last executing test programs: 24.82548856s ago: executing program 3 (id=119): syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) 19.445147993s ago: executing program 3 (id=127): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) setresuid(0xee01, 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 18.473926433s ago: executing program 1 (id=130): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.467243853s ago: executing program 4 (id=131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x100, 0x80) getdents(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0x1, 0x0, 'client1\x00', 0x3, "ffde685bed57e3ab", "c769e760eedf0fdba31893e6e56c5b4436fc5d3e172643473a23098a743cff1e", 0x81, 0x5e}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005"], 0x64}}, 0x0) openat$qrtrtun(0xffffff9c, &(0x7f00000001c0), 0x50b200) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b0708385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802060033a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4563d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be4f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722000005f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r9, &(0x7f00000061c0)={0x2020}, 0x115f) 16.957631935s ago: executing program 1 (id=132): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0401273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r4, 0x2007ffb) close(r4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$dir(0xffffff9c, 0x0, 0x282002, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 16.957475045s ago: executing program 2 (id=133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 16.957336225s ago: executing program 3 (id=134): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x0) 13.918023248s ago: executing program 0 (id=135): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 13.917113999s ago: executing program 2 (id=136): close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2e, &(0x7f0000000140)=0xfb78, 0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, &(0x7f0000000340)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) 13.521054667s ago: executing program 1 (id=137): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x0, 0x4002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7, @ANYBLOB="05002f"], 0x2c}}, 0x18) 13.520875387s ago: executing program 4 (id=138): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r3, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001e00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000003e40)={0x20, 0x0, r6, {0x0, 0x1a}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, 0x0) 9.683997917s ago: executing program 0 (id=139): syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) 9.683779017s ago: executing program 2 (id=140): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000001c0)={[{@part={'part', 0x3d, 0xa0}}, {@umask={'umask', 0x3d, 0x4ffff}}, {@codepage={'codepage', 0x3d, 'iso8859-3'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x9, 0x344, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) creat(&(0x7f00000009c0)='./file1\x00', 0xc4) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r4, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="44817f", 0x3}], 0x1}}], 0x1, 0x24009800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x29, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x7}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) socket$alg(0x26, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 9.683649287s ago: executing program 3 (id=141): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r5, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x48010) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 9.672439998s ago: executing program 4 (id=149): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x0) 8.58805422s ago: executing program 1 (id=142): open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) setresuid(0xee01, 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 8.587152631s ago: executing program 3 (id=153): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x0) 8.57916501s ago: executing program 4 (id=154): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x200, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffc, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) 6.822624877s ago: executing program 0 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x84043, 0x0) keyctl$clear(0x3, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x0, 0x7, 0x80, 0xb6, 0x16, "004fba7d07ffffff08630400"}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) timer_create(0x3, 0x0, &(0x7f0000000040)) 6.822383337s ago: executing program 2 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x12, 0x0, &(0x7f0000000500)="d0c0a833fcfb0085a881548182bb1ca4b0ff", 0x0, 0xa1b, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x50) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "20d18300", "fcffffff", ["000000008000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000d53f38fb17a832715b9dfa12a3016b", @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf25010000000800010002000000080002000200000008000200020000000800020002000000080002000200000008000100030000000800010002000000080001"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 5.406973617s ago: executing program 1 (id=145): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 5.2577398s ago: executing program 4 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r4 = fsmount(r3, 0x0, 0xb) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) close(r5) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5.24111666s ago: executing program 0 (id=147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000007c, 0x0, 0xffffff7ffffffffa}]}) 4.978260726s ago: executing program 2 (id=148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() setpriority(0x1, r1, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000140)='!-\x00', 0x0, &(0x7f0000000180)={@align=0x2000000000000100, {0x2, 0xffff, 0xfffffff8, 0x6}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0xd824}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="a64b42", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000005c0)='y', 0x1}], 0x1}}], 0x4, 0x4c8c0) close(r0) 3.982458487s ago: executing program 4 (id=150): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0401273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r4, 0x2007ffb) close(r4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) openat$dir(0xffffff9c, 0x0, 0x282002, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 3.909251078s ago: executing program 0 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000001d80)={0x0, 0x6, 0x0, 0x8}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) sendfile(r5, r5, 0x0, 0x1002000ff) 1.126140366s ago: executing program 3 (id=152): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r1, 0x2000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 1.125174636s ago: executing program 1 (id=164): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x0) 1.113220487s ago: executing program 2 (id=155): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000005c0)={[{@resgid}, {@acl}, {@i_version}, {@grpquota}, {@nombcache}, {@dax_never}]}, 0x0, 0x481, &(0x7f0000001300)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x208, 0x6, 0x7}) bind$rds(0xffffffffffffffff, 0x0, 0x0) statx(r0, &(0x7f0000000300)='./file5\x00', 0x1000, 0x100, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x360, 0xffffffff, 0x40000, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) 0s ago: executing program 0 (id=156): openat$audio1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)=""/178, 0xb2}], 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020}, 0xfffffffffffffeca) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001900010000080100000000000a148000ff01ff010030000008001e00", @ANYRESHEX=r3, @ANYBLOB='\f\x00\t'], 0x30}, 0x1, 0x0, 0x0, 0x30000094}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "455c9bd255aaef05e77700", "00d700649f00ffff00f800"]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x6000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 93.872272][ T4260] cgroup: Unknown subsys name 'net' [ 93.985878][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.676295][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 97.131308][ T26] cfg80211: failed to load regulatory.db [ 97.215560][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.238286][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.249703][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.260269][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.268178][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.284161][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.295843][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.305949][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.314830][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.325489][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.336676][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.349713][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.361277][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.384177][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.395787][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.406869][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.439552][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.449863][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.459926][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.460034][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.470758][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.486488][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.495213][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.496319][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.514030][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.526585][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.534941][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.545121][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.554697][ T4290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.564391][ T4290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.013230][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 98.102646][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 98.117992][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 98.236055][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 98.255817][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.264865][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.274453][ T4273] device bridge_slave_0 entered promiscuous mode [ 98.284186][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 98.324647][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.338012][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.349349][ T4273] device bridge_slave_1 entered promiscuous mode [ 98.389344][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.398016][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.407727][ T4285] device bridge_slave_0 entered promiscuous mode [ 98.425714][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.433998][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.446226][ T4285] device bridge_slave_1 entered promiscuous mode [ 98.494591][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.521264][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.554157][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.582902][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.603264][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.615812][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.626894][ T4281] device bridge_slave_0 entered promiscuous mode [ 98.660827][ T4273] team0: Port device team_slave_0 added [ 98.682637][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.691904][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.702061][ T4281] device bridge_slave_1 entered promiscuous mode [ 98.727196][ T4273] team0: Port device team_slave_1 added [ 98.753971][ T4285] team0: Port device team_slave_0 added [ 98.784443][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.798763][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.810596][ T4277] device bridge_slave_0 entered promiscuous mode [ 98.834404][ T4285] team0: Port device team_slave_1 added [ 98.859724][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.868014][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.877336][ T4277] device bridge_slave_1 entered promiscuous mode [ 98.890785][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.903062][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.911524][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.923917][ T4286] device bridge_slave_0 entered promiscuous mode [ 98.950318][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.961245][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.001925][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.037903][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.053631][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.066953][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.076582][ T4286] device bridge_slave_1 entered promiscuous mode [ 99.086491][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.095130][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.138044][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.153059][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.160854][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.196140][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.239094][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.246811][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.279297][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.294577][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.334861][ T4281] team0: Port device team_slave_0 added [ 99.348332][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.381839][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.395241][ T4281] team0: Port device team_slave_1 added [ 99.425242][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.448598][ T4277] team0: Port device team_slave_0 added [ 99.456500][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 99.456748][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 99.476787][ T4273] device hsr_slave_0 entered promiscuous mode [ 99.491094][ T4273] device hsr_slave_1 entered promiscuous mode [ 99.513031][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.522196][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.557284][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.571210][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 99.576165][ T4277] team0: Port device team_slave_1 added [ 99.609146][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 99.609165][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 99.622977][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.640646][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.684129][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.713914][ T4285] device hsr_slave_0 entered promiscuous mode [ 99.729382][ T4285] device hsr_slave_1 entered promiscuous mode [ 99.738195][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.748669][ T4285] Cannot create hsr debugfs directory [ 99.758295][ T4286] team0: Port device team_slave_0 added [ 99.786860][ T4286] team0: Port device team_slave_1 added [ 99.832027][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.845484][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.879627][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.915643][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.925893][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.963072][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.994503][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.002563][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.035112][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.075918][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.085612][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.117735][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.165101][ T4281] device hsr_slave_0 entered promiscuous mode [ 100.180145][ T4281] device hsr_slave_1 entered promiscuous mode [ 100.188162][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.197966][ T4281] Cannot create hsr debugfs directory [ 100.380968][ T4277] device hsr_slave_0 entered promiscuous mode [ 100.390621][ T4277] device hsr_slave_1 entered promiscuous mode [ 100.397818][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.408051][ T4277] Cannot create hsr debugfs directory [ 100.427118][ T4286] device hsr_slave_0 entered promiscuous mode [ 100.441284][ T4286] device hsr_slave_1 entered promiscuous mode [ 100.449420][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.459441][ T4286] Cannot create hsr debugfs directory [ 100.732110][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.762711][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.782329][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.796583][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.826030][ T4285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.858069][ T4285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.874337][ T4285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.913461][ T4285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.973149][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.984501][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.996273][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.026196][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.118546][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.155642][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.165723][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.176285][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.225918][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.249498][ T4286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.273431][ T4286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.285368][ T4286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.299372][ T4286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.356937][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.374666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.390557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.419255][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.437402][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.458118][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.472196][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.481960][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.495714][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.507419][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.517728][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.530002][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 101.532722][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.539029][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 101.598096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.610885][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 101.623861][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.639759][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.648056][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.664178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.676736][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.689297][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 101.697279][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.701720][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 101.707675][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.729389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.745663][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.757755][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.770168][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.778993][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.791463][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.828578][ T2963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.904322][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.915777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.928265][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.944158][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.956596][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.966627][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.980132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.992469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.005688][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.017439][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.060823][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.073628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.085591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.107369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.118025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.131699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.142849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.153715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.164627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.175238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.189047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.209489][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.228651][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.242405][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.271590][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.296344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.306213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.315718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.325524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.363942][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.386965][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.400715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.420299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.439705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.450264][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.537910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.564393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.593986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.604387][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.612286][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.627231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.638084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.650734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.663945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.674869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.687796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.698825][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.707220][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.717710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.727054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.752588][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.765557][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.835711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.853519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.869346][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.879323][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.919643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.940606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.970934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.981773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.004045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.015841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.035576][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.070847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.090459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.104527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.115081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.126273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.137920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.151212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.162112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.172616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.182504][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.192122][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.217091][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.237543][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.255670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.267085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.279960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.299810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.313869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.330835][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.341057][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.351515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.363578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.375424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.395131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.405447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.418780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.450307][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.467908][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.509103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.517300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.530267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.542900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.553637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.572243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.594399][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.609187][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 103.609586][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 103.631765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.655916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.671279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.689164][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 103.705613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.721071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.745854][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.765724][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.774536][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 103.780310][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 103.808253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.830097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.920401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.954256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.977598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.993675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.007299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.025835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.039827][ T4273] device veth0_vlan entered promiscuous mode [ 104.053578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.072210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.116285][ T4273] device veth1_vlan entered promiscuous mode [ 104.142497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.159588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.189865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.210481][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.232062][ T4285] device veth0_vlan entered promiscuous mode [ 104.251336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.288069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.328360][ T4285] device veth1_vlan entered promiscuous mode [ 104.398510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.435087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.463987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.485836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.501083][ T4273] device veth0_macvtap entered promiscuous mode [ 104.534147][ T4273] device veth1_macvtap entered promiscuous mode [ 104.603012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.630701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.641704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.661838][ T4285] device veth0_macvtap entered promiscuous mode [ 104.686739][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.695659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.719953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.732584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.754040][ T4285] device veth1_macvtap entered promiscuous mode [ 104.773864][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.801070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.816472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.837238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.862084][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.902070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.915760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.936322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.950878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.966815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.977175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.992068][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.005318][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.015521][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.026557][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058338][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.085041][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.108896][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.131601][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.179669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.196935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.225302][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.269726][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.287355][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.324426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.341869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.363053][ T4285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.383754][ T4285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.398264][ T4285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.411018][ T4285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.479673][ T4281] device veth0_vlan entered promiscuous mode [ 105.524499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.537233][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.550778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.566339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.577059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.591386][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.643046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.654476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.690425][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 105.699731][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 105.729671][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.745256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.756778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.769195][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 105.774576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.795756][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.810855][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.820705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.830965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.842447][ T4281] device veth1_vlan entered promiscuous mode [ 105.857817][ T4277] device veth0_vlan entered promiscuous mode [ 105.859891][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 105.873861][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.873924][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.877634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.885280][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 105.923577][ T4286] device veth0_vlan entered promiscuous mode [ 105.993305][ T4277] device veth1_vlan entered promiscuous mode [ 106.012183][ T4286] device veth1_vlan entered promiscuous mode [ 106.049637][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.061055][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.061074][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.086276][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.125520][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.136617][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.151318][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.163949][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 106.176493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.192179][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.202913][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.218593][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.256180][ T4281] device veth0_macvtap entered promiscuous mode [ 106.286090][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.298466][ T4286] device veth0_macvtap entered promiscuous mode [ 106.299644][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.326755][ T4277] device veth0_macvtap entered promiscuous mode [ 106.341338][ T4281] device veth1_macvtap entered promiscuous mode [ 106.350861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.363823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.373949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.386477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.400288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.417465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.431490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.447788][ T4286] device veth1_macvtap entered promiscuous mode [ 106.464795][ T4277] device veth1_macvtap entered promiscuous mode [ 106.482824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.502755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.514101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.528353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.590906][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.620262][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.651127][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.682786][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.706426][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.722604][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.740375][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.754576][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.768055][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.784882][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.800935][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.848297][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.888354][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.905796][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.920160][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.949008][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.965401][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.983010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.008659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.041626][ T4362] ufs: You didn't specify the type of your ufs filesystem [ 107.041626][ T4362] [ 107.041626][ T4362] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 107.041626][ T4362] [ 107.041626][ T4362] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 107.087788][ T4362] ufs: ufstype=old is supported read-only [ 107.101496][ T4362] ufs: ufs_fill_super(): bad magic number [ 107.160826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.176974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.196337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.536005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.548931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.560218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.572350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.585668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.595556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.608884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.620022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.630082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.643444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.654827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 107.720506][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.734544][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.755393][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.878150][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.958703][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.064552][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.145063][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.201552][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.218175][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.089013][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.143487][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.166986][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.189958][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.218580][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.237212][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.258347][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.270016][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.285792][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.304950][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.325302][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.396292][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.411594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.435863][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.448320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.568349][ T4286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.613322][ T4286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.687502][ T4286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.739601][ T4286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.198136][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.214713][ T4377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.244307][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.262721][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.277291][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.290561][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.307345][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.319122][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.331305][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.476561][ T4385] overlayfs: missing 'workdir' [ 111.525746][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.148821][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.158596][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.235030][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.266862][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.279566][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.312721][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.931061][ T4394] syz.3.10 sent an empty control message without MSG_MORE. [ 115.119488][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.287837][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.426022][ T4400] loop2: detected capacity change from 0 to 32768 [ 115.484586][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.650191][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.792635][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.940190][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.045743][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.085477][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.144777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.178128][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.204553][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.220996][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.245685][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.292271][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.299066][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.357255][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.360345][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.395400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.862208][ T4423] loop3: detected capacity change from 0 to 40427 [ 120.882197][ T4423] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 120.891607][ T4423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.907909][ T4423] F2FS-fs (loop3): invalid crc value [ 121.515615][ T4423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.710388][ T4423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.723821][ T4423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.829094][ T4443] loop0: detected capacity change from 0 to 40427 [ 123.860209][ T4443] F2FS-fs (loop0): invalid crc value [ 123.917406][ T4443] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.986515][ T4443] F2FS-fs (loop0): Start checkpoint disabled! [ 124.049479][ T4443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 125.291524][ T4457] futex_wake_op: syz.2.18 tries to shift op by 144; fix this program [ 125.343989][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 125.358225][ T4456] netlink: 'syz.2.18': attribute type 2 has an invalid length. [ 126.748599][ T4464] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 129.392447][ T33] kworker/u4:2: attempt to access beyond end of device [ 129.392447][ T33] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 131.859596][ T4492] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 132.149805][ T4498] device syzkaller1 entered promiscuous mode [ 134.560930][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.577956][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.910772][ T4512] device syzkaller0 entered promiscuous mode [ 135.973730][ T4512] tipc: Started in network mode [ 136.017443][ T4512] tipc: Node identity de7b7d167602, cluster identity 4711 [ 136.061865][ T4512] tipc: Enabled bearer , priority 0 [ 138.076818][ T4262] tipc: Node number set to 2826534166 [ 138.520516][ T4511] tipc: Resetting bearer [ 138.631214][ T4511] tipc: Disabling bearer [ 139.658855][ C0] sched: RT throttling activated [ 140.001534][ T4545] futex_wake_op: syz.3.40 tries to shift op by 144; fix this program [ 140.046356][ T4545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 140.055960][ T4545] netlink: 'syz.3.40': attribute type 2 has an invalid length. [ 141.005680][ T4547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 141.013479][ T4547] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.024518][ T4547] vhci_hcd vhci_hcd.0: Device attached [ 141.242561][ T4550] vhci_hcd: connection closed [ 141.259016][ T2963] vhci_hcd: stop threads [ 141.396874][ T2963] vhci_hcd: release socket [ 141.550210][ T2963] vhci_hcd: disconnect device [ 142.637604][ T4571] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.657534][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 143.293100][ T4505] usb usb36-port1: attempt power cycle [ 144.699980][ T4505] usb usb36-port1: unable to enumerate USB device [ 145.289550][ T4589] ======================================================= [ 145.289550][ T4589] WARNING: The mand mount option has been deprecated and [ 145.289550][ T4589] and is ignored by this kernel. Remove the mand [ 145.289550][ T4589] option from the mount to silence this warning. [ 145.289550][ T4589] ======================================================= [ 147.646130][ T4589] vivid-007: kernel_thread() failed [ 149.524625][ T4607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.826744][ T4636] loop1: detected capacity change from 0 to 40427 [ 153.958038][ T4636] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 153.967237][ T4636] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.049294][ T4636] F2FS-fs (loop1): invalid crc value [ 156.086537][ T4636] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 164.058553][ T4686] kernel profiling enabled (shift: 9) [ 164.092543][ T4685] loop4: detected capacity change from 0 to 16 [ 164.141816][ T4685] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.148216][ T4694] 9pnet_fd: Insufficient options for proto=fd [ 171.566730][ T4714] loop1: detected capacity change from 0 to 32768 [ 171.784200][ T4714] XFS (loop1): Mounting V5 Filesystem [ 174.651402][ T4714] XFS (loop1): log mount failed [ 174.714521][ T4736] binder: Unknown parameter 'rootcontext' [ 177.006657][ T4759] loop4: detected capacity change from 0 to 128 [ 177.178970][ T4759] FAT-fs (loop4): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 179.911306][ T4773] loop0: detected capacity change from 0 to 128 [ 179.980424][ T4773] FAT-fs (loop0): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value [ 182.705184][ T4778] loop2: detected capacity change from 0 to 32768 [ 183.101237][ T4778] XFS (loop2): Mounting V5 Filesystem [ 183.754819][ T4778] XFS (loop2): Ending clean mount [ 185.576532][ T4285] XFS (loop2): Unmounting Filesystem [ 186.938517][ T4801] random: crng reseeded on system resumption [ 191.117531][ T4822] loop1: detected capacity change from 0 to 32768 [ 191.137425][ T4822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 191.146007][ T4822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 191.166572][ T4822] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 191.177358][ T4398] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 191.196028][ T4398] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 192.628745][ T4398] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1432ms [ 192.800516][ T4398] gfs2: fsid=syz:syz.0: jid=0: Done [ 192.807538][ T4822] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 193.632107][ T4822] gfs2: fsid=syz:syz.0: found 1 quota changes [ 193.669984][ T4834] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 193.669984][ T4834] inode = 11 2339 [ 193.669984][ T4834] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 193.804234][ T4834] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 194.386976][ T4834] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4834 [gfs2_quotad] gfs2_quota_sync+0x355/0x780 [ 194.403436][ T4834] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 194.413799][ T4834] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 194.454083][ T4844] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x81b [ 194.462640][ T4844] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x81e [ 194.865546][ T4845] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 194.873977][ T4845] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.103'. [ 196.076721][ T4851] loop0: detected capacity change from 0 to 40427 [ 196.139502][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 196.150213][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 196.159589][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 196.170122][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 196.180173][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 196.583005][ T4851] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 196.593363][ T4851] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.606831][ T4851] F2FS-fs (loop0): invalid crc value [ 196.713556][ T4851] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.958361][ T4851] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 196.965613][ T4851] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.795832][ T4869] No such timeout policy "syz0" [ 197.946006][ T4875] loop2: detected capacity change from 0 to 164 [ 199.270317][ T4885] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.282775][ T4885] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.293752][ T4885] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.309025][ T4885] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.497425][ T4885] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.511828][ T4885] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.524064][ T4885] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.534096][ T4885] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.548792][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.564776][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.847672][ T4834] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 200.070615][ T4834] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 200.144082][ T4886] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.155578][ T4886] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.169145][ T4886] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.182053][ T4886] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.222778][ T4886] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.232155][ T4886] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.242638][ T4886] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.253561][ T4886] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.498059][ T4834] gfs2: fsid=syz:syz.0: File system withdrawn [ 200.670355][ T4834] CPU: 1 PID: 4834 Comm: gfs2_quotad Not tainted syzkaller #0 [ 200.678798][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.691186][ T4834] Call Trace: [ 200.699801][ T4834] [ 200.703128][ T4834] dump_stack_lvl+0x188/0x24e [ 200.710949][ T4834] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 200.716997][ T4834] ? show_regs_print_info+0x12/0x12 [ 200.722600][ T4834] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 200.730650][ T4834] gfs2_withdraw+0xc69/0x1450 [ 200.737427][ T4834] ? gfs2_lm+0x240/0x240 [ 200.742148][ T4834] ? wake_bit_function+0x200/0x200 [ 200.747323][ T4834] ? gfs2_consist_inode_i+0xf1/0x110 [ 200.753551][ T4834] gfs2_inode_refresh+0xb2d/0x1190 [ 200.758826][ T4834] ? gfs2_inode_metasync+0xf0/0xf0 [ 200.764723][ T4834] ? gfs2_glock_nq+0xcee/0x14d0 [ 200.769713][ T4834] gfs2_instantiate+0x15e/0x210 [ 200.774613][ T4834] gfs2_glock_wait+0x1d0/0x2a0 [ 200.779505][ T4834] do_sync+0x4af/0xbb0 [ 200.783757][ T4834] ? gfs2_quota_sync+0x355/0x780 [ 200.788765][ T4834] ? slot_put+0x1e0/0x1e0 [ 200.793180][ T4834] ? __lock_acquire+0x7bd0/0x7bd0 [ 200.798261][ T4834] ? do_raw_spin_lock+0x128/0x2f0 [ 200.803407][ T4834] ? gfs2_quota_sync+0x355/0x780 [ 200.808831][ T4834] ? do_raw_spin_unlock+0x11d/0x230 [ 200.814075][ T4834] gfs2_quota_sync+0x355/0x780 [ 200.819133][ T4834] gfs2_quotad+0x421/0x690 [ 200.823887][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 200.830266][ T4834] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 200.836333][ T4834] ? wake_bit_function+0x200/0x200 [ 200.841893][ T4834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 200.849316][ T4834] ? __kthread_parkme+0x71/0x1c0 [ 200.854302][ T4834] ? __kthread_parkme+0x15b/0x1c0 [ 200.860768][ T4834] kthread+0x29d/0x330 [ 200.866578][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 200.873318][ T4834] ? kthread_blkcg+0xd0/0xd0 [ 200.877969][ T4834] ret_from_fork+0x1f/0x30 [ 200.882774][ T4834] [ 202.973378][ T4281] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 203.071094][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 203.079737][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.090895][ T4281] Call Trace: [ 203.094193][ T4281] [ 203.097947][ T4281] dump_stack_lvl+0x188/0x24e [ 203.102665][ T4281] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 203.108234][ T4281] ? show_regs_print_info+0x12/0x12 [ 203.114465][ T4281] ? load_image+0x410/0x410 [ 203.119301][ T4281] ? do_raw_spin_unlock+0x11d/0x230 [ 203.125122][ T4281] gfs2_assert_warn_i+0x187/0x2c0 [ 203.130801][ T4281] gfs2_quota_cleanup+0x48c/0x670 [ 203.136004][ T4281] gfs2_put_super+0x22f/0x920 [ 203.144839][ T4281] ? gfs2_evict_inode+0x1290/0x1290 [ 203.151941][ T4281] generic_shutdown_super+0x130/0x340 [ 203.161279][ T4281] kill_block_super+0x7c/0xe0 [ 203.167059][ T4281] deactivate_locked_super+0x93/0xf0 [ 203.172420][ T4281] cleanup_mnt+0x471/0x4f0 [ 203.177774][ T4281] task_work_run+0x1d0/0x260 [ 203.182699][ T4281] ? task_work_cancel+0x220/0x220 [ 203.187893][ T4281] ? exit_to_user_mode_loop+0x3b/0x110 [ 203.193413][ T4281] exit_to_user_mode_loop+0xe6/0x110 [ 203.198771][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 203.204373][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 203.214753][ T4281] do_syscall_64+0x58/0xa0 [ 203.219920][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 203.224727][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 203.229523][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.235946][ T4281] RIP: 0033:0x7f3c4299e097 [ 203.241008][ T4281] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 203.261509][ T4281] RSP: 002b:00007fff99a6c858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 203.270042][ T4281] RAX: 0000000000000000 RBX: 00007f3c42a322ca RCX: 00007f3c4299e097 [ 203.278480][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff99a6c910 [ 203.286910][ T4281] RBP: 00007fff99a6c910 R08: 00007fff99a6d910 R09: 00000000ffffffff [ 203.295778][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff99a6d9a0 [ 203.304458][ T4281] R13: 00007f3c42a322ca R14: 000000000002f6d6 R15: 00007fff99a6d9e0 [ 203.312619][ T4281] [ 204.237348][ T4899] futex_wake_op: syz.1.104 tries to shift op by 144; fix this program [ 204.360535][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 204.370597][ T4899] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 209.348845][ T4917] loop4: detected capacity change from 0 to 32768 [ 209.400030][ T4917] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.408329][ T4917] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 212.000945][ T4917] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 212.015376][ T4356] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 212.069809][ T4356] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 212.253547][ T4356] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 183ms [ 212.273405][ T4356] gfs2: fsid=syz:syz.0: jid=0: Done [ 212.278751][ T4917] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 212.290856][ T4917] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 212.877065][ T4947] loop1: detected capacity change from 0 to 136 [ 212.897846][ T4947] Attempt to read inode for relocated directory [ 213.652775][ T4955] futex_wake_op: syz.4.128 tries to shift op by 144; fix this program [ 213.688016][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 213.697101][ T4955] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 216.739030][ T4356] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 217.137819][ T4356] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 218.676500][ T4356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.091902][ T4356] usb 5-1: config 0 descriptor?? [ 219.323955][ T4356] usb 5-1: can't set config #0, error -71 [ 219.390639][ T4356] usb 5-1: USB disconnect, device number 2 [ 222.976506][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 222.983307][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 223.105961][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 223.107242][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 223.498108][ T4996] loop2: detected capacity change from 0 to 64 [ 227.450523][ T5021] futex_wake_op: syz.0.143 tries to shift op by 144; fix this program [ 227.463022][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 227.471969][ T5021] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 230.665261][ T27] audit: type=1800 audit(1782756352.535:2): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.150" name="bus" dev="ramfs" ino=36166 res=0 errno=0 [ 232.423519][ T5050] loop2: detected capacity change from 0 to 512 [ 232.562385][ T5050] EXT4-fs: Ignoring removed i_version option [ 232.901991][ T5050] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.155: inode has both inline data and extents flags [ 232.954034][ T5050] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.155: couldn't read orphan inode 15 (err -117) [ 233.448985][ T4834] ================================================================== [ 233.457104][ T4834] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7bd0 [ 233.464434][ T4834] Read of size 8 at addr ffff888077848bb0 by task gfs2_quotad/4834 [ 233.472337][ T4834] [ 233.474675][ T4834] CPU: 0 PID: 4834 Comm: gfs2_quotad Not tainted syzkaller #0 [ 233.482144][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.492220][ T4834] Call Trace: [ 233.495514][ T4834] [ 233.498463][ T4834] dump_stack_lvl+0x188/0x24e [ 233.503162][ T4834] ? __lock_acquire+0x7bd0/0x7bd0 [ 233.508258][ T4834] ? show_regs_print_info+0x12/0x12 [ 233.513472][ T4834] ? load_image+0x410/0x410 [ 233.518003][ T4834] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 233.523483][ T4834] ? __virt_addr_valid+0x188/0x540 [ 233.528633][ T4834] ? __virt_addr_valid+0x467/0x540 [ 233.533766][ T4834] ? __lock_acquire+0x107/0x7bd0 [ 233.538722][ T4834] print_report+0xa8/0x210 [ 233.543163][ T4834] kasan_report+0x10b/0x140 [ 233.547693][ T4834] ? __lock_acquire+0x107/0x7bd0 [ 233.552666][ T4834] __lock_acquire+0x107/0x7bd0 [ 233.557883][ T4834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.563887][ T4834] ? lock_chain_count+0x20/0x20 [ 233.568754][ T4834] ? __free_object+0x218/0xa60 [ 233.573525][ T4834] ? lockdep_hardirqs_on+0x94/0x140 [ 233.578738][ T4834] ? verify_lock_unused+0x140/0x140 [ 233.583960][ T4834] ? alloc_object+0x640/0x640 [ 233.588657][ T4834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 233.594651][ T4834] ? __lock_acquire+0x7bd0/0x7bd0 [ 233.599693][ T4834] ? lock_chain_count+0x20/0x20 [ 233.604563][ T4834] lock_acquire+0x1bb/0x4a0 [ 233.609081][ T4834] ? finish_wait+0xbb/0x1c0 [ 233.613598][ T4834] ? timer_delete_sync+0x20/0x20 [ 233.618544][ T4834] ? read_lock_is_recursive+0x10/0x10 [ 233.623936][ T4834] _raw_spin_lock_irqsave+0xb0/0x100 [ 233.629242][ T4834] ? finish_wait+0xbb/0x1c0 [ 233.633763][ T4834] ? _raw_spin_lock+0x40/0x40 [ 233.638451][ T4834] ? update_process_times+0x1b0/0x1b0 [ 233.643835][ T4834] finish_wait+0xbb/0x1c0 [ 233.648186][ T4834] gfs2_quotad+0x501/0x690 [ 233.652625][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 233.657748][ T4834] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 233.663666][ T4834] ? wake_bit_function+0x200/0x200 [ 233.668799][ T4834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 233.674706][ T4834] ? __kthread_parkme+0x71/0x1c0 [ 233.679662][ T4834] ? __kthread_parkme+0x15b/0x1c0 [ 233.684705][ T4834] kthread+0x29d/0x330 [ 233.688779][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 233.693913][ T4834] ? kthread_blkcg+0xd0/0xd0 [ 233.698511][ T4834] ret_from_fork+0x1f/0x30 [ 233.702948][ T4834] [ 233.706036][ T4834] [ 233.708369][ T4834] Allocated by task 4822: [ 233.712695][ T4834] kasan_set_track+0x4b/0x70 [ 233.717297][ T4834] __kasan_kmalloc+0x8e/0xa0 [ 233.721897][ T4834] gfs2_fill_super+0x133/0x2020 [ 233.726756][ T4834] get_tree_bdev+0x3e6/0x610 [ 233.731357][ T4834] gfs2_get_tree+0x4d/0x1e0 [ 233.735873][ T4834] vfs_get_tree+0x88/0x270 [ 233.740298][ T4834] do_new_mount+0x247/0xa40 [ 233.744819][ T4834] __se_sys_mount+0x2e3/0x3d0 [ 233.749517][ T4834] do_syscall_64+0x4c/0xa0 [ 233.753948][ T4834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.759859][ T4834] [ 233.762187][ T4834] Freed by task 4281: [ 233.766162][ T4834] kasan_set_track+0x4b/0x70 [ 233.770768][ T4834] kasan_save_free_info+0x27/0x40 [ 233.775802][ T4834] ____kasan_slab_free+0x126/0x1f0 [ 233.781014][ T4834] slab_free_freelist_hook+0x133/0x1b0 [ 233.786493][ T4834] __kmem_cache_free+0xb6/0x200 [ 233.791359][ T4834] generic_shutdown_super+0x130/0x340 [ 233.796745][ T4834] kill_block_super+0x7c/0xe0 [ 233.801434][ T4834] deactivate_locked_super+0x93/0xf0 [ 233.806746][ T4834] cleanup_mnt+0x471/0x4f0 [ 233.811188][ T4834] task_work_run+0x1d0/0x260 [ 233.815800][ T4834] exit_to_user_mode_loop+0xe6/0x110 [ 233.821118][ T4834] exit_to_user_mode_prepare+0xee/0x180 [ 233.826684][ T4834] syscall_exit_to_user_mode+0x16/0x40 [ 233.832164][ T4834] do_syscall_64+0x58/0xa0 [ 233.836597][ T4834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.842514][ T4834] [ 233.844841][ T4834] The buggy address belongs to the object at ffff888077848000 [ 233.844841][ T4834] which belongs to the cache kmalloc-8k of size 8192 [ 233.859001][ T4834] The buggy address is located 2992 bytes inside of [ 233.859001][ T4834] 8192-byte region [ffff888077848000, ffff88807784a000) [ 233.872469][ T4834] [ 233.874795][ T4834] The buggy address belongs to the physical page: [ 233.881218][ T4834] page:ffffea0001de1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77848 [ 233.891379][ T4834] head:ffffea0001de1200 order:3 compound_mapcount:0 compound_pincount:0 [ 233.899716][ T4834] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 233.907727][ T4834] raw: 00fff00000010200 ffffea0001e06000 dead000000000006 ffff888017442280 [ 233.916329][ T4834] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 233.924915][ T4834] page dumped because: kasan: bad access detected [ 233.931348][ T4834] page_owner tracks the page as allocated [ 233.937106][ T4834] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4639, tgid 4631 (syz.0.58), ts 153853693602, free_ts 153281432353 [ 233.959973][ T4834] post_alloc_hook+0x173/0x1a0 [ 233.965911][ T4834] get_page_from_freelist+0x206b/0x2180 [ 233.971484][ T4834] __alloc_pages+0x1ec/0x4f0 [ 233.976102][ T4834] alloc_slab_page+0x5d/0x180 [ 233.981053][ T4834] new_slab+0x87/0x2d0 [ 233.985132][ T4834] ___slab_alloc+0xbc5/0x1240 [ 233.989822][ T4834] __kmem_cache_alloc_node+0x126/0x270 [ 233.995290][ T4834] __kmalloc_node_track_caller+0xa0/0x240 [ 234.001026][ T4834] __alloc_skb+0x226/0x7d0 [ 234.005465][ T4834] sctp_packet_transmit+0x2ec/0x2960 [ 234.010787][ T4834] sctp_outq_flush+0xeb6/0x3140 [ 234.015665][ T4834] sctp_do_sm+0x4f05/0x5610 [ 234.020183][ T4834] sctp_assoc_bh_rcv+0x3ee/0x630 [ 234.025324][ T4834] sctp_backlog_rcv+0x158/0x360 [ 234.030211][ T4834] __release_sock+0x1e6/0x460 [ 234.034912][ T4834] release_sock+0x5b/0x1b0 [ 234.039376][ T4834] page last free stack trace: [ 234.044073][ T4834] free_unref_page_prepare+0x8e5/0x9e0 [ 234.049555][ T4834] free_unref_page+0x2e/0x3f0 [ 234.054250][ T4834] __unfreeze_partials+0x188/0x1e0 [ 234.059379][ T4834] put_cpu_partial+0x17c/0x250 [ 234.064174][ T4834] qlist_free_all+0x76/0xe0 [ 234.068794][ T4834] kasan_quarantine_reduce+0x144/0x160 [ 234.074383][ T4834] __kasan_slab_alloc+0x1e/0x80 [ 234.079269][ T4834] slab_post_alloc_hook+0x4b/0x490 [ 234.084396][ T4834] __kmem_cache_alloc_node+0x19d/0x270 [ 234.089864][ T4834] __kmalloc+0xa3/0x240 [ 234.094040][ T4834] __se_sys_memfd_create+0xee/0x340 [ 234.099251][ T4834] do_syscall_64+0x4c/0xa0 [ 234.103681][ T4834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.109595][ T4834] [ 234.111922][ T4834] Memory state around the buggy address: [ 234.117552][ T4834] ffff888077848a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.125617][ T4834] ffff888077848b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.133685][ T4834] >ffff888077848b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.141836][ T4834] ^ [ 234.147472][ T4834] ffff888077848c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.155538][ T4834] ffff888077848c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 234.163607][ T4834] ================================================================== [ 234.171691][ T4834] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 234.178892][ T4834] CPU: 0 PID: 4834 Comm: gfs2_quotad Not tainted syzkaller #0 [ 234.186364][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.196426][ T4834] Call Trace: [ 234.199711][ T4834] [ 234.202643][ T4834] dump_stack_lvl+0x188/0x24e [ 234.207360][ T4834] ? memcpy+0x3c/0x60 [ 234.211356][ T4834] ? show_regs_print_info+0x12/0x12 [ 234.216568][ T4834] ? load_image+0x410/0x410 [ 234.221094][ T4834] panic+0x2d3/0x710 [ 234.225004][ T4834] ? __lock_acquire+0x7bd0/0x7bd0 [ 234.230043][ T4834] ? bpf_jit_dump+0xd0/0xd0 [ 234.234561][ T4834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.240471][ T4834] ? _raw_spin_unlock+0x40/0x40 [ 234.245335][ T4834] check_panic_on_warn+0x80/0xa0 [ 234.250287][ T4834] ? __lock_acquire+0x107/0x7bd0 [ 234.255336][ T4834] end_report+0x66/0x110 [ 234.259597][ T4834] kasan_report+0x118/0x140 [ 234.264117][ T4834] ? __lock_acquire+0x107/0x7bd0 [ 234.269072][ T4834] __lock_acquire+0x107/0x7bd0 [ 234.273850][ T4834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 234.279852][ T4834] ? lock_chain_count+0x20/0x20 [ 234.284726][ T4834] ? __free_object+0x218/0xa60 [ 234.289503][ T4834] ? lockdep_hardirqs_on+0x94/0x140 [ 234.294719][ T4834] ? verify_lock_unused+0x140/0x140 [ 234.299937][ T4834] ? alloc_object+0x640/0x640 [ 234.304627][ T4834] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 234.310626][ T4834] ? __lock_acquire+0x7bd0/0x7bd0 [ 234.315667][ T4834] ? lock_chain_count+0x20/0x20 [ 234.320543][ T4834] lock_acquire+0x1bb/0x4a0 [ 234.325075][ T4834] ? finish_wait+0xbb/0x1c0 [ 234.329601][ T4834] ? timer_delete_sync+0x20/0x20 [ 234.334553][ T4834] ? read_lock_is_recursive+0x10/0x10 [ 234.339946][ T4834] _raw_spin_lock_irqsave+0xb0/0x100 [ 234.345262][ T4834] ? finish_wait+0xbb/0x1c0 [ 234.349804][ T4834] ? _raw_spin_lock+0x40/0x40 [ 234.354510][ T4834] ? update_process_times+0x1b0/0x1b0 [ 234.359907][ T4834] finish_wait+0xbb/0x1c0 [ 234.364280][ T4834] gfs2_quotad+0x501/0x690 [ 234.368722][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 234.373847][ T4834] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 234.379759][ T4834] ? wake_bit_function+0x200/0x200 [ 234.384889][ T4834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.390800][ T4834] ? __kthread_parkme+0x71/0x1c0 [ 234.395813][ T4834] ? __kthread_parkme+0x15b/0x1c0 [ 234.400868][ T4834] kthread+0x29d/0x330 [ 234.404958][ T4834] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 234.410105][ T4834] ? kthread_blkcg+0xd0/0xd0 [ 234.414719][ T4834] ret_from_fork+0x1f/0x30 [ 234.419161][ T4834] [ 234.422450][ T4834] Kernel Offset: disabled [ 234.426772][ T4834] Rebooting in 86400 seconds..