last executing test programs: 1m34.749241026s ago: executing program 1 (id=2): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) timer_create(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m30.493208526s ago: executing program 1 (id=16): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x50000048) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000300)='[', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x20680, 0x0) renameat2(r4, 0x0, r5, 0x0, 0x4) mkdirat(r4, 0x0, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) write$binfmt_script(r6, &(0x7f0000000940)={'#! ', './file0/file2'}, 0x11) acct(&(0x7f0000000140)='./file0/file2\x00') 1m28.864870806s ago: executing program 1 (id=20): open(0x0, 0x800, 0x180) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1m27.736045272s ago: executing program 1 (id=24): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x74) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) unlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m26.699845993s ago: executing program 32 (id=24): syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x74) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat(0xffffffffffffff9c, 0x0, 0x143841, 0x114) unlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.163458784s ago: executing program 0 (id=141): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') geteuid() socket(0x10, 0x3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 19.159784822s ago: executing program 0 (id=145): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 17.99002193s ago: executing program 0 (id=148): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000980)={[&(0x7f00000007c0)=',@:\x00', &(0x7f0000000800)='/dev/autofs\x00', &(0x7f0000000840)='-%@@^$\'^\x00', &(0x7f0000000880)='-\x00', &(0x7f00000008c0)='com.apple.system.Security\x00', &(0x7f0000000900)='*{].\x00', &(0x7f0000000940)='%]\x14\x00']}, &(0x7f0000000b80)={[&(0x7f00000009c0)='GPL\x00', &(0x7f0000000a00)=',:/-#\x00', &(0x7f0000000a40)='autofs\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='!\x00', &(0x7f0000000b00)='\',-[\'-*{,-#\x00', &(0x7f0000000b40)='/dev/autofs\x00']}, 0x1000) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) 16.324080032s ago: executing program 0 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000840)={0x5, @output={0x0, 0x1, {0x9, 0xfffffff9}, 0x101, 0x2}}) 15.651443036s ago: executing program 2 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004855) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = signalfd(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r4, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x40000000008d, 0x20001) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x5, 0x8000) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x6) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0) 15.145057581s ago: executing program 0 (id=158): openat$comedi(0xffffffffffffff9c, 0x0, 0x101642, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x5) socket(0x2, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.583916298s ago: executing program 3 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0xff) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000085000000a50000009500"/32], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xd, 0x4}], 0x10, 0x5b8a}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r4, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x9, 0x0, 0x7fffffff, 0x80000000, 0xe000, 0x40, 0x1, 0x10001}, &(0x7f00000004c0)={0x1e, 0x9, 0x7, 0x1, 0x0, 0x4, 0x100000001, 0x3ff}, &(0x7f0000000500)={0x1, 0xff, 0x4, 0x80, 0x100000000, 0x3, 0x5, 0x1999}, &(0x7f0000001580)={r8, r9+10000000}, &(0x7f0000001600)={&(0x7f00000015c0)={[0xffff]}, 0x8}) recvfrom(r7, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0x13, 0x0, &(0x7f00000000c0)) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r10, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 13.445618405s ago: executing program 2 (id=162): syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x24004000}, 0xc800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1e, 0x4, 0x0) socketpair(0x80000000000025, 0x5, 0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdffffdffff9}, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0xffff8001, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 11.859691643s ago: executing program 3 (id=164): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000980)={[&(0x7f00000007c0)=',@:\x00', &(0x7f0000000800)='/dev/autofs\x00', &(0x7f0000000840)='-%@@^$\'^\x00', &(0x7f0000000880)='-\x00', &(0x7f00000008c0)='com.apple.system.Security\x00', &(0x7f0000000900)='*{].\x00', &(0x7f0000000940)='%]\x14\x00']}, &(0x7f0000000b80)={[&(0x7f00000009c0)='GPL\x00', &(0x7f0000000a00)=',:/-#\x00', &(0x7f0000000a40)='autofs\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='!\x00', &(0x7f0000000b00)='\',-[\'-*{,-#\x00', &(0x7f0000000b40)='/dev/autofs\x00']}, 0x1000) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) 11.851134593s ago: executing program 0 (id=165): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) 10.762086347s ago: executing program 5 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0x0, 0x7f, 0x40, 0x800, 0x0, 0x5a1, 0x85f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x26040000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 9.923409319s ago: executing program 3 (id=167): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r2, 0x0, 0x0) bind$alg(r2, 0x0, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600), 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) 9.346215887s ago: executing program 2 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000840)={0x5, @output={0x0, 0x1, {0x9, 0xfffffff9}, 0x101, 0x2}}) 9.140663038s ago: executing program 4 (id=170): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') geteuid() socket(0x10, 0x3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 9.047681942s ago: executing program 5 (id=171): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket(0x2, 0x801, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000500)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.988571275s ago: executing program 3 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004855) setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = signalfd(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r4, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x40000000008d, 0x20001) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x5, 0x8000) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x6) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b0bc8d643234724d3f90324fc60", 0x14}], 0x1}, 0x0) 7.413489473s ago: executing program 5 (id=173): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') geteuid() socket(0x10, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 6.962362325s ago: executing program 4 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x149a82, 0x0) sendfile(r5, r5, 0x0, 0xff) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000085000000a50000009500"/32], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xd, 0x4}], 0x10, 0x5b8a}, 0x94) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0)=r6, 0x4) sendmsg$kcm(r4, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x9, 0x0, 0x7fffffff, 0x80000000, 0xe000, 0x40, 0x1, 0x10001}, &(0x7f00000004c0)={0x1e, 0x9, 0x7, 0x1, 0x0, 0x4, 0x100000001, 0x3ff}, &(0x7f0000000500)={0x1, 0xff, 0x4, 0x80, 0x100000000, 0x3, 0x5, 0x1999}, &(0x7f0000001580)={r8, r9+10000000}, &(0x7f0000001600)={&(0x7f00000015c0)={[0xffff]}, 0x8}) recvfrom(r7, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0x13, 0x0, &(0x7f00000000c0)) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r10, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 6.557328896s ago: executing program 2 (id=175): openat$comedi(0xffffffffffffff9c, 0x0, 0x101642, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x4000)=nil, 0x5) socket(0x2, 0x3, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.488003379s ago: executing program 5 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x848e0}, 0x4040895) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES16=r0, @ANYBLOB="47ad0f1ae97ec1434a5fc99a9ef97a03cd8689fc572d0bcb", @ANYRES8, @ANYRES16], 0x1, 0x17e, &(0x7f0000020980)="$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") syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020e0ffff0708004a00003c0000000000069078ac141400ac14140089076fffffffff4404f103860600"/57, @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xaf4, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1000) ftruncate(r1, 0x101) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 5.44621013s ago: executing program 3 (id=177): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="006800412127bd7000fcffff7f0000000002008000"], 0x18}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006000000000800"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x800) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "9340f2307faa6431"}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01745fed0009d78f0a9c7ee2b49e33538afa8af92347514f0b56a20ff27fff802aebe138053330a41ce6edee47c6bdb8b872edbed166ab590e9b898ff3786080e3000000", 0xa9}], 0x1}, 0x4040) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x46201) 4.45039279s ago: executing program 4 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rename(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000060000000000000004000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="00000000000085000000a50000009500"/30], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000340)=[{0x4, 0x4, 0x9, 0xd}, {0x0, 0x5, 0x4, 0x3}, {0x3, 0x4, 0x2, 0x4}, {0x4, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x4, 0xc, 0x1}, {0x0, 0x5, 0xd, 0x4}], 0x10, 0x5b8a}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000480)={0x9, 0x0, 0x7fffffff, 0x80000000, 0xe000, 0x40, 0x1, 0x10001}, &(0x7f00000004c0)={0x1e, 0x9, 0x7, 0x1, 0x0, 0x4, 0x100000001, 0x3ff}, &(0x7f0000000500)={0x1, 0xff, 0x4, 0x80, 0x100000000, 0x3, 0x5, 0x1999}, &(0x7f0000001580)={r6, r7+10000000}, &(0x7f0000001600)={&(0x7f00000015c0)={[0xffff]}, 0x8}) recvfrom(r5, &(0x7f0000000540)=""/4096, 0x1000, 0x10022, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x4, 0x3, {0xa, 0x4e22, 0x8, @private1, 0x7f}}}, 0x80) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x13, 0x0, &(0x7f00000000c0)) r8 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r8, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 2.737969134s ago: executing program 4 (id=179): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000980)={[&(0x7f00000007c0)=',@:\x00', &(0x7f0000000800)='/dev/autofs\x00', &(0x7f0000000840)='-%@@^$\'^\x00', &(0x7f0000000880)='-\x00', &(0x7f00000008c0)='com.apple.system.Security\x00', &(0x7f0000000900)='*{].\x00', &(0x7f0000000940)='%]\x14\x00']}, &(0x7f0000000b80)={[&(0x7f00000009c0)='GPL\x00', &(0x7f0000000a00)=',:/-#\x00', &(0x7f0000000a40)='autofs\x00', &(0x7f0000000a80)='GPL\x00', &(0x7f0000000ac0)='!\x00', &(0x7f0000000b00)='\',-[\'-*{,-#\x00', &(0x7f0000000b40)='/dev/autofs\x00']}, 0x1000) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0), &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) 2.706244436s ago: executing program 2 (id=180): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0xc132, r0, 0x1000) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x34, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x900}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x57}]}, 0x34}}, 0x8080) 1.21225497s ago: executing program 2 (id=181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x2, 0x0, 0x7f, 0x40, 0x800, 0x0, 0x5a1, 0x85f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x26040000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 1.20639785s ago: executing program 4 (id=182): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r2, 0x0, 0x0) bind$alg(r2, 0x0, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600), 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) 1.19858354s ago: executing program 5 (id=183): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket(0x2, 0x801, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000500)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 818.314409ms ago: executing program 3 (id=184): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = creat(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(0x0, 0x1) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f00000000c0)=ANY=[], 0xff, 0x14f4, &(0x7f0000001540)="$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") ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) 49.018617ms ago: executing program 4 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000840)={0x5, @output={0x0, 0x1, {0x9, 0xfffffff9}, 0x101, 0x2}}) 0s ago: executing program 5 (id=186): ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') geteuid() socket(0x10, 0x3, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 64.072389][ T4171] cgroup: Unknown subsys name 'net' [ 64.197030][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.608052][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.007215][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.047297][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.134564][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.166541][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.217675][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.225543][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.233984][ T4189] device bridge_slave_0 entered promiscuous mode [ 67.264110][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.278795][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.286250][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.295194][ T4189] device bridge_slave_1 entered promiscuous mode [ 67.335177][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.342424][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.350534][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.385616][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.392904][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.400719][ T4185] device bridge_slave_1 entered promiscuous mode [ 67.410191][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.435784][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.442979][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.451032][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.468210][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.488071][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.495384][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.503753][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.543350][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.552810][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.559901][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.568933][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.579296][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.590671][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.618752][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.626140][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.634687][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.642579][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.649669][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.657690][ T4194] device bridge_slave_0 entered promiscuous mode [ 67.667174][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.693764][ T4189] team0: Port device team_slave_0 added [ 67.702182][ T4191] team0: Port device team_slave_0 added [ 67.727090][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.734551][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.743102][ T4194] device bridge_slave_1 entered promiscuous mode [ 67.752127][ T4191] team0: Port device team_slave_1 added [ 67.759068][ T4189] team0: Port device team_slave_1 added [ 67.774793][ T4185] team0: Port device team_slave_0 added [ 67.782765][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.794597][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.829858][ T4185] team0: Port device team_slave_1 added [ 67.858528][ T4184] team0: Port device team_slave_0 added [ 67.866996][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.874208][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.900745][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.913543][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.920537][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.947344][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.966481][ T4184] team0: Port device team_slave_1 added [ 67.980754][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.991259][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.998380][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.024405][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.049117][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.056160][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.082410][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.113614][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.132885][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.139852][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.166292][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.178415][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.185615][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.211774][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.237010][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.244257][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.270716][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.282943][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.289911][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.315963][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.342671][ T4194] team0: Port device team_slave_0 added [ 68.352422][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.359372][ T4189] device hsr_slave_1 entered promiscuous mode [ 68.402446][ T4194] team0: Port device team_slave_1 added [ 68.417740][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.424745][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.431378][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.439330][ T4191] Cannot create hsr debugfs directory [ 68.490301][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.497650][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.523797][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.536242][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.543373][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.569589][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.584533][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.591270][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.598555][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.606271][ T4184] Cannot create hsr debugfs directory [ 68.623112][ T4185] device hsr_slave_0 entered promiscuous mode [ 68.630183][ T4185] device hsr_slave_1 entered promiscuous mode [ 68.636954][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.644723][ T4185] Cannot create hsr debugfs directory [ 68.662558][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 68.751733][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.758147][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 68.771588][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.803403][ T4194] device hsr_slave_0 entered promiscuous mode [ 68.810351][ T4194] device hsr_slave_1 entered promiscuous mode [ 68.817495][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.825415][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 68.831681][ T4194] Cannot create hsr debugfs directory [ 69.040352][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.056109][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.090559][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.117876][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.132704][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.143075][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.168490][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.198243][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.222454][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.242002][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.258992][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.281540][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.367462][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.382246][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.393498][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.408414][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.431046][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.463986][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.485010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.495111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.518402][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.527216][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.538000][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.548839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.558919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.569135][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.576472][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.585934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.605427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.614514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.623714][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.630806][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.639562][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.679536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.712358][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.720426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.736333][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.759539][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.766833][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.777352][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.786593][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.794830][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.803808][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.839641][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.850494][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.860616][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.869988][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.878775][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.885909][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.894814][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.903370][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.911761][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.920344][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.929131][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.938600][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.948230][ T1434] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.955367][ T1434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.963589][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.976693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.989120][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.008281][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.026335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.046123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.055756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.068070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.077313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.090782][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.098058][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.113880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.123751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.133245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.142040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.150551][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.157677][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.167374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.178025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.216195][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.226114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.235686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.250120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.261346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.276970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.286480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.306771][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.323241][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.332421][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.350125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.368223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.386822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.395208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.434182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.443873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.455655][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.462783][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.472158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.481081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.491718][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.498805][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.510341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.519091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.528185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.536899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.545893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.555019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.564159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.572550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.580244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.593970][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.603234][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.620955][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.643436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.662044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.676391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.694233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.703503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.712441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.720168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.753022][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 70.765725][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.786735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.801958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.810524][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.817670][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.826223][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 70.832438][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 70.838529][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 70.839238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.854129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.863244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.872274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.880972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.889473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.898267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.907366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.912328][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 70.917700][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.928476][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.942251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.950240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.961238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.970771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.995770][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.005318][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.047490][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.072335][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.090962][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.099715][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.108776][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.124107][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.133629][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.143076][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.152249][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.161111][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.177184][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.187949][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.215384][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.224474][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.262288][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.278313][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.304792][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311301][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.318803][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.356683][ T4189] device veth0_vlan entered promiscuous mode [ 71.370995][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.380387][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.389589][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.399795][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.408822][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.434667][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.453266][ T4189] device veth1_vlan entered promiscuous mode [ 71.460325][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.473914][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.492225][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.551709][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.560642][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.573500][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.604663][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.622520][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.648109][ T4189] device veth0_macvtap entered promiscuous mode [ 71.670961][ T4189] device veth1_macvtap entered promiscuous mode [ 71.680216][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.690865][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.707874][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.720112][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.729701][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.739758][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.753359][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.761554][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.780615][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.791289][ T4184] device veth0_vlan entered promiscuous mode [ 71.817462][ T4191] device veth0_vlan entered promiscuous mode [ 71.824550][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.833112][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.840694][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.850300][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.862512][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.870877][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.879725][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.888281][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.901670][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.918963][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.933779][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.945005][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.957240][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.966701][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.976320][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.985419][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.006735][ T4191] device veth1_vlan entered promiscuous mode [ 72.015152][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.026019][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.034703][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.043673][ T4184] device veth1_vlan entered promiscuous mode [ 72.073984][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.092732][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.100911][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.110568][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.119530][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.138706][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.148685][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.178513][ T4184] device veth0_macvtap entered promiscuous mode [ 72.203322][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.212794][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.221029][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.229977][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.260845][ T4184] device veth1_macvtap entered promiscuous mode [ 72.294289][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.304424][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.314146][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.323083][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.332921][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.350249][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.359466][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.368407][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.376819][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.385342][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.395837][ T4185] device veth0_vlan entered promiscuous mode [ 72.413659][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.425158][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.437603][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.462544][ T4191] device veth0_macvtap entered promiscuous mode [ 72.470275][ T4194] device veth0_vlan entered promiscuous mode [ 72.477264][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.487260][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.496106][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.510672][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.522160][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.534588][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.554074][ T4191] device veth1_macvtap entered promiscuous mode [ 72.575183][ T4185] device veth1_vlan entered promiscuous mode [ 72.582592][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.591465][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.606074][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.615544][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.624418][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.634173][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.644197][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.655119][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.665009][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.674919][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.684154][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.715520][ T4194] device veth1_vlan entered promiscuous mode [ 72.728943][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.740680][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.752451][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.763454][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.775210][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.809710][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.816327][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.826087][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 72.834292][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.834857][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.846020][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.858985][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.868849][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.878298][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.887935][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.899268][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.910819][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.913288][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 72.923794][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.937716][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 72.942355][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.952454][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 72.968865][ T4194] device veth0_macvtap entered promiscuous mode [ 72.981180][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.989760][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 72.996812][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.005680][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.014808][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.023709][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.045720][ T4194] device veth1_macvtap entered promiscuous mode [ 73.069870][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.089807][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.100551][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.109491][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.150798][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.165639][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.179411][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.190457][ T4185] device veth0_macvtap entered promiscuous mode [ 73.213587][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.226838][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.237348][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.248033][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.260567][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.271641][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.283108][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.293465][ T4185] device veth1_macvtap entered promiscuous mode [ 73.316266][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.332191][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.340663][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.358716][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.372219][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.385161][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.395352][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.413487][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.427753][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.438496][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.458991][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.481751][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.517723][ T4269] fuse: Unknown parameter 'fd00000000000000000000' [ 73.540003][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.608491][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.641203][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.680049][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.693987][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.782608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.827848][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.864342][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.884841][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.909309][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.941057][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.042532][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.155927][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.175480][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.192090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 74.260040][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.308447][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.341193][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.368355][ T4271] ======================================================= [ 74.368355][ T4271] WARNING: The mand mount option has been deprecated and [ 74.368355][ T4271] and is ignored by this kernel. Remove the mand [ 74.368355][ T4271] option from the mount to silence this warning. [ 74.368355][ T4271] ======================================================= [ 74.372029][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.427522][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.437617][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.449490][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.461136][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.473776][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.484257][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.494267][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.505789][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.515886][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.526598][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.536672][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.547343][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.560102][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.583947][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.601011][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.619839][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.629032][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.644041][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.687185][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.702283][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716894][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726995][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779967][ T4273] loop3: detected capacity change from 0 to 1024 [ 74.835015][ T367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.844371][ T367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.903005][ T4225] Bluetooth: hci0: command 0x0419 tx timeout [ 74.909903][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.982391][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 74.993983][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 75.015174][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 75.033189][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.041050][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.064873][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 75.092893][ T4273] mkiss: ax0: crc mode is auto. [ 75.117546][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.149469][ T367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.158532][ T367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.255927][ T367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.291843][ T367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.335245][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.344176][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.362849][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.372259][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.383782][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.397590][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.409103][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.417531][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.266387][ T1434] hfsplus: b-tree write err: -5, ino 25 [ 76.284499][ T1434] hfsplus: b-tree write err: -5, ino 4 [ 76.290238][ T1434] hfsplus: b-tree write err: -5, ino 2 [ 76.451266][ T4292] loop0: detected capacity change from 0 to 128 [ 76.861668][ T4299] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 77.176484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 77.191466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 77.202189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.211244][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.222144][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 77.231158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.931063][ T4317] loop3: detected capacity change from 0 to 4096 [ 82.206162][ T4324] Process accounting resumed [ 82.385393][ T4332] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.427699][ T4331] tipc: Failed to remove unknown binding: 66,0,0/0:1038669662/1038669663 [ 82.457599][ T4333] tipc: Failed to remove unknown binding: 66,0,0/0:3605410770/3605410772 [ 82.488771][ T4331] tipc: Failed to remove unknown binding: 66,0,0/0:1038669662/1038669663 [ 82.540628][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 82.596236][ T4331] loop4: detected capacity change from 0 to 128 [ 82.682315][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.738628][ T4329] bond0: (slave rose0): Enslaving as an active interface with an up link [ 82.756953][ T4331] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 83.021851][ T4331] Zero length message leads to an empty skb [ 83.152056][ T4343] loop3: detected capacity change from 0 to 4096 [ 83.242165][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 83.281868][ T4349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.361255][ T4353] loop4: detected capacity change from 0 to 512 [ 84.325532][ T4353] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 84.386568][ T4353] System zones: 1-12 [ 84.462021][ T4353] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.22: corrupted in-inode xattr [ 84.661890][ T4353] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.22: couldn't read orphan inode 15 (err -117) [ 85.211581][ T4353] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 85.961328][ T4353] EXT4-fs (loop4): shut down requested (2) [ 86.241837][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.664171][ T13] cfg80211: failed to load regulatory.db [ 87.334556][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.061638][ T4378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.242899][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.281853][ T4230] Bluetooth: hci4: command 0x0409 tx timeout [ 88.825030][ T4394] loop2: detected capacity change from 0 to 40427 [ 89.871877][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 92.151100][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 92.386489][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.738109][ T4420] loop4: detected capacity change from 0 to 4096 [ 93.735338][ T4430] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.996036][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 94.287384][ T4434] loop2: detected capacity change from 0 to 40427 [ 94.296919][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 94.401870][ T4434] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.409903][ T4434] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.425837][ T4434] F2FS-fs (loop2): invalid crc value [ 94.458130][ T4434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.637404][ T4434] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.644927][ T4434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.760196][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.781918][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.903798][ T4376] device bridge_slave_0 entered promiscuous mode [ 95.994856][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.020349][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.341594][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 96.421940][ T4376] device bridge_slave_1 entered promiscuous mode [ 96.576029][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.666547][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.836961][ T4376] team0: Port device team_slave_0 added [ 96.870795][ T4376] team0: Port device team_slave_1 added [ 96.881652][ T4266] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.175330][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.199130][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.277480][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.297249][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.305930][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.841814][ T4466] ubi31: attaching mtd0 [ 97.862963][ T4466] ubi31: scanning is finished [ 97.868055][ T4466] ubi31: empty MTD device detected [ 99.010013][ T4266] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.00 [ 99.019780][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.037772][ T4466] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 99.105553][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.128343][ T4266] usb 5-1: config 0 descriptor?? [ 99.176335][ T4266] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 99.205600][ T4266] usb 5-1: Detected SIO [ 99.279280][ T4266] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 99.356171][ T4376] device hsr_slave_0 entered promiscuous mode [ 99.401668][ T4376] device hsr_slave_1 entered promiscuous mode [ 99.452143][ T4376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.471298][ T4265] usb 5-1: USB disconnect, device number 2 [ 99.481906][ T4376] Cannot create hsr debugfs directory [ 99.633692][ T4477] loop2: detected capacity change from 0 to 32768 [ 99.696152][ T4265] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.982888][ T4265] ftdi_sio 5-1:0.0: device disconnected [ 100.743855][ T4483] overlayfs: missing 'lowerdir' [ 101.303272][ T9] device hsr_slave_0 left promiscuous mode [ 101.428726][ T9] device hsr_slave_1 left promiscuous mode [ 101.532259][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.564272][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.672520][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.736271][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.824842][ T9] device bridge_slave_1 left promiscuous mode [ 102.261632][ T4490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.294509][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.355816][ T9] device bridge_slave_0 left promiscuous mode [ 102.368184][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.382893][ T4498] loop0: detected capacity change from 0 to 128 [ 102.486433][ T9] device veth1_macvtap left promiscuous mode [ 102.512003][ T4498] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.543341][ T9] device veth0_macvtap left promiscuous mode [ 102.571530][ T4498] hpfs: filesystem error: improperly stopped [ 102.577673][ T4498] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.588348][ T9] device veth1_vlan left promiscuous mode [ 102.640215][ T9] device veth0_vlan left promiscuous mode [ 102.753527][ T4498] hpfs: You really don't want any checks? You are crazy... [ 102.760817][ T4498] hpfs: Code page index out of array [ 102.989359][ T4498] hpfs: code page support is disabled [ 103.002484][ T4498] hpfs: hpfs_map_4sectors(): unaligned read [ 103.014544][ T4498] hpfs: hpfs_map_4sectors(): unaligned read [ 103.021625][ T4498] hpfs: filesystem error: unable to find root dir [ 104.289601][ T4518] loop0: detected capacity change from 0 to 1024 [ 105.433993][ T4358] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 105.865272][ T4358] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.883195][ T4518] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.52: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.898751][ T4518] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 105.907106][ T4518] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.52: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.921637][ T4518] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 105.930787][ T4518] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.52: Failed to acquire dquot type 0 [ 105.943277][ T4518] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 105.956211][ T4518] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.52: mark_inode_dirty error [ 105.969030][ T4518] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 105.979687][ T4518] EXT4-fs (loop0): 1 orphan inode deleted [ 105.985533][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 106.040303][ T4516] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.52: Invalid inode table block 1 in block_group 0 [ 106.053320][ T4239] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.068933][ T4516] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 106.153961][ T4239] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 106.200070][ T4239] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 106.239307][ T4527] loop4: detected capacity change from 0 to 1024 [ 106.335853][ T4527] EXT4-fs (loop4): quotafile must be on filesystem root [ 106.439056][ T4527] loop4: detected capacity change from 0 to 1024 [ 106.485333][ T4527] EXT4-fs (loop4): inline encryption not supported [ 106.492124][ T4527] EXT4-fs (loop4): blocks per group (0) and clusters per group (32) inconsistent [ 107.309924][ T4304] Bluetooth: hci5: command 0x1003 tx timeout [ 107.336507][ T146] Bluetooth: hci5: sending frame failed (-49) [ 107.473707][ T9] team0 (unregistering): Port device team_slave_1 removed [ 107.488771][ T9] team0 (unregistering): Port device team_slave_0 removed [ 107.518272][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.591207][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.691870][ T9] bond0 (unregistering): Released all slaves [ 107.857268][ T26] audit: type=1800 audit(1774562443.227:2): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 107.857967][ T4517] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 107.888222][ T4517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 107.898181][ T4517] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 108.254403][ T4376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.278059][ T4376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.304692][ T4376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.332472][ T4376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.560020][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.632188][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.685866][ T4557] binder: 4555:4557 ioctl c0285840 0 returned -22 [ 108.973820][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.115467][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.350003][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.382177][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 109.390911][ T146] Bluetooth: hci5: sending frame failed (-49) [ 109.434850][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.554605][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.561780][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.712719][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.725726][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.804085][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.870598][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.877744][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.930482][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.994896][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.039376][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.059163][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.088717][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.097596][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.108080][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.117849][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.126784][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.146567][ T4376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.174716][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.189930][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.239604][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.301547][ T4228] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 110.731820][ T4228] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.865704][ T4228] usb 4-1: config 0 has no interface number 0 [ 111.064540][ T4228] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 111.090427][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.200557][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.236535][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.243701][ T4228] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 111.291486][ T4228] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.365795][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.385349][ T4587] loop4: detected capacity change from 0 to 128 [ 111.411555][ T3520] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.423486][ T4228] usb 4-1: config 0 descriptor?? [ 111.453490][ T4568] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.462319][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 111.497400][ T4228] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.620390][ T4587] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 111.650401][ T4587] FAT-fs (loop4): Filesystem has been set read-only [ 111.682410][ T3520] usb 3-1: Using ep0 maxpacket: 16 [ 111.802036][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.820805][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.842228][ T3520] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.858793][ T1434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.886848][ T3520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.948725][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.954263][ T3520] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.972320][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.996445][ T3520] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.012304][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.113867][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.155663][ T4376] device veth0_vlan entered promiscuous mode [ 112.220894][ T4376] device veth1_vlan entered promiscuous mode [ 112.339511][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.358616][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.419183][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.490570][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.542727][ T4376] device veth0_macvtap entered promiscuous mode [ 112.578306][ T3520] usb 3-1: config 0 descriptor?? [ 112.600305][ T13] usb 4-1: USB disconnect, device number 2 [ 112.607234][ T4376] device veth1_macvtap entered promiscuous mode [ 112.693449][ T4611] loop3: detected capacity change from 0 to 4096 [ 112.758442][ T4611] EXT4-fs (loop3): inline encryption not supported [ 112.895248][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.909283][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.919297][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.192720][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.355782][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.750900][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.761268][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.788886][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.800624][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.812774][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.839710][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.874618][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.909918][ T3520] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 113.919355][ T3520] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 113.928669][ T3520] microsoft 0003:045E:07DA.0001: usage index exceeded [ 113.935783][ T3520] microsoft 0003:045E:07DA.0001: item 0 4 2 2 parsing failed [ 113.944262][ T3520] microsoft 0003:045E:07DA.0001: parse failed [ 113.950399][ T3520] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 113.959634][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.991303][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.030352][ T4611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 114.046162][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.057791][ T4611] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 114.080478][ T4611] System zones: 0-5 [ 114.087819][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.109372][ T4611] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 114.139103][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.161446][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.231041][ T4619] udc-core: couldn't find an available UDC or it's busy [ 114.244109][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.251602][ T4619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.290249][ T4376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.317076][ T4376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.346818][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.368126][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.380271][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.404946][ T4376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.428553][ T4376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.460760][ T4376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.479151][ T4376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.710709][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.723173][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.745698][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.763548][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.773748][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.792516][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.333612][ T23] usb 3-1: USB disconnect, device number 2 [ 115.572755][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.587992][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.691504][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 115.760146][ T4184] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 115.942141][ T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.000314][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.131523][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.908934][ T13] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 116.918739][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.982497][ T13] usb 6-1: config 0 descriptor?? [ 117.013638][ T4665] loop2: detected capacity change from 0 to 164 [ 117.783949][ T13] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x2 [ 117.841649][ T13] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0 [ 118.310768][ T13] hid-rmi 0003:0461:4E72.0002: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0 [ 118.409572][ T13] usb 6-1: USB disconnect, device number 2 [ 118.646812][ T4228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.784772][ T4688] loop4: detected capacity change from 0 to 32768 [ 118.865371][ T4688] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.76 (4688) [ 118.891306][ T4688] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 118.900556][ T4688] BTRFS info (device loop4): enabling disk space caching [ 118.908139][ T4688] BTRFS info (device loop4): force clearing of disk cache [ 118.915764][ T4688] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.925631][ T4688] BTRFS info (device loop4): use zstd compression, level 3 [ 118.932985][ T4688] BTRFS info (device loop4): disk space caching is enabled [ 118.940215][ T4688] BTRFS info (device loop4): has skinny extents [ 119.160267][ T4685] fido_id[4685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 119.211655][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.284480][ T4228] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 119.375043][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.440818][ T4675] ODEBUG: Out of memory. ODEBUG disabled [ 119.485134][ T4228] usb 4-1: config 0 descriptor?? [ 119.752333][ T4228] option 4-1:0.0: GSM modem (1-port) converter detected [ 121.252214][ T4723] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 121.262815][ T4688] BTRFS info (device loop4): enabling ssd optimizations [ 121.326723][ T21] usb 4-1: USB disconnect, device number 3 [ 121.382595][ T4688] BTRFS info (device loop4): clearing free space tree [ 121.390153][ T4688] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.400911][ T4688] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.368501][ T21] option 4-1:0.0: device disconnected [ 124.967004][ T4748] device syzkaller0 entered promiscuous mode [ 125.063566][ T4178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop4 scanned by udevd (4178) [ 127.222457][ T4523] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.511908][ T4523] usb 5-1: Using ep0 maxpacket: 8 [ 127.626619][ T4797] loop2: detected capacity change from 0 to 2048 [ 127.661797][ T4523] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 127.684957][ T4523] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.734819][ T4797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.741812][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.761963][ T4523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.789733][ T4523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.803808][ T4523] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.820676][ T4523] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.832321][ T4523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.461725][ T21] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 129.906664][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.031231][ T21] usb 4-1: Product: syz [ 130.085300][ T21] usb 4-1: Manufacturer: syz [ 130.144765][ T21] usb 4-1: SerialNumber: syz [ 130.171655][ T4523] usb 5-1: can't set config #16, error -71 [ 130.251939][ T21] usb 4-1: config 0 descriptor?? [ 130.509429][ T4523] usb 5-1: USB disconnect, device number 3 [ 130.541636][ T21] usb 4-1: can't set config #0, error -71 [ 130.554560][ T21] usb 4-1: USB disconnect, device number 4 [ 130.852944][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.100'. [ 131.225591][ T4827] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.412496][ T4830] loop3: detected capacity change from 0 to 512 [ 131.573898][ T4830] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 131.634312][ T4830] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.648778][ T4830] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:510: comm syz.3.104: Block bitmap for bg 0 marked uninitialized [ 131.691560][ T4830] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 131.701152][ T4830] EXT4-fs (loop3): 1 orphan inode deleted [ 131.713476][ T4830] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.135954][ T4840] loop4: detected capacity change from 0 to 32768 [ 132.890472][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896978][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.941611][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.973712][ T4840] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.982328][ T4840] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.015014][ T4848] loop5: detected capacity change from 0 to 512 [ 133.016159][ T4840] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 133.033624][ T4523] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 133.040720][ T4523] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 133.265409][ T4523] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 224ms [ 133.279410][ T4848] EXT4-fs (loop5): Test dummy encryption mode enabled [ 133.281880][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 133.298149][ T4523] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.305216][ T4840] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.411957][ T13] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 133.470624][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.024929][ T4848] EXT4-fs (loop5): Ignoring removed bh option [ 134.031087][ T4848] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.109704][ T4848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.171507][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.183818][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.195307][ T4840] gfs2: fsid=syz:syz.0: found 1 quota changes [ 134.202888][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.216990][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.226101][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.278683][ T4855] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 134.278683][ T4855] inode = 11 2339 [ 134.278683][ T4855] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 134.430417][ T4855] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 134.445392][ T4855] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing. [ 134.488862][ T4848] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.108: inode has both inline data and extents flags [ 135.611358][ T4848] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.108: couldn't read orphan inode 15 (err -117) [ 135.651787][ T13] usb 3-1: usb_control_msg returned -71 [ 135.658027][ T13] usbtmc 3-1:16.0: can't read capabilities [ 136.270251][ T4848] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 136.281100][ T13] usb 3-1: USB disconnect, device number 3 [ 136.467934][ T4866] tipc: Started in network mode [ 136.515052][ T4866] tipc: Node identity aa54b86eda63, cluster identity 4711 [ 137.621735][ T4866] tipc: Enabled bearer , priority 0 [ 137.685089][ T4872] device syzkaller0 entered promiscuous mode [ 138.322347][ T4884] tipc: Resetting bearer [ 138.684103][ T4884] tipc: Disabling bearer [ 138.789447][ T4229] tipc: Node number set to 1882699886 [ 139.512074][ T4855] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 140.376519][ T4855] CPU: 0 PID: 4855 Comm: gfs2_quotad Not tainted syzkaller #0 [ 140.384041][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 140.394124][ T4855] Call Trace: [ 140.397409][ T4855] [ 140.400354][ T4855] dump_stack_lvl+0x188/0x250 [ 140.405052][ T4855] ? schedule_preempt_disabled+0x20/0x20 [ 140.410692][ T4855] ? show_regs_print_info+0x20/0x20 [ 140.415895][ T4855] ? load_image+0x400/0x400 [ 140.420420][ T4855] ? preempt_schedule_thunk+0x16/0x18 [ 140.425824][ T4855] gfs2_assert_warn_i+0x18f/0x2c0 [ 140.430892][ T4855] gfs2_quota_cleanup+0x4b4/0x6a0 [ 140.435939][ T4855] gfs2_make_fs_ro+0x440/0x620 [ 140.440708][ T4855] ? __might_sleep+0xf0/0xf0 [ 140.445309][ T4855] ? gfs2_dinode_out+0xb00/0xb00 [ 140.450275][ T4855] ? _raw_spin_unlock+0x24/0x40 [ 140.455159][ T4855] ? gfs2_glock_nq+0xcb0/0x1550 [ 140.460024][ T4855] ? init_wait_entry+0xd0/0xd0 [ 140.464806][ T4855] gfs2_withdraw+0x610/0x1490 [ 140.469504][ T4855] ? gfs2_lm+0x240/0x240 [ 140.473749][ T4855] ? __schedule+0x11f7/0x43c0 [ 140.478434][ T4855] ? gfs2_freeze_lock+0x52/0xc0 [ 140.483301][ T4855] ? gfs2_consist_inode_i+0xc0/0xe0 [ 140.488523][ T4855] gfs2_inode_refresh+0xb64/0xff0 [ 140.493556][ T4855] ? do_promote+0x71a/0xab0 [ 140.498061][ T4855] ? gfs2_inode_metasync+0xf0/0xf0 [ 140.503174][ T4855] ? __lock_acquire+0x7d10/0x7d10 [ 140.508211][ T4855] inode_go_lock+0x127/0x470 [ 140.512813][ T4855] do_promote+0x741/0xab0 [ 140.517152][ T4855] finish_xmote+0x4df/0xb00 [ 140.521666][ T4855] do_xmote+0x7b6/0x1120 [ 140.525933][ T4855] gfs2_glock_nq+0xc7a/0x1550 [ 140.530675][ T4855] do_sync+0x4ab/0xc40 [ 140.534845][ T4855] ? slot_put+0x1e0/0x1e0 [ 140.539187][ T4855] ? __lock_acquire+0x7d10/0x7d10 [ 140.544231][ T4855] ? do_raw_spin_lock+0x128/0x2f0 [ 140.549272][ T4855] ? do_sync+0x4a3/0xc40 [ 140.553803][ T4855] ? do_raw_spin_unlock+0x11d/0x230 [ 140.559020][ T4855] gfs2_quota_sync+0x32c/0x700 [ 140.563808][ T4855] gfs2_quotad+0x403/0x890 [ 140.568247][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 140.573365][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 140.579362][ T4855] ? init_wait_entry+0xd0/0xd0 [ 140.584167][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 140.590069][ T4855] ? __kthread_parkme+0x157/0x1b0 [ 140.595103][ T4855] kthread+0x436/0x520 [ 140.599177][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 140.604292][ T4855] ? kthread_blkcg+0xd0/0xd0 [ 140.608887][ T4855] ret_from_fork+0x1f/0x30 [ 140.613318][ T4855] [ 140.846486][ T4855] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 141.483564][ T4855] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 141.496119][ T4855] gfs2: fsid=syz:syz.0: File system withdrawn [ 141.504629][ T4855] CPU: 1 PID: 4855 Comm: gfs2_quotad Not tainted syzkaller #0 [ 141.512160][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.522237][ T4855] Call Trace: [ 141.525533][ T4855] [ 141.528498][ T4855] dump_stack_lvl+0x188/0x250 [ 141.533200][ T4855] ? kobject_uevent_env+0x371/0x890 [ 141.538524][ T4855] ? show_regs_print_info+0x20/0x20 [ 141.543751][ T4855] ? load_image+0x400/0x400 [ 141.548279][ T4855] ? kobject_uevent_env+0x371/0x890 [ 141.553509][ T4855] ? lockref_put_or_lock+0x6e/0xb0 [ 141.558654][ T4855] gfs2_withdraw+0x1149/0x1490 [ 141.563462][ T4855] ? gfs2_lm+0x240/0x240 [ 141.567744][ T4855] ? __schedule+0x11f7/0x43c0 [ 141.572468][ T4855] ? gfs2_consist_inode_i+0xc0/0xe0 [ 141.577716][ T4855] gfs2_inode_refresh+0xb64/0xff0 [ 141.582788][ T4855] ? do_promote+0x71a/0xab0 [ 141.587325][ T4855] ? gfs2_inode_metasync+0xf0/0xf0 [ 141.592468][ T4855] ? __lock_acquire+0x7d10/0x7d10 [ 141.597535][ T4855] inode_go_lock+0x127/0x470 [ 141.602165][ T4855] do_promote+0x741/0xab0 [ 141.606543][ T4855] finish_xmote+0x4df/0xb00 [ 141.611116][ T4855] do_xmote+0x7b6/0x1120 [ 141.615407][ T4855] gfs2_glock_nq+0xc7a/0x1550 [ 141.620139][ T4855] do_sync+0x4ab/0xc40 [ 141.624252][ T4855] ? slot_put+0x1e0/0x1e0 [ 141.628630][ T4855] ? __lock_acquire+0x7d10/0x7d10 [ 141.633687][ T4855] ? do_raw_spin_lock+0x128/0x2f0 [ 141.639007][ T4855] ? do_sync+0x4a3/0xc40 [ 141.643286][ T4855] ? do_raw_spin_unlock+0x11d/0x230 [ 141.648518][ T4855] gfs2_quota_sync+0x32c/0x700 [ 141.653361][ T4855] gfs2_quotad+0x403/0x890 [ 141.657833][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 141.662991][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 141.668994][ T4855] ? init_wait_entry+0xd0/0xd0 [ 141.673794][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.679717][ T4855] ? __kthread_parkme+0x157/0x1b0 [ 141.684773][ T4855] kthread+0x436/0x520 [ 141.688878][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 141.694028][ T4855] ? kthread_blkcg+0xd0/0xd0 [ 141.698645][ T4855] ret_from_fork+0x1f/0x30 [ 141.703105][ T4855] [ 141.953570][ T4922] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 141.962023][ T4922] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 141.970682][ T4922] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 143.591894][ T4931] autofs4:pid:4931:autofs_fill_super: called with bogus options [ 145.037790][ T4938] tipc: Started in network mode [ 145.061620][ T4938] tipc: Node identity c67000f89be6, cluster identity 4711 [ 145.088744][ T4938] tipc: Enabled bearer , priority 0 [ 145.333799][ T4940] device syzkaller0 entered promiscuous mode [ 146.645538][ T4230] tipc: Node number set to 1570111736 [ 146.702074][ T4965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.759514][ T4949] tipc: Resetting bearer [ 147.114723][ T4949] tipc: Disabling bearer [ 147.952688][ T4979] autofs4:pid:4979:autofs_fill_super: called with bogus options [ 149.078045][ T4989] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 149.086592][ T4989] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 149.095190][ T4989] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 151.331627][ T4195] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 151.331714][ T4195] Bluetooth: hci4: unknown advertising packet type: 0x6c [ 151.340403][ T4195] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 151.347917][ T4195] Bluetooth: hci4: Malicious advertising data. [ 154.422305][ T5030] autofs4:pid:5030:autofs_fill_super: called with bogus options [ 154.507514][ T5035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.525013][ T5033] tipc: Started in network mode [ 154.536061][ T5033] tipc: Node identity 3254a6d8ca5b, cluster identity 4711 [ 154.592020][ T5033] tipc: Enabled bearer , priority 0 [ 154.622343][ T5043] device syzkaller0 entered promiscuous mode [ 154.689768][ T5033] tipc: Resetting bearer [ 154.719664][ T5031] tipc: Resetting bearer [ 154.758757][ T5031] tipc: Disabling bearer [ 155.113694][ T4195] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 155.113772][ T4195] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 155.122535][ T4195] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 155.129874][ T4195] Bluetooth: hci0: Malicious advertising data. [ 156.278430][ T5066] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 156.286928][ T5066] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 156.295542][ T5066] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 160.407105][ T5098] tipc: Started in network mode [ 160.412227][ T5098] tipc: Node identity 62ee906fe4b4, cluster identity 4711 [ 160.421166][ T5098] tipc: Enabled bearer , priority 0 [ 160.432109][ T5098] device syzkaller0 entered promiscuous mode [ 160.642468][ T5104] autofs4:pid:5104:autofs_fill_super: called with bogus options [ 161.399046][ T5097] tipc: Resetting bearer [ 161.840665][ T5097] tipc: Disabling bearer [ 161.986338][ T4230] tipc: Node number set to 2254082159 [ 162.038899][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 162.040335][ T4195] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 162.048076][ T4195] Bluetooth: hci1: Malicious advertising data. [ 164.233188][ T5130] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 164.241538][ T5130] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 164.250140][ T5130] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 165.835249][ T5148] loop5: detected capacity change from 0 to 8 [ 166.899055][ T5155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 167.079505][ T5155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 167.513204][ T26] audit: type=1800 audit(1774562502.887:3): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.176" name="file0" dev="loop5" ino=1 res=0 errno=0 [ 169.147035][ T5172] autofs4:pid:5172:autofs_fill_super: called with bogus options [ 170.005108][ T5174] tipc: Enabled bearer , priority 0 [ 170.301645][ T5176] device syzkaller0 entered promiscuous mode [ 171.113896][ T5173] tipc: Resetting bearer [ 171.304209][ T5195] loop3: detected capacity change from 0 to 256 [ 171.404151][ T4195] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 171.404232][ T4195] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 171.413429][ T4195] Bluetooth: hci2: Malicious advertising data. [ 171.482234][ T5195] exfat: Unknown parameter 'u~FCœã˜‡˜÷¢µŒvä_‘¨G!mm Ïû[ÕQfþÈ0­ªé' [ 171.491824][ T5173] tipc: Disabling bearer [ 171.831506][ T4855] ================================================================== [ 171.839634][ T4855] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 171.847078][ T4855] Read of size 8 at addr ffff88801d9bcbb0 by task gfs2_quotad/4855 [ 171.854996][ T4855] [ 171.857346][ T4855] CPU: 1 PID: 4855 Comm: gfs2_quotad Not tainted syzkaller #0 [ 171.864832][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.874910][ T4855] Call Trace: [ 171.878214][ T4855] [ 171.881178][ T4855] dump_stack_lvl+0x188/0x250 [ 171.885884][ T4855] ? show_regs_print_info+0x20/0x20 [ 171.891119][ T4855] ? load_image+0x400/0x400 [ 171.895647][ T4855] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 171.901127][ T4855] ? __lock_acquire+0x13bc/0x7d10 [ 171.906192][ T4855] ? verify_lock_unused+0x140/0x140 [ 171.911418][ T4855] print_address_description+0x60/0x2d0 [ 171.916988][ T4855] ? __lock_acquire+0x106/0x7d10 [ 171.921947][ T4855] kasan_report+0xdf/0x130 [ 171.926392][ T4855] ? __lock_acquire+0x106/0x7d10 [ 171.931356][ T4855] __lock_acquire+0x106/0x7d10 [ 171.936170][ T4855] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 171.942187][ T4855] ? lock_chain_count+0x20/0x20 [ 171.947060][ T4855] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 171.952544][ T4855] ? verify_lock_unused+0x140/0x140 [ 171.957777][ T4855] ? lockdep_hardirqs_off+0x70/0x100 [ 171.963095][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 171.969008][ T4855] ? lockdep_hardirqs_on+0x94/0x140 [ 171.974237][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 171.980152][ T4855] ? _raw_spin_unlock+0x40/0x40 [ 171.985030][ T4855] lock_acquire+0x19e/0x400 [ 171.989824][ T4855] ? finish_wait+0xb5/0x1d0 [ 171.994364][ T4855] ? timer_delete_sync+0x20/0x20 [ 171.999336][ T4855] ? __mod_timer+0x91e/0xd00 [ 172.003945][ T4855] ? read_lock_is_recursive+0x10/0x10 [ 172.009376][ T4855] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 172.014988][ T4855] ? lockdep_hardirqs_off+0x70/0x100 [ 172.020305][ T4855] _raw_spin_lock_irqsave+0xb0/0x100 [ 172.025614][ T4855] ? finish_wait+0xb5/0x1d0 [ 172.030151][ T4855] ? _raw_spin_lock+0x40/0x40 [ 172.034844][ T4855] ? update_process_times+0x200/0x200 [ 172.040256][ T4855] finish_wait+0xb5/0x1d0 [ 172.044619][ T4855] gfs2_quotad+0x710/0x890 [ 172.049072][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 172.054215][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 172.060132][ T4855] ? init_wait_entry+0xd0/0xd0 [ 172.064916][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 172.070842][ T4855] ? __kthread_parkme+0x157/0x1b0 [ 172.075910][ T4855] kthread+0x436/0x520 [ 172.080004][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 172.085231][ T4855] ? kthread_blkcg+0xd0/0xd0 [ 172.089845][ T4855] ret_from_fork+0x1f/0x30 [ 172.094293][ T4855] [ 172.097328][ T4855] [ 172.099666][ T4855] Allocated by task 4840: [ 172.104007][ T4855] __kasan_kmalloc+0xb5/0xf0 [ 172.108625][ T4855] gfs2_fill_super+0x17d/0x1f00 [ 172.113501][ T4855] get_tree_bdev+0x3f1/0x610 [ 172.118111][ T4855] gfs2_get_tree+0x4d/0x1e0 [ 172.122634][ T4855] vfs_get_tree+0x88/0x270 [ 172.127074][ T4855] do_new_mount+0x24a/0xa40 [ 172.131600][ T4855] __se_sys_mount+0x2e3/0x3d0 [ 172.136296][ T4855] do_syscall_64+0x4c/0xa0 [ 172.140736][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.146674][ T4855] [ 172.149014][ T4855] The buggy address belongs to the object at ffff88801d9bc000 [ 172.149014][ T4855] which belongs to the cache kmalloc-8k of size 8192 [ 172.163086][ T4855] The buggy address is located 2992 bytes inside of [ 172.163086][ T4855] 8192-byte region [ffff88801d9bc000, ffff88801d9be000) [ 172.176562][ T4855] The buggy address belongs to the page: [ 172.182236][ T4855] page:ffffea0000766e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801d9bc000 pfn:0x1d9b8 [ 172.193707][ T4855] head:ffffea0000766e00 order:3 compound_mapcount:0 compound_pincount:0 [ 172.202058][ T4855] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 172.210069][ T4855] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42280 [ 172.218672][ T4855] raw: ffff88801d9bc000 0000000080020001 00000001ffffffff 0000000000000000 [ 172.227264][ T4855] page dumped because: kasan: bad access detected [ 172.233737][ T4855] page_owner tracks the page as allocated [ 172.239476][ T4855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3850, ts 38048201293, free_ts 38047929175 [ 172.257817][ T4855] get_page_from_freelist+0x1bbd/0x1ca0 [ 172.263400][ T4855] __alloc_pages+0x1ee/0x480 [ 172.268098][ T4855] new_slab+0xc0/0x4b0 [ 172.272185][ T4855] ___slab_alloc+0x80a/0xdd0 [ 172.276800][ T4855] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 172.282192][ T4855] tomoyo_init_log+0x1008/0x1e90 [ 172.287152][ T4855] tomoyo_supervisor+0x38d/0x11f0 [ 172.292204][ T4855] tomoyo_env_perm+0x14e/0x1f0 [ 172.296992][ T4855] tomoyo_find_next_domain+0x1591/0x1a60 [ 172.302662][ T4855] tomoyo_bprm_check_security+0xdd/0x120 [ 172.308315][ T4855] security_bprm_check+0x5e/0x90 [ 172.313277][ T4855] bprm_execve+0xa53/0x1840 [ 172.317885][ T4855] do_execveat_common+0x51e/0x6d0 [ 172.322939][ T4855] __x64_sys_execve+0x8e/0xa0 [ 172.327682][ T4855] do_syscall_64+0x4c/0xa0 [ 172.332178][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.338092][ T4855] page last free stack trace: [ 172.342786][ T4855] free_unref_page_prepare+0x637/0x6c0 [ 172.348270][ T4855] free_unref_page+0x8f/0x2a0 [ 172.353062][ T4855] __unfreeze_partials+0x1a5/0x200 [ 172.358201][ T4855] put_cpu_partial+0x12d/0x190 [ 172.363077][ T4855] qlist_free_all+0x35/0x90 [ 172.367599][ T4855] kasan_quarantine_reduce+0x150/0x160 [ 172.373081][ T4855] __kasan_slab_alloc+0x2f/0xd0 [ 172.377955][ T4855] slab_post_alloc_hook+0x4c/0x380 [ 172.383087][ T4855] __kmalloc+0x127/0x330 [ 172.387445][ T4855] tomoyo_supervisor+0xc90/0x11f0 [ 172.392497][ T4855] tomoyo_env_perm+0x14e/0x1f0 [ 172.397295][ T4855] tomoyo_find_next_domain+0x1591/0x1a60 [ 172.402959][ T4855] tomoyo_bprm_check_security+0xdd/0x120 [ 172.408598][ T4855] security_bprm_check+0x5e/0x90 [ 172.413575][ T4855] bprm_execve+0xa53/0x1840 [ 172.418087][ T4855] do_execveat_common+0x51e/0x6d0 [ 172.423115][ T4855] [ 172.425439][ T4855] Memory state around the buggy address: [ 172.431088][ T4855] ffff88801d9bca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.439491][ T4855] ffff88801d9bcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.447562][ T4855] >ffff88801d9bcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.455711][ T4855] ^ [ 172.461532][ T4855] ffff88801d9bcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.469622][ T4855] ffff88801d9bcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.477822][ T4855] ================================================================== [ 172.485895][ T4855] Disabling lock debugging due to kernel taint [ 172.492067][ T4855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 172.499262][ T4855] CPU: 1 PID: 4855 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 172.508234][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.518331][ T4855] Call Trace: [ 172.521617][ T4855] [ 172.524549][ T4855] dump_stack_lvl+0x188/0x250 [ 172.529228][ T4855] ? show_regs_print_info+0x20/0x20 [ 172.534432][ T4855] ? load_image+0x400/0x400 [ 172.538971][ T4855] panic+0x2e5/0x810 [ 172.542872][ T4855] ? bpf_jit_dump+0xd0/0xd0 [ 172.547374][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 172.553272][ T4855] ? _raw_spin_unlock+0x40/0x40 [ 172.558145][ T4855] ? __lock_acquire+0x106/0x7d10 [ 172.563123][ T4855] check_panic_on_warn+0x80/0xa0 [ 172.568078][ T4855] ? __lock_acquire+0x106/0x7d10 [ 172.573020][ T4855] end_report+0x6d/0xf0 [ 172.577181][ T4855] kasan_report+0x102/0x130 [ 172.581694][ T4855] ? __lock_acquire+0x106/0x7d10 [ 172.586652][ T4855] __lock_acquire+0x106/0x7d10 [ 172.591430][ T4855] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 172.597438][ T4855] ? lock_chain_count+0x20/0x20 [ 172.602289][ T4855] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 172.607768][ T4855] ? verify_lock_unused+0x140/0x140 [ 172.612971][ T4855] ? lockdep_hardirqs_off+0x70/0x100 [ 172.618263][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 172.624153][ T4855] ? lockdep_hardirqs_on+0x94/0x140 [ 172.629349][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 172.635242][ T4855] ? _raw_spin_unlock+0x40/0x40 [ 172.640113][ T4855] lock_acquire+0x19e/0x400 [ 172.644614][ T4855] ? finish_wait+0xb5/0x1d0 [ 172.649124][ T4855] ? timer_delete_sync+0x20/0x20 [ 172.654064][ T4855] ? __mod_timer+0x91e/0xd00 [ 172.658648][ T4855] ? read_lock_is_recursive+0x10/0x10 [ 172.664685][ T4855] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 172.670189][ T4855] ? lockdep_hardirqs_off+0x70/0x100 [ 172.675478][ T4855] _raw_spin_lock_irqsave+0xb0/0x100 [ 172.680762][ T4855] ? finish_wait+0xb5/0x1d0 [ 172.685271][ T4855] ? _raw_spin_lock+0x40/0x40 [ 172.689944][ T4855] ? update_process_times+0x200/0x200 [ 172.695318][ T4855] finish_wait+0xb5/0x1d0 [ 172.699652][ T4855] gfs2_quotad+0x710/0x890 [ 172.704078][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 172.709193][ T4855] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 172.715106][ T4855] ? init_wait_entry+0xd0/0xd0 [ 172.719872][ T4855] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 172.725768][ T4855] ? __kthread_parkme+0x157/0x1b0 [ 172.730817][ T4855] kthread+0x436/0x520 [ 172.734904][ T4855] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 172.740037][ T4855] ? kthread_blkcg+0xd0/0xd0 [ 172.744625][ T4855] ret_from_fork+0x1f/0x30 [ 172.749067][ T4855] [ 172.752423][ T4855] Kernel Offset: disabled [ 172.756760][ T4855] Rebooting in 86400 seconds..