_prepare+0xee/0x180 [ 183.876167][ T5189] syscall_exit_to_user_mode+0x16/0x40 [ 183.881688][ T5189] do_syscall_64+0x58/0xa0 [ 183.886130][ T5189] [ 183.888496][ T5189] Memory state around the buggy address: [ 183.894149][ T5189] ffff888053a2cd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.902327][ T5189] ffff888053a2cd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.910407][ T5189] >ffff888053a2ce00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.918494][ T5189] ^ [ 183.923356][ T5189] ffff888053a2ce80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.931452][ T5189] ffff888053a2cf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 183.939524][ T5189] ================================================================== [ 183.947693][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.008071][ T5189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 184.015340][ T5189] CPU: 0 PID: 5189 Comm: syz.4.239 Not tainted syzkaller #0 [ 184.022667][ T5189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.032764][ T5189] Call Trace: [ 184.036081][ T5189] [ 184.039067][ T5189] dump_stack_lvl+0x188/0x24e [ 184.043794][ T5189] ? memcpy+0x3c/0x60 [ 184.047820][ T5189] ? show_regs_print_info+0x12/0x12 [ 184.053075][ T5189] ? load_image+0x400/0x400 [ 184.057632][ T5189] panic+0x2e5/0x730 [ 184.061573][ T5189] ? bpf_jit_dump+0xd0/0xd0 [ 184.066121][ T5189] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 184.072153][ T5189] ? _raw_spin_unlock+0x40/0x40 [ 184.077064][ T5189] ? print_memory_metadata+0x314/0x400 [ 184.082578][ T5189] check_panic_on_warn+0x80/0xa0 [ 184.087571][ T5189] ? ext4_find_extent+0xbcc/0xe00 [ 184.092722][ T5189] end_report+0x66/0x110 [ 184.097016][ T5189] kasan_report+0x118/0x140 [ 184.101576][ T5189] ? ext4_find_extent+0xbcc/0xe00 [ 184.106645][ T5189] ext4_find_extent+0xbcc/0xe00 [ 184.111540][ T5189] ext4_ext_map_blocks+0x29e/0x6810 [ 184.116791][ T5189] ? verify_lock_unused+0x140/0x140 [ 184.122058][ T5189] ? ext4_ext_release+0x10/0x10 [ 184.126953][ T5189] ? __might_sleep+0xd0/0xd0 [ 184.131602][ T5189] ? down_read+0x1a8/0x2d0 [ 184.136080][ T5189] ext4_map_blocks+0x3a8/0x1b70 [ 184.140988][ T5189] ? check_path+0x21/0x40 [ 184.145380][ T5189] ? add_chain_block+0x940/0x940 [ 184.150368][ T5189] ? ext4_issue_zeroout+0x250/0x250 [ 184.155625][ T5189] _ext4_get_block+0x1e7/0x540 [ 184.160450][ T5189] ? ext4_get_block+0x40/0x40 [ 184.165189][ T5189] ext4_block_write_begin+0x644/0x1300 [ 184.170704][ T5189] ? page_cache_prev_miss+0x380/0x380 [ 184.176140][ T5189] ? ext4_es_is_delayed+0x40/0x40 [ 184.181219][ T5189] ? ext4_print_free_blocks+0x390/0x390 [ 184.186813][ T5189] ? folio_wait_stable+0xb/0x80 [ 184.191723][ T5189] ext4_write_begin+0x629/0xf80 [ 184.196633][ T5189] ? ext4_readahead+0x110/0x110 [ 184.201534][ T5189] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 184.207830][ T5189] ? lockdep_hardirqs_on+0x94/0x140 [ 184.213079][ T5189] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 184.218954][ T5189] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 184.225256][ T5189] ext4_da_write_begin+0x30a/0x960 [ 184.230425][ T5189] ? verify_lock_unused+0x140/0x140 [ 184.235687][ T5189] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 184.241633][ T5189] ? ext4_dirty_folio+0x310/0x310 [ 184.246709][ T5189] ? fault_in_readable+0x15d/0x1f0 [ 184.251878][ T5189] ? fault_in_iov_iter_readable+0xbb/0x2e0 [ 184.257743][ T5189] generic_perform_write+0x2fa/0x5c0 [ 184.263099][ T5189] ? generic_file_direct_write+0x330/0x330 [ 184.268965][ T5189] ? ext4_write_checks+0x24b/0x2c0 [ 184.274135][ T5189] ext4_buffered_write_iter+0x11a/0x390 [ 184.279731][ T5189] ext4_file_write_iter+0x1cf/0x1710 [ 184.285069][ T5189] ? lock_acquire+0x225/0x4a0 [ 184.289801][ T5189] ? rcu_read_lock_any_held+0xb0/0x130 [ 184.295309][ T5189] ? ext4_file_read_iter+0x650/0x650 [ 184.300645][ T5189] ? end_current_label_crit_section+0x14b/0x170 [ 184.306934][ T5189] ? common_file_perm+0x171/0x1c0 [ 184.312009][ T5189] vfs_write+0x4b1/0xa30 [ 184.316321][ T5189] ? file_end_write+0x250/0x250 [ 184.321239][ T5189] ? __fget_files+0x43d/0x4b0 [ 184.325966][ T5189] ? __fdget_pos+0x2ae/0x360 [ 184.330616][ T5189] ? ksys_write+0x71/0x250 [ 184.335089][ T5189] ksys_write+0x14c/0x250 [ 184.339477][ T5189] ? __ia32_sys_read+0x80/0x80 [ 184.344309][ T5189] ? lockdep_hardirqs_on+0x94/0x140 [ 184.349553][ T5189] do_syscall_64+0x4c/0xa0 [ 184.354023][ T5189] ? clear_bhb_loop+0x60/0xb0 [ 184.358758][ T5189] ? clear_bhb_loop+0x60/0xb0 [ 184.363485][ T5189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.369426][ T5189] RIP: 0033:0x7fcf20b9c629 [ 184.373883][ T5189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.393539][ T5189] RSP: 002b:00007fcf21ae3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.402008][ T5189] RAX: ffffffffffffffda RBX: 00007fcf20e15fa0 RCX: 00007fcf20b9c629 [ 184.410065][ T5189] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 184.418101][ T5189] RBP: 00007fcf20c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.426116][ T5189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.434137][ T5189] R13: 00007fcf20e16038 R14: 00007fcf20e15fa0 R15: 00007ffce3b865a8 [ 184.442163][ T5189] [ 184.445792][ T5189] Kernel Offset: disabled [ 184.450131][ T5189] Rebooting in 86400 seconds..