last executing test programs: 10.167350577s ago: executing program 4 (id=98): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 9.43914192s ago: executing program 4 (id=103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010800000000000000000000000a20000000000a0300000000000000000007003e0100"], 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.352759685s ago: executing program 4 (id=106): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f0000001040)='aegis128\x00', 0x204202, 0x0, 0x4, &(0x7f00000010c0), &(0x7f0000001100)=0x1}) ioctl$FITHAW(r1, 0xc0045878) 7.424539664s ago: executing program 2 (id=108): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x5f41, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x4048800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r9, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r9, r8}}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r11 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 5.324996131s ago: executing program 0 (id=111): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r2, 0x0, 0x0, 0x78f2a36b) 5.243355254s ago: executing program 1 (id=113): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 5.159892756s ago: executing program 2 (id=114): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) 5.102456268s ago: executing program 4 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 4.387422431s ago: executing program 0 (id=116): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010800000000000000000000000a20000000000a0300000000000000000007003e0100"], 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.245342225s ago: executing program 0 (id=118): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r0, &(0x7f0000000a00)="c7", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) 4.216340066s ago: executing program 1 (id=119): mkdirat(0xffffffffffffff9c, 0x0, 0x180) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.131613728s ago: executing program 4 (id=120): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000001680)='0', 0x1}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'xfrm0\x00', 0x0}) 2.314528597s ago: executing program 1 (id=122): kexec_load(0x6, 0x1, &(0x7f0000000880)=[{&(0x7f0000000280)="2c60f4b4e64afb07dcdf4aa5038080b933b4dd3a344bb798daa67d35178f0d1a87225a487e49bebb6b427e9dcdf4c46e120da07289198847417232eda63c4c51ed886119d22f1cbad887d694ccbe92e09e6bc66e19b25e9eb6082a8df4732d35772c21473e63893955c47759620a39fb895a8a79d2a6e9375a6c0c", 0x7b, 0x7}], 0x320000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b0000", @ANYRES32, @ANYBLOB="0000000000000000b70200001c000000b7030005000000008500000700000000bca9000000000000350901001b0000009500000000000000bf9800000000000056080000ffffffff8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) 2.314274377s ago: executing program 4 (id=123): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c3cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d000000000000085a503e8c5bc4ce3741ffde3e70575204f9c29aa139fe99b6a37bf29061f58689241e45d049e6dc7d2b32276d164a60bce615bb239f1cb27366a1c82dd85e8af4efabb69679acd3276998e63a8b59d15c9d012a634cd1d35a432140f05f7111894ed493e8d8e9a95fd24939e3e31ec3bc3df385f122adb388aef7e2c2c0ad33df8c3c5dc340881a", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 2.243383919s ago: executing program 0 (id=124): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x5f41, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x4048800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r9, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r9, r8}}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r11 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 2.21770743s ago: executing program 1 (id=125): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000001140)={0xffffffffffffffff, &(0x7f0000001040)='aegis128\x00', 0x204202, 0x0, 0x4, &(0x7f00000010c0), &(0x7f0000001100)=0x1}) ioctl$FITHAW(r1, 0xc0045878) 2.080676764s ago: executing program 3 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x18) 1.853104071s ago: executing program 3 (id=127): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r2, 0x0, 0x0, 0x78f2a36b) 1.747504964s ago: executing program 2 (id=128): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010800000000000000000000000a20000000000a0300000000000000000007003e0100"], 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.692808286s ago: executing program 3 (id=129): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) fchown(r0, 0x0, 0x0) 1.598055549s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) 1.297820929s ago: executing program 0 (id=131): mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(&(0x7f0000000040)='./bus\x00') 1.26485109s ago: executing program 1 (id=132): mkdirat(0xffffffffffffff9c, 0x0, 0x180) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.206729262s ago: executing program 3 (id=133): utimensat(0xffffffffffffffff, &(0x7f0000019180)='./file0\x00', &(0x7f00000191c0), 0x0) 1.181403313s ago: executing program 2 (id=134): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000001680)='0', 0x1}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'xfrm0\x00', 0x0}) 1.050090647s ago: executing program 1 (id=135): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r0, &(0x7f0000000a00)="c7", 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x3ffff) 991.199369ms ago: executing program 0 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xff, 0x0, 0x5, 0x200, 0x2, 0x8, 0x8000, 0x3, 0x3b8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0001a00024", 0xe}], 0x1}, 0x4005) 935.40519ms ago: executing program 3 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x18) 83.500897ms ago: executing program 2 (id=138): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) 0s ago: executing program 3 (id=139): kexec_load(0x6, 0x1, &(0x7f0000000880)=[{&(0x7f0000000280)="2c60f4b4e64afb07dcdf4aa5038080b933b4dd3a344bb798daa67d35178f0d1a87225a487e49bebb6b427e9dcdf4c46e120da07289198847417232eda63c4c51ed886119d22f1cbad887d694ccbe92e09e6bc66e19b25e9eb6082a8df4732d35772c21473e63893955c47759620a39fb895a8a79d2a6e9375a6c0c", 0x7b, 0x7}], 0x320000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000b0000", @ANYRES32, @ANYBLOB="0000000000000000b70200001c000000b7030005000000008500000700000000bca9000000000000350901001b0000009500000000000000bf9800000000000056080000ffffffff8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 66.019022][ T4260] cgroup: Unknown subsys name 'net' [ 66.149437][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.421725][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.853984][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.853984][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.855165][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.879745][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.891850][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.901092][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.902770][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.909887][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.916769][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.925520][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.932503][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.938648][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.945827][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.954427][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.962339][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.968697][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.975325][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.982946][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.990346][ T4287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.998132][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.012300][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.013016][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.020196][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.028071][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.035791][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.044502][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.051162][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.057956][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.065130][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.083871][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.484929][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 69.509261][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 69.595835][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 69.665155][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 69.674520][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 69.693175][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.700775][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.710295][ T4284] device bridge_slave_0 entered promiscuous mode [ 69.744634][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.752601][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.760547][ T4284] device bridge_slave_1 entered promiscuous mode [ 69.802978][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.810374][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.819549][ T4273] device bridge_slave_0 entered promiscuous mode [ 69.836172][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.843515][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.852515][ T4273] device bridge_slave_1 entered promiscuous mode [ 69.898890][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.930152][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.938540][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.947097][ T4283] device bridge_slave_0 entered promiscuous mode [ 69.956037][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.970340][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.993752][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.001220][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.009693][ T4283] device bridge_slave_1 entered promiscuous mode [ 70.030613][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.075794][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.083644][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.094040][ T4275] device bridge_slave_0 entered promiscuous mode [ 70.102697][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.110009][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.120867][ T4274] device bridge_slave_0 entered promiscuous mode [ 70.131561][ T4284] team0: Port device team_slave_0 added [ 70.140111][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.153513][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.170046][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.179977][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.188730][ T4275] device bridge_slave_1 entered promiscuous mode [ 70.196079][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.203726][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.211629][ T4274] device bridge_slave_1 entered promiscuous mode [ 70.220712][ T4284] team0: Port device team_slave_1 added [ 70.240837][ T4273] team0: Port device team_slave_0 added [ 70.271242][ T4283] team0: Port device team_slave_0 added [ 70.279654][ T4273] team0: Port device team_slave_1 added [ 70.309333][ T4283] team0: Port device team_slave_1 added [ 70.326259][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.337446][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.347708][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.355509][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.384848][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.409671][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.424515][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.435188][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.443596][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.470824][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.493775][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.501022][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.528041][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.565992][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.577040][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.607133][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.619229][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.626626][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.653242][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.676818][ T4275] team0: Port device team_slave_0 added [ 70.684899][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.692318][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.719960][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.739052][ T4274] team0: Port device team_slave_0 added [ 70.755284][ T4275] team0: Port device team_slave_1 added [ 70.776609][ T4274] team0: Port device team_slave_1 added [ 70.801467][ T4284] device hsr_slave_0 entered promiscuous mode [ 70.809247][ T4284] device hsr_slave_1 entered promiscuous mode [ 70.861603][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.869190][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.898683][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.922458][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.929703][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.957773][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.975721][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.986425][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.014421][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.037401][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.045357][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.076395][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.092059][ T4273] device hsr_slave_0 entered promiscuous mode [ 71.099848][ T4273] device hsr_slave_1 entered promiscuous mode [ 71.109156][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.117438][ T4273] Cannot create hsr debugfs directory [ 71.130916][ T4283] device hsr_slave_0 entered promiscuous mode [ 71.137993][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 71.138003][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 71.144965][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 71.151168][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 71.157382][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 71.171934][ T4283] device hsr_slave_1 entered promiscuous mode [ 71.179169][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.187315][ T4283] Cannot create hsr debugfs directory [ 71.284007][ T4274] device hsr_slave_0 entered promiscuous mode [ 71.291051][ T4274] device hsr_slave_1 entered promiscuous mode [ 71.297815][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.305642][ T4274] Cannot create hsr debugfs directory [ 71.353205][ T4275] device hsr_slave_0 entered promiscuous mode [ 71.361725][ T4275] device hsr_slave_1 entered promiscuous mode [ 71.369653][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.378221][ T4275] Cannot create hsr debugfs directory [ 71.466474][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.473821][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.658842][ T4284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.678257][ T4284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.704291][ T4284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.716801][ T4284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.744149][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.754192][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.763403][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.786083][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.841396][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.869336][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.890114][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.911051][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.956244][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.990007][ T4274] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.999243][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.010386][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.038461][ T4274] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.057884][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.068319][ T4274] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.095389][ T4274] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.108044][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.118138][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.128896][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.136441][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.146193][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.182385][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.200367][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.210889][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.218159][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.226860][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.236067][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.260973][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.272328][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.281415][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.291460][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.301703][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.310886][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.319994][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.330488][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.359953][ T4284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.375418][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.387990][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.410353][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.420914][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.430199][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.440022][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.449276][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.458215][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.466863][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.476387][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.485960][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.510880][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.571145][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.579603][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.595455][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.607156][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.614868][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.630485][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.639759][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.648881][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.661649][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.671513][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.680568][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.687799][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.719637][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.750120][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.759369][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.766817][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.776759][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.786043][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.817103][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.831146][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.846069][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.855937][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.865415][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.875275][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.884272][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.893777][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.903290][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.912450][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.919837][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.928442][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.959459][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.973661][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.985949][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.995038][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.007165][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.016320][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.025604][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.035065][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.043851][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.073343][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.081688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.098346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.121161][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.138558][ T4283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.149682][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.173794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.188507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.198667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.213631][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 73.213651][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 73.220098][ T4277] Bluetooth: hci4: command 0x041b tx timeout [ 73.226408][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 73.226442][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 73.253840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.263050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.271432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.286345][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.305868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.317541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.326333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.336563][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.347063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.356644][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.364095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.374507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.409183][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.427308][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.441359][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.448782][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.457905][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.467039][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.476420][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.487142][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.525570][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.546834][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.557103][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.567017][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.578945][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.595532][ T4284] device veth0_vlan entered promiscuous mode [ 73.622716][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.644017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.658786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.668216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.678112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.686741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.695790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.711231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.722512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.743700][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.751951][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.763433][ T4284] device veth1_vlan entered promiscuous mode [ 73.784116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.793441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.801157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.810488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.821877][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.869550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.886836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.899762][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.907599][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.917579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.927090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.936606][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.944329][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.953378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.006652][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.020184][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.030874][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.046921][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.059610][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.069697][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.079117][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.088155][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.107440][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.118582][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.146552][ T4284] device veth0_macvtap entered promiscuous mode [ 74.155878][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.167930][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.186746][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.198993][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.211434][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.227021][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.236434][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.249064][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.259765][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.269657][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.278077][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.313140][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.337453][ T4284] device veth1_macvtap entered promiscuous mode [ 74.373029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.393995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.412791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.428108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.438657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.457483][ T4273] device veth0_vlan entered promiscuous mode [ 74.474701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.484133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.494348][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.505885][ T4273] device veth1_vlan entered promiscuous mode [ 74.516199][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.531306][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.540705][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.557625][ T2961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.595499][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.609762][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.623993][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.635519][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.676781][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.687499][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697029][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.705989][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.721606][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.731024][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.747538][ T4273] device veth0_macvtap entered promiscuous mode [ 74.779780][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.789371][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.798934][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.808348][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.826188][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.835559][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.844349][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.854575][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.863261][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.883641][ T4274] device veth0_vlan entered promiscuous mode [ 74.895238][ T4273] device veth1_macvtap entered promiscuous mode [ 74.914311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.926335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.935231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.956035][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.968102][ T4274] device veth1_vlan entered promiscuous mode [ 74.991245][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.009589][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.023352][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.031433][ T4283] device veth0_vlan entered promiscuous mode [ 75.041834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.052784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.077124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.087110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.099587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.107608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.119133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.138597][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.153518][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.167432][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.190764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.206387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.220676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.240855][ T4283] device veth1_vlan entered promiscuous mode [ 75.289346][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.292610][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 75.302742][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 75.305335][ T4277] Bluetooth: hci3: command 0x040f tx timeout [ 75.311651][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 75.318433][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 75.342999][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.352437][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.362480][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.396916][ T4274] device veth0_macvtap entered promiscuous mode [ 75.404069][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.421424][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.430897][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.440254][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.448871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.459332][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.469397][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.478820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.523840][ T4274] device veth1_macvtap entered promiscuous mode [ 75.549939][ T4283] device veth0_macvtap entered promiscuous mode [ 75.574820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.587909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.597925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.641291][ T4283] device veth1_macvtap entered promiscuous mode [ 75.649388][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.657804][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.668426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.684966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.695780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.712901][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.727977][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.740656][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.755271][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.767517][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.792739][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.819744][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.855016][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.874449][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885630][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.897383][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.907534][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.918695][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.930789][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.941172][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.953417][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.964048][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.975150][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.987256][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.010352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.021877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.041520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.053701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.069669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.079135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.090115][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.101860][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.118975][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.130327][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.143574][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.157101][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.170388][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.181883][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191694][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.200506][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.210058][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.235002][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.246130][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.275996][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294254][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.314689][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.323952][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.347978][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.359421][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.410845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.421413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.431804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.440814][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.449072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.464603][ T4275] device veth0_vlan entered promiscuous mode [ 76.483728][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.505937][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.524050][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.584200][ T4275] device veth1_vlan entered promiscuous mode [ 76.674951][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.683928][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.701367][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.717604][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.720453][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.740855][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.771697][ T4275] device veth0_macvtap entered promiscuous mode [ 76.811242][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.966642][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 79.973701][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 79.973729][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 79.980786][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 79.987075][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 80.048922][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.144110][ T4275] device veth1_macvtap entered promiscuous mode [ 80.204949][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.227581][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.297233][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.369380][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.381008][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.404247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.412075][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.423703][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.434889][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.445993][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.457611][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.467917][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.481796][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.494292][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.517345][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.518791][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.535959][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.536032][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.553319][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.563442][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.571666][ T4377] device syzkaller0 entered promiscuous mode [ 80.583331][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.596879][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.607007][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.618322][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.628503][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.639498][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.649656][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.661194][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.678812][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.686472][ T953] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.738148][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.748170][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.760491][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.771590][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.781386][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.791243][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887564][ T953] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 80.916421][ T953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.966057][ T953] usb 2-1: Product: syz [ 80.980369][ T953] usb 2-1: Manufacturer: syz [ 80.993836][ T953] usb 2-1: SerialNumber: syz [ 80.997020][ T4384] loop2: detected capacity change from 0 to 512 [ 81.033775][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.035801][ T953] usb 2-1: config 0 descriptor?? [ 81.077874][ T4384] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.091915][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.127989][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.140216][ T953] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 81.149002][ T4384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.201774][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.227492][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.275573][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.295427][ T4384] EXT4-fs (loop2): 1 truncate cleaned up [ 81.332092][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.683404][ T953] gspca_stk1135: reg_w 0x2 err -110 [ 82.833494][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 82.978537][ T953] gspca_stk1135: Sensor write failed [ 83.045102][ T26] audit: type=1804 audit(1781180541.567:2): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10" name="/newroot/4/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 83.095793][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.118299][ T953] gspca_stk1135: Sensor write failed [ 83.148446][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.169253][ T953] gspca_stk1135: Sensor read failed [ 83.198033][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.207025][ T953] gspca_stk1135: Sensor read failed [ 83.270954][ T953] gspca_stk1135: Detected sensor type unknown (0x0) [ 83.279540][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.300161][ T953] gspca_stk1135: Sensor read failed [ 83.311352][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.324575][ T953] gspca_stk1135: Sensor read failed [ 83.347379][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.360485][ T953] gspca_stk1135: Sensor write failed [ 83.366791][ T953] gspca_stk1135: serial bus timeout: status=0x00 [ 83.375914][ T953] gspca_stk1135: Sensor write failed [ 83.381859][ T953] stk1135: probe of 2-1:0.0 failed with error -110 [ 83.463720][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 83.614516][ T4396] device veth1_macvtap left promiscuous mode [ 83.630799][ T4396] device macsec0 entered promiscuous mode [ 83.679638][ T26] audit: type=1326 audit(1781180542.197:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 83.692816][ T4396] device veth1_macvtap entered promiscuous mode [ 83.711964][ T4396] device macsec0 left promiscuous mode [ 83.720510][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.908942][ T4400] loop2: detected capacity change from 0 to 32768 [ 83.931829][ T4400] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 83.940881][ T4400] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 83.960035][ T26] audit: type=1326 audit(1781180542.197:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 83.974087][ T4396] netlink: 'syz.4.6': attribute type 1 has an invalid length. [ 84.008640][ T4400] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 84.010410][ T26] audit: type=1326 audit(1781180542.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.047501][ T4317] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 84.054781][ T4317] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 84.072096][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.108189][ T26] audit: type=1326 audit(1781180542.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.132931][ T26] audit: type=1326 audit(1781180542.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.159477][ T26] audit: type=1326 audit(1781180542.197:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.200074][ T4321] usb 2-1: USB disconnect, device number 2 [ 84.210381][ T26] audit: type=1326 audit(1781180542.197:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.237507][ T4317] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms [ 84.263697][ T4317] gfs2: fsid=syz:syz.0: jid=0: Done [ 84.284122][ T14] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 84.305461][ T4400] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 84.319354][ T14] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 84.351411][ T14] usb 1-1: config 220 interface 0 has no altsetting 0 [ 84.395937][ T26] audit: type=1326 audit(1781180542.197:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.428625][ T14] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.439074][ T26] audit: type=1326 audit(1781180542.197:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4395 comm="syz.4.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14d159ce59 code=0x7ffc0000 [ 84.442053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #29a!!! [ 84.463955][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.489809][ T14] usb 1-1: Product: syz [ 84.512042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 84.532029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.536913][ T4400] gfs2: fsid=syz:syz.0: found 1 quota changes [ 84.560963][ T4406] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 84.560963][ T4406] inode = 11 2339 [ 84.560963][ T4406] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 84.562017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 84.609559][ T14] usb 1-1: Manufacturer: syz [ 84.642435][ T14] usb 1-1: SerialNumber: syz [ 84.698760][ T4406] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 84.709594][ T4406] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4406 [gfs2_quotad] gfs2_quota_sync+0x32c/0x700 [ 84.722962][ T4406] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 84.733759][ T4406] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 84.896754][ T14] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 84.917261][ T14] usb 1-1: No valid video chain found. [ 84.954339][ T14] usb 1-1: USB disconnect, device number 2 [ 85.225606][ T4417] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 85.332170][ T4317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.512192][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 85.523098][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 85.539406][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 85.551601][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 85.573300][ T4317] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 85.587948][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.596963][ T4317] usb 2-1: Product: syz [ 85.601439][ T4317] usb 2-1: Manufacturer: syz [ 85.606537][ T4317] usb 2-1: SerialNumber: syz [ 85.623801][ T4317] usb 2-1: config 0 descriptor?? [ 85.919385][ T4423] device syzkaller0 entered promiscuous mode [ 85.968113][ T4425] binder: 4418:4425 ioctl c0306201 0 returned -14 [ 85.984120][ T4419] binder: 4418:4419 ioctl c0306201 0 returned -14 [ 86.201796][ T4430] loop4: detected capacity change from 0 to 512 [ 86.272383][ T4430] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.361552][ T4430] EXT4-fs (loop4): 1 truncate cleaned up [ 86.372627][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 86.814191][ T125] cfg80211: failed to load regulatory.db [ 87.865765][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 87.878326][ T4316] usb 2-1: USB disconnect, device number 3 [ 88.122543][ T4448] loop1: detected capacity change from 0 to 128 [ 88.204108][ T4448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 88.226431][ T4448] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.347491][ T4448] syz.1.27 (pid 4448) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 88.358582][ T14] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 88.416103][ T4451] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 88.464407][ T4451] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 88.591145][ T14] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 88.610170][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.632129][ T14] usb 4-1: Product: syz [ 88.636430][ T14] usb 4-1: Manufacturer: syz [ 88.645055][ T14] usb 4-1: SerialNumber: syz [ 88.666280][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 88.686736][ T14] usb 4-1: config 0 descriptor?? [ 88.719875][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 88.772089][ T4316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.008419][ T4316] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 89.132823][ T4458] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 89.440963][ T4316] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 89.450804][ T4316] usb 5-1: config 220 interface 0 has no altsetting 0 [ 89.475663][ T4316] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 89.572258][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.630203][ T4316] usb 5-1: Product: syz [ 89.650668][ T4316] usb 5-1: Manufacturer: syz [ 89.668402][ T4316] usb 5-1: SerialNumber: syz [ 89.781398][ T4406] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 89.796523][ T4406] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 89.845868][ T4406] gfs2: fsid=syz:syz.0: File system withdrawn [ 89.857505][ T4406] CPU: 1 PID: 4406 Comm: gfs2_quotad Not tainted syzkaller #0 [ 89.865012][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.875271][ T4406] Call Trace: [ 89.878973][ T4406] [ 89.882041][ T4406] dump_stack_lvl+0x188/0x24e [ 89.887096][ T4406] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 89.892752][ T4406] ? show_regs_print_info+0x12/0x12 [ 89.898128][ T4406] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 89.903977][ T4406] gfs2_withdraw+0xde6/0x15d0 [ 89.908876][ T4406] ? gfs2_lm+0x240/0x240 [ 89.913355][ T4406] ? wake_bit_function+0x200/0x200 [ 89.918925][ T4406] ? gfs2_consist_inode_i+0xf1/0x110 [ 89.924394][ T4406] gfs2_inode_refresh+0xc2a/0x1140 [ 89.929885][ T4406] ? gfs2_inode_metasync+0xf0/0xf0 [ 89.935575][ T4406] ? gfs2_glock_nq+0xcf0/0x14e0 [ 89.940456][ T4406] gfs2_instantiate+0x15e/0x210 [ 89.945499][ T4406] gfs2_glock_wait+0x1d0/0x2a0 [ 89.950370][ T4406] do_sync+0x4bf/0xc40 [ 89.952037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.954510][ T4406] ? gfs2_quota_sync+0x32c/0x700 [ 89.968664][ T4406] ? slot_put+0x1e0/0x1e0 [ 89.972078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.973465][ T4406] ? __lock_acquire+0x7d10/0x7d10 [ 89.982098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.986710][ T4406] ? do_raw_spin_lock+0x128/0x2f0 [ 89.995102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.000462][ T4406] ? gfs2_quota_sync+0x32c/0x700 [ 90.012041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.013879][ T4406] ? do_raw_spin_unlock+0x11d/0x230 [ 90.022881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.028125][ T4406] gfs2_quota_sync+0x32c/0x700 [ 90.042538][ T4406] gfs2_quotad+0x420/0x680 [ 90.047678][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 90.052966][ T4406] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 90.058982][ T4406] ? wake_bit_function+0x200/0x200 [ 90.064200][ T4406] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 90.070183][ T4406] ? __kthread_parkme+0x162/0x1c0 [ 90.075308][ T4406] kthread+0x29d/0x330 [ 90.079467][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 90.084771][ T4406] ? kthread_blkcg+0xd0/0xd0 [ 90.089363][ T4406] ret_from_fork+0x1f/0x30 [ 90.093881][ T4406] [ 90.174040][ T4316] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 90.192048][ T4316] usb 5-1: No valid video chain found. [ 90.250299][ T4316] usb 5-1: USB disconnect, device number 2 [ 90.302330][ T14] gspca_stk1135: reg_w 0x5 err -110 [ 90.309220][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.379109][ T14] gspca_stk1135: Sensor write failed [ 90.399734][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.452227][ T14] gspca_stk1135: Sensor write failed [ 90.471239][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.539978][ T14] gspca_stk1135: Sensor read failed [ 90.550881][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.558363][ T14] gspca_stk1135: Sensor read failed [ 90.563947][ T14] gspca_stk1135: Detected sensor type unknown (0x0) [ 90.577233][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.593129][ T14] gspca_stk1135: Sensor read failed [ 90.602251][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.612238][ T14] gspca_stk1135: Sensor read failed [ 90.617853][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.628039][ T14] gspca_stk1135: Sensor write failed [ 90.636552][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 90.643597][ T14] gspca_stk1135: Sensor write failed [ 90.653338][ T14] stk1135: probe of 4-1:0.0 failed with error -110 [ 90.691212][ T4284] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 90.719497][ T4284] CPU: 0 PID: 4284 Comm: syz-executor Not tainted syzkaller #0 [ 90.727443][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.737760][ T4284] Call Trace: [ 90.741084][ T4284] [ 90.744268][ T4284] dump_stack_lvl+0x188/0x24e [ 90.749528][ T4284] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 90.754826][ T4284] ? show_regs_print_info+0x12/0x12 [ 90.760310][ T4284] ? load_image+0x400/0x400 [ 90.765009][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 90.770646][ T4284] gfs2_assert_warn_i+0x18f/0x2c0 [ 90.776201][ T4284] gfs2_quota_cleanup+0x4b4/0x6a0 [ 90.781345][ T4284] gfs2_put_super+0x22f/0x8c0 [ 90.786215][ T4284] ? gfs2_evict_inode+0x11d0/0x11d0 [ 90.792368][ T4284] generic_shutdown_super+0x130/0x340 [ 90.798212][ T4284] kill_block_super+0x7c/0xe0 [ 90.802894][ T4284] deactivate_locked_super+0x93/0xf0 [ 90.808636][ T4284] cleanup_mnt+0x42c/0x4b0 [ 90.813231][ T4284] ? lockdep_hardirqs_on+0x94/0x140 [ 90.818648][ T4284] task_work_run+0x1d0/0x260 [ 90.823340][ T4284] ? task_work_cancel+0x220/0x220 [ 90.828640][ T4284] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.834431][ T4284] exit_to_user_mode_loop+0xe6/0x110 [ 90.839917][ T4284] exit_to_user_mode_prepare+0xee/0x180 [ 90.845483][ T4284] syscall_exit_to_user_mode+0x16/0x40 [ 90.851562][ T4284] do_syscall_64+0x58/0xa0 [ 90.856628][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 90.861481][ T4284] ? clear_bhb_loop+0x60/0xb0 [ 90.866161][ T4284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.872601][ T4284] RIP: 0033:0x7fe05f19e097 [ 90.877117][ T4284] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 90.896991][ T4284] RSP: 002b:00007ffd67de2fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.905498][ T4284] RAX: 0000000000000000 RBX: 00007fe05f2321ca RCX: 00007fe05f19e097 [ 90.914037][ T4284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd67de3080 [ 90.922115][ T4284] RBP: 00007ffd67de3080 R08: 00007ffd67de4080 R09: 00000000ffffffff [ 90.930353][ T4284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd67de4110 [ 90.938495][ T4284] R13: 00007fe05f2321ca R14: 0000000000014a9e R15: 00007ffd67de4150 [ 90.946760][ T4284] [ 90.949955][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.132207][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.342059][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 91.349169][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.380364][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.408768][ T14] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.419439][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.432742][ T14] usb 2-1: config 0 descriptor?? [ 91.457720][ T14] hub 2-1:0.0: USB hub found [ 91.647548][ T14] hub 2-1:0.0: 1 port detected [ 91.778623][ T4478] binder: 4476:4478 ioctl c0306201 0 returned -14 [ 91.798444][ T4477] binder: 4476:4477 ioctl c0306201 0 returned -14 [ 91.850419][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 91.892181][ T4316] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 91.906822][ T14] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 92.701413][ T14] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 92.726455][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 92.733861][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 92.773113][ T14] usb 2-1: USB disconnect, device number 4 [ 92.897062][ T4316] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 92.952326][ T4262] usb 4-1: USB disconnect, device number 2 [ 92.968085][ T4485] loop4: detected capacity change from 0 to 64 [ 92.984343][ T4316] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 93.006113][ T4487] loop0: detected capacity change from 0 to 512 [ 93.020295][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.044282][ T4316] usb 3-1: Product: syz [ 93.057800][ T4316] usb 3-1: Manufacturer: syz [ 93.074520][ T4316] usb 3-1: SerialNumber: syz [ 93.085921][ T4487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.944114][ T4316] usb 3-1: config 0 descriptor?? [ 93.946511][ T4485] hfs: request for non-existent node 131072 in B*Tree [ 93.949873][ T4475] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 93.966561][ T4316] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 94.035841][ T4494] program syz.1.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.239336][ T4485] hfs: request for non-existent node 131072 in B*Tree [ 94.259566][ T4487] EXT4-fs (loop0): 1 truncate cleaned up [ 94.269917][ T4495] hfs: request for non-existent node 131072 in B*Tree [ 94.292228][ T4487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.316432][ T4495] hfs: request for non-existent node 131072 in B*Tree [ 94.333625][ T4319] usb 3-1: USB disconnect, device number 2 [ 94.377642][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 94.377655][ T26] audit: type=1804 audit(1781180552.897:83): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.38" name="/newroot/8/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 94.447149][ T4498] hfs: request for non-existent node 131072 in B*Tree [ 94.504649][ T4498] hfs: request for non-existent node 131072 in B*Tree [ 94.550993][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 96.431619][ T4504] loop3: detected capacity change from 0 to 4096 [ 96.822397][ T4525] binder: 4521:4525 ioctl c0306201 0 returned -14 [ 96.869286][ T4524] binder: 4521:4524 ioctl c0306201 0 returned -14 [ 96.898799][ T4504] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 97.107954][ T4504] ntfs3: loop3: Failed to load $Extend. [ 97.270876][ T26] audit: type=1800 audit(1781180555.787:84): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.40" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 97.291779][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.708093][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.946165][ T4531] Trying to write to read-only block-device nullb0 [ 97.953900][ T4531] Trying to write to read-only block-device nullb0 [ 97.961149][ T4531] Trying to write to read-only block-device nullb0 [ 97.968830][ T4531] Trying to write to read-only block-device nullb0 [ 97.975954][ T4531] Trying to write to read-only block-device nullb0 [ 97.982925][ T4531] Trying to write to read-only block-device nullb0 [ 97.990006][ T4531] Trying to write to read-only block-device nullb0 [ 97.996684][ T4531] Trying to write to read-only block-device nullb0 [ 98.003826][ T4531] Trying to write to read-only block-device nullb0 [ 98.010538][ T4531] Trying to write to read-only block-device nullb0 [ 100.473713][ T4539] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.512837][ T4541] loop1: detected capacity change from 0 to 512 [ 100.581426][ T4541] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.676878][ T4541] EXT4-fs (loop1): 1 truncate cleaned up [ 100.695614][ T4541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.718172][ T26] audit: type=1804 audit(1781180559.237:85): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.53" name="/newroot/9/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 100.858612][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 100.942207][ T4532] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.874890][ T4532] usb 3-1: Using ep0 maxpacket: 32 [ 101.893006][ T4532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.912197][ T4532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.923001][ T4532] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.932413][ T4532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.943718][ T4532] usb 3-1: config 0 descriptor?? [ 101.955687][ T4532] hub 3-1:0.0: USB hub found [ 102.045112][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 102.082079][ T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.159090][ T4532] hub 3-1:0.0: 1 port detected [ 102.277269][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.295443][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.310843][ T14] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 102.336846][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.367600][ T4532] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 102.390746][ T14] usb 5-1: config 0 descriptor?? [ 102.398221][ T4532] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 102.434596][ T4532] usbhid 3-1:0.0: can't add hid device: -71 [ 102.447379][ T4532] usbhid: probe of 3-1:0.0 failed with error -71 [ 102.483011][ T4532] usb 3-1: USB disconnect, device number 3 [ 102.488225][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 102.521670][ T7] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 102.558739][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.618745][ T7] usb 1-1: Product: syz [ 102.647129][ T7] usb 1-1: Manufacturer: syz [ 102.651794][ T7] usb 1-1: SerialNumber: syz [ 102.660652][ T14] usb 5-1: USB disconnect, device number 3 [ 102.690013][ T7] usb 1-1: config 0 descriptor?? [ 102.724610][ T4559] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 102.743788][ T7] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 102.749282][ T4567] binder: 4565:4567 ioctl c0306201 0 returned -14 [ 102.768719][ T4566] binder: 4565:4566 ioctl c0306201 0 returned -14 [ 102.976108][ T4532] usb 1-1: USB disconnect, device number 4 [ 103.194335][ T4571] loop2: detected capacity change from 0 to 4096 [ 103.437237][ T4571] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 103.469901][ T4578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.573701][ T4580] Error parsing options; rc = [-22] [ 103.603989][ T4580] loop1: detected capacity change from 0 to 64 [ 104.168014][ T4571] NILFS (loop2): mounting fs with errors [ 104.512692][ T4571] ======================================================= [ 104.512692][ T4571] WARNING: The mand mount option has been deprecated and [ 104.512692][ T4571] and is ignored by this kernel. Remove the mand [ 104.512692][ T4571] option from the mount to silence this warning. [ 104.512692][ T4571] ======================================================= [ 104.581893][ T4586] loop3: detected capacity change from 0 to 512 [ 104.674429][ T4586] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.756006][ T4571] NILFS (loop2): unrecognized mount option "18446744073709551615" [ 104.807574][ T4586] EXT4-fs (loop3): 1 truncate cleaned up [ 104.818934][ T26] audit: type=1800 audit(1781180563.337:86): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 104.827533][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.976101][ T4594] process 'syz.1.69' launched '/dev/fd/6' with NULL argv: empty string added [ 105.011742][ T26] audit: type=1804 audit(1781180563.527:87): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.67" name="/newroot/11/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 105.075349][ T4596] loop4: detected capacity change from 0 to 512 [ 105.113516][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 105.141504][ T4596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.197356][ T4596] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.292863][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 105.320351][ T4602] device syzkaller0 entered promiscuous mode [ 105.773231][ T4614] binder: 4609:4614 ioctl c0306201 0 returned -14 [ 105.820152][ T4611] binder: 4609:4611 ioctl c0306201 0 returned -14 [ 105.888979][ T4616] loop4: detected capacity change from 0 to 16 [ 105.904215][ T4616] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.918489][ T4616] syz.4.78: attempt to access beyond end of device [ 105.918489][ T4616] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 105.973998][ T4616] syz.4.78: attempt to access beyond end of device [ 105.973998][ T4616] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 105.990966][ T4616] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 106.062089][ T26] audit: type=1800 audit(1781180564.527:88): pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.78" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 106.082197][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.194868][ T4326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.595913][ T4616] syz.4.78 (4616) used greatest stack depth: 20144 bytes left [ 107.365919][ T4627] loop1: detected capacity change from 0 to 512 [ 107.423395][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.452266][ T4627] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.506915][ T4632] loop0: detected capacity change from 0 to 512 [ 107.571760][ T4632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.648685][ T4632] EXT4-fs (loop0): 1 truncate cleaned up [ 107.692999][ T4640] device syzkaller0 entered promiscuous mode [ 107.714978][ T4632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.761924][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 107.788146][ T4326] Process accounting resumed [ 108.555983][ T4633] Process accounting resumed [ 108.620427][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 108.777639][ T4652] loop4: detected capacity change from 0 to 512 [ 108.845127][ T4650] loop3: detected capacity change from 0 to 4096 [ 108.856699][ T4652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.909268][ T4652] EXT4-fs (loop4): 1 truncate cleaned up [ 108.929090][ T4652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.057177][ T4660] binder: 4655:4660 ioctl c0306201 0 returned -14 [ 109.083285][ T4659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.084909][ T4650] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 109.110368][ T4657] binder: 4655:4657 ioctl c0306201 0 returned -14 [ 109.132534][ T4650] NILFS (loop3): mounting fs with errors [ 109.200170][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 109.222742][ T4650] NILFS (loop3): unrecognized mount option "18446744073709551615" [ 109.273876][ T26] audit: type=1800 audit(1781180567.797:89): pid=4650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 110.207590][ T4671] loop0: detected capacity change from 0 to 32768 [ 110.220132][ T4671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.95 (4671) [ 110.244490][ T4671] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.255699][ T4671] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.264605][ T4671] BTRFS info (device loop0): setting nodatasum [ 110.270956][ T4671] BTRFS info (device loop0): force zlib compression, level 3 [ 110.278551][ T4671] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.288183][ T4671] BTRFS info (device loop0): use lzo compression, level 0 [ 110.296002][ T4671] BTRFS info (device loop0): turning on flush-on-commit [ 110.303002][ T4671] BTRFS info (device loop0): enabling auto defrag [ 110.309538][ T4671] BTRFS info (device loop0): max_inline at 4096 [ 110.316102][ T4671] BTRFS info (device loop0): force zlib compression, level 3 [ 110.323546][ T4671] BTRFS info (device loop0): using free space tree [ 110.503371][ T4671] BTRFS info (device loop0): enabling ssd optimizations [ 110.690142][ T26] audit: type=1800 audit(1781180569.197:90): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 110.836991][ T4692] loop4: detected capacity change from 0 to 512 [ 110.837252][ T26] audit: type=1800 audit(1781180569.357:91): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 110.973183][ T4699] loop3: detected capacity change from 0 to 16 [ 110.990234][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.032874][ T4692] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.110566][ T4699] erofs: (device loop3): mounted with root inode @ nid 36. [ 111.244075][ T4699] syz.3.96: attempt to access beyond end of device [ 111.244075][ T4699] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 111.372126][ T4317] Process accounting resumed [ 111.407825][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 111.465774][ T4283] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.154355][ T4701] Process accounting resumed [ 112.185891][ T26] audit: type=1800 audit(1781180570.707:92): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.96" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 112.315626][ T4712] loop2: detected capacity change from 0 to 512 [ 112.399149][ T4712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.593130][ T4712] EXT4-fs (loop2): 1 truncate cleaned up [ 112.594002][ T4722] device syzkaller0 entered promiscuous mode [ 112.622139][ T4712] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.258182][ T4729] syz.1.107 (4729): drop_caches: 2 [ 113.349772][ T4284] EXT4-fs (loop2): unmounting filesystem. [ 114.216845][ T4321] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.372120][ T4732] binder: 4731:4732 ioctl c0306201 0 returned -14 [ 114.466987][ T4732] binder: 4731:4732 ioctl c0306201 0 returned -14 [ 115.753546][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 116.166103][ T4751] loop1: detected capacity change from 0 to 512 [ 116.300030][ T4751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.407119][ T4751] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.550924][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 116.632561][ T4714] Process accounting resumed [ 117.383655][ T4761] Process accounting resumed [ 117.425147][ T4765] loop0: detected capacity change from 0 to 512 [ 117.452791][ T4765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.515459][ T4769] device syzkaller0 entered promiscuous mode [ 117.543085][ T4770] syz.1.119 (4770): drop_caches: 2 [ 117.590694][ T4765] EXT4-fs (loop0): 1 truncate cleaned up [ 118.079753][ T4765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.510955][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 118.780543][ T4782] binder: 4780:4782 ioctl c0306201 0 returned -14 [ 118.807126][ T4788] loop4: detected capacity change from 0 to 16 [ 118.826415][ T4782] binder: 4780:4782 ioctl c0306201 0 returned -14 [ 118.864290][ T4788] erofs: (device loop4): mounted with root inode @ nid 36. [ 118.933648][ T4788] syz.4.123: attempt to access beyond end of device [ 118.933648][ T4788] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 118.999187][ T4788] syz.4.123: attempt to access beyond end of device [ 118.999187][ T4788] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 119.058131][ T4788] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 119.092069][ T26] audit: type=1800 audit(1781180577.607:93): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.123" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 119.112937][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.212523][ T4795] loop3: detected capacity change from 0 to 512 [ 119.288161][ T4795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.318688][ T4795] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.561331][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 119.593207][ T4532] Process accounting resumed [ 119.670314][ T4804] syz.1.132 (4804): drop_caches: 2 [ 119.736166][ T4802] Process accounting resumed [ 120.567116][ T4813] loop1: detected capacity change from 0 to 512 [ 120.613769][ T4812] device syzkaller0 entered promiscuous mode [ 120.661165][ T4813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.732304][ T4406] ================================================================== [ 120.742503][ T4406] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 120.750530][ T4406] Read of size 8 at addr ffff888079240bb0 by task gfs2_quotad/4406 [ 120.758697][ T4406] [ 120.761056][ T4406] CPU: 0 PID: 4406 Comm: gfs2_quotad Not tainted syzkaller #0 [ 120.768875][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.779474][ T4406] Call Trace: [ 120.783031][ T4406] [ 120.786330][ T4406] dump_stack_lvl+0x188/0x24e [ 120.791558][ T4406] ? __lock_acquire+0x7d10/0x7d10 [ 120.796700][ T4406] ? show_regs_print_info+0x12/0x12 [ 120.802067][ T4406] ? load_image+0x400/0x400 [ 120.806748][ T4406] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 120.813683][ T4406] ? __virt_addr_valid+0x188/0x540 [ 120.818889][ T4406] ? __virt_addr_valid+0x465/0x540 [ 120.824867][ T4406] ? __lock_acquire+0x106/0x7d10 [ 120.831120][ T4406] print_report+0xa8/0x210 [ 120.835981][ T4406] kasan_report+0x10b/0x140 [ 120.840835][ T4406] ? __lock_acquire+0x106/0x7d10 [ 120.846149][ T4406] __lock_acquire+0x106/0x7d10 [ 120.851011][ T4406] ? verify_lock_unused+0x140/0x140 [ 120.856225][ T4406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 120.862727][ T4406] ? lock_chain_count+0x20/0x20 [ 120.867944][ T4406] ? __free_object+0x218/0xa70 [ 120.872891][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 120.878629][ T4406] ? verify_lock_unused+0x140/0x140 [ 120.884030][ T4406] ? alloc_object+0x640/0x640 [ 120.888815][ T4406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 120.894820][ T4406] ? lock_chain_count+0x20/0x20 [ 120.900480][ T4406] lock_acquire+0x1bb/0x4a0 [ 120.905744][ T4406] ? finish_wait+0xb8/0x1d0 [ 120.910489][ T4406] ? timer_delete_sync+0x20/0x20 [ 120.915694][ T4406] ? __mod_timer+0x91e/0xd00 [ 120.920360][ T4406] ? read_lock_is_recursive+0x10/0x10 [ 120.925736][ T4406] _raw_spin_lock_irqsave+0xb0/0x100 [ 120.931542][ T4406] ? finish_wait+0xb8/0x1d0 [ 120.936655][ T4406] ? _raw_spin_lock+0x40/0x40 [ 120.941504][ T4406] ? update_process_times+0x1b0/0x1b0 [ 120.947394][ T4406] finish_wait+0xb8/0x1d0 [ 120.951727][ T4406] gfs2_quotad+0x4f3/0x680 [ 120.956509][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 120.961815][ T4406] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 120.968572][ T4406] ? wake_bit_function+0x200/0x200 [ 120.974064][ T4406] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 120.980444][ T4406] ? __kthread_parkme+0x162/0x1c0 [ 120.986630][ T4406] kthread+0x29d/0x330 [ 120.991389][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 120.996955][ T4406] ? kthread_blkcg+0xd0/0xd0 [ 121.001799][ T4406] ret_from_fork+0x1f/0x30 [ 121.006485][ T4406] [ 121.009499][ T4406] [ 121.011983][ T4406] Allocated by task 1150: [ 121.016295][ T4406] kasan_set_track+0x4b/0x70 [ 121.021314][ T4406] __kasan_kmalloc+0x8e/0xa0 [ 121.026251][ T4406] __kmalloc_node_track_caller+0xae/0x230 [ 121.032415][ T4406] __alloc_skb+0x22a/0x7e0 [ 121.037268][ T4406] nsim_dev_trap_report_work+0x28f/0xb00 [ 121.043185][ T4406] process_one_work+0x8a2/0x1160 [ 121.048348][ T4406] worker_thread+0xaa2/0x1270 [ 121.053063][ T4406] kthread+0x29d/0x330 [ 121.057386][ T4406] ret_from_fork+0x1f/0x30 [ 121.061832][ T4406] [ 121.064155][ T4406] Freed by task 1150: [ 121.068138][ T4406] kasan_set_track+0x4b/0x70 [ 121.073118][ T4406] kasan_save_free_info+0x2d/0x50 [ 121.078322][ T4406] ____kasan_slab_free+0x126/0x1e0 [ 121.083693][ T4406] slab_free_freelist_hook+0x131/0x1a0 [ 121.089325][ T4406] __kmem_cache_free+0xb6/0x1f0 [ 121.094172][ T4406] skb_release_data+0x5db/0x7c0 [ 121.099192][ T4406] consume_skb+0xa2/0x100 [ 121.103794][ T4406] nsim_dev_trap_report_work+0x77a/0xb00 [ 121.109743][ T4406] process_one_work+0x8a2/0x1160 [ 121.114760][ T4406] worker_thread+0xaa2/0x1270 [ 121.119601][ T4406] kthread+0x29d/0x330 [ 121.123662][ T4406] ret_from_fork+0x1f/0x30 [ 121.128265][ T4406] [ 121.130928][ T4406] The buggy address belongs to the object at ffff888079240000 [ 121.130928][ T4406] which belongs to the cache kmalloc-4k of size 4096 [ 121.145847][ T4406] The buggy address is located 2992 bytes inside of [ 121.145847][ T4406] 4096-byte region [ffff888079240000, ffff888079241000) [ 121.159939][ T4406] [ 121.162391][ T4406] The buggy address belongs to the physical page: [ 121.169513][ T4406] page:ffffea0001e49000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79240 [ 121.180705][ T4406] head:ffffea0001e49000 order:3 compound_mapcount:0 compound_pincount:0 [ 121.189909][ T4406] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 121.201002][ T4406] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140 [ 121.210208][ T4406] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 121.219244][ T4406] page dumped because: kasan: bad access detected [ 121.225763][ T4406] page_owner tracks the page as allocated [ 121.231746][ T4406] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1150, tgid 1150 (kworker/u4:4), ts 118182750602, free_ts 118062315652 [ 121.255405][ T4406] post_alloc_hook+0x173/0x1a0 [ 121.260504][ T4406] get_page_from_freelist+0x1a1e/0x1ab0 [ 121.266247][ T4406] __alloc_pages+0x1ec/0x4f0 [ 121.271195][ T4406] alloc_slab_page+0x5d/0x160 [ 121.275868][ T4406] new_slab+0x87/0x2c0 [ 121.279949][ T4406] ___slab_alloc+0xbc6/0x1240 [ 121.284618][ T4406] __kmem_cache_alloc_node+0x1a0/0x260 [ 121.290428][ T4406] __kmalloc_node_track_caller+0x9e/0x230 [ 121.296434][ T4406] __alloc_skb+0x22a/0x7e0 [ 121.301131][ T4406] nsim_dev_trap_report_work+0x28f/0xb00 [ 121.307379][ T4406] process_one_work+0x8a2/0x1160 [ 121.312816][ T4406] worker_thread+0xaa2/0x1270 [ 121.317794][ T4406] kthread+0x29d/0x330 [ 121.322211][ T4406] ret_from_fork+0x1f/0x30 [ 121.327393][ T4406] page last free stack trace: [ 121.332156][ T4406] free_unref_page_prepare+0x8b4/0x9a0 [ 121.337653][ T4406] free_unref_page+0x2e/0x3f0 [ 121.342801][ T4406] __unfreeze_partials+0x1a5/0x200 [ 121.347911][ T4406] put_cpu_partial+0x17c/0x250 [ 121.352787][ T4406] qlist_free_all+0x76/0xe0 [ 121.357688][ T4406] kasan_quarantine_reduce+0x144/0x160 [ 121.363312][ T4406] __kasan_kmalloc+0x1e/0xa0 [ 121.368086][ T4406] __kmalloc_node_track_caller+0xae/0x230 [ 121.373922][ T4406] __alloc_skb+0x22a/0x7e0 [ 121.378506][ T4406] alloc_skb_with_frags+0xa7/0x710 [ 121.383872][ T4406] sock_alloc_send_pskb+0x87f/0x9a0 [ 121.389069][ T4406] unix_dgram_sendmsg+0x539/0x16e0 [ 121.394185][ T4406] __sys_sendto+0x497/0x650 [ 121.398776][ T4406] __x64_sys_sendto+0xda/0xf0 [ 121.403723][ T4406] do_syscall_64+0x4c/0xa0 [ 121.408331][ T4406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.414328][ T4406] [ 121.417086][ T4406] Memory state around the buggy address: [ 121.424509][ T4406] ffff888079240a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.433208][ T4406] ffff888079240b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.441985][ T4406] >ffff888079240b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.450565][ T4406] ^ [ 121.456465][ T4406] ffff888079240c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.465845][ T4406] ffff888079240c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.474600][ T4406] ================================================================== [ 121.483649][ T4406] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 121.491018][ T4406] CPU: 0 PID: 4406 Comm: gfs2_quotad Not tainted syzkaller #0 [ 121.498821][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.509913][ T4406] Call Trace: [ 121.513308][ T4406] [ 121.516327][ T4406] dump_stack_lvl+0x188/0x24e [ 121.522274][ T4406] ? memcpy+0x3c/0x60 [ 121.526261][ T4406] ? show_regs_print_info+0x12/0x12 [ 121.531807][ T4406] ? load_image+0x400/0x400 [ 121.536655][ T4406] panic+0x2e5/0x730 [ 121.540721][ T4406] ? __lock_acquire+0x7d10/0x7d10 [ 121.545921][ T4406] ? bpf_jit_dump+0xd0/0xd0 [ 121.550684][ T4406] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.556776][ T4406] ? _raw_spin_unlock+0x40/0x40 [ 121.561717][ T4406] check_panic_on_warn+0x80/0xa0 [ 121.567003][ T4406] ? __lock_acquire+0x106/0x7d10 [ 121.572568][ T4406] end_report+0x66/0x110 [ 121.577182][ T4406] kasan_report+0x118/0x140 [ 121.581712][ T4406] ? __lock_acquire+0x106/0x7d10 [ 121.586945][ T4406] __lock_acquire+0x106/0x7d10 [ 121.591709][ T4406] ? verify_lock_unused+0x140/0x140 [ 121.596903][ T4406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.603344][ T4406] ? lock_chain_count+0x20/0x20 [ 121.608514][ T4406] ? __free_object+0x218/0xa70 [ 121.613537][ T4406] ? lockdep_hardirqs_on+0x94/0x140 [ 121.618816][ T4406] ? verify_lock_unused+0x140/0x140 [ 121.624107][ T4406] ? alloc_object+0x640/0x640 [ 121.628774][ T4406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.635350][ T4406] ? lock_chain_count+0x20/0x20 [ 121.640635][ T4406] lock_acquire+0x1bb/0x4a0 [ 121.645331][ T4406] ? finish_wait+0xb8/0x1d0 [ 121.650136][ T4406] ? timer_delete_sync+0x20/0x20 [ 121.655180][ T4406] ? __mod_timer+0x91e/0xd00 [ 121.659976][ T4406] ? read_lock_is_recursive+0x10/0x10 [ 121.665504][ T4406] _raw_spin_lock_irqsave+0xb0/0x100 [ 121.671753][ T4406] ? finish_wait+0xb8/0x1d0 [ 121.676440][ T4406] ? _raw_spin_lock+0x40/0x40 [ 121.682383][ T4406] ? update_process_times+0x1b0/0x1b0 [ 121.688926][ T4406] finish_wait+0xb8/0x1d0 [ 121.694525][ T4406] gfs2_quotad+0x4f3/0x680 [ 121.699300][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 121.704968][ T4406] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 121.711116][ T4406] ? wake_bit_function+0x200/0x200 [ 121.716383][ T4406] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.722531][ T4406] ? __kthread_parkme+0x162/0x1c0 [ 121.727734][ T4406] kthread+0x29d/0x330 [ 121.732234][ T4406] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 121.738005][ T4406] ? kthread_blkcg+0xd0/0xd0 [ 121.742861][ T4406] ret_from_fork+0x1f/0x30 [ 121.747456][ T4406] [ 121.750825][ T4406] Kernel Offset: disabled [ 121.755421][ T4406] Rebooting in 86400 seconds..