last executing test programs: 16.807988592s ago: executing program 4 (id=54): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8282, 0x0) sendfile(r4, r0, 0x0, 0x850e) fallocate(r0, 0x11, 0x600, 0x7c000) 14.291947083s ago: executing program 1 (id=59): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 11.930697008s ago: executing program 1 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)='|') 11.382304496s ago: executing program 3 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 9.960668692s ago: executing program 3 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)='|') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 9.923327723s ago: executing program 0 (id=71): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) signalfd(r5, &(0x7f0000000240)={[0x6096]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000014c0)={r6, 0xff}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 8.971861723s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe2(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000340)={0x0}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 8.883892516s ago: executing program 2 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x200088d4) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 8.813307308s ago: executing program 4 (id=75): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) signalfd(r5, &(0x7f0000000240)={[0x6096]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000014c0)={r6, 0xff}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 7.186528971s ago: executing program 4 (id=76): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) signalfd(r5, &(0x7f0000000240)={[0x6096]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000014c0)={r6, 0xff}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) 7.114466193s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 7.085750964s ago: executing program 1 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x200088d4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0x5}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 6.25229374s ago: executing program 4 (id=79): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x8080) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000000ffe, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0xd, 0x80000002}, 0x0, 0x0) 6.244917251s ago: executing program 3 (id=80): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 5.33484212s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 5.302040681s ago: executing program 4 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 5.238410993s ago: executing program 4 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)='|') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 5.237945713s ago: executing program 1 (id=84): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa402, 0x0) fallocate(r0, 0x11, 0x600, 0x7c000) 5.228796893s ago: executing program 2 (id=85): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) signalfd(r6, &(0x7f0000000240)={[0x6096]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000014c0)={r7, 0xff}) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 5.054326459s ago: executing program 1 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)='|') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 4.231559305s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pipe2(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000000340)={0x0}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 4.07779312s ago: executing program 2 (id=88): r0 = socket(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x100000000006, 0x3ff}) unshare(0x4060700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.691770844s ago: executing program 2 (id=89): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1.770477174s ago: executing program 0 (id=90): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r1, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) signalfd(r6, &(0x7f0000000240)={[0x6096]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000014c0)={r7, 0xff}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket$kcm(0x21, 0x2, 0xa) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) 1.544621611s ago: executing program 3 (id=91): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x1}, {0x9, 0x1, 0x1, 0x174}, {0x401, 0x80, 0x5, 0x3}, {0xcd9, 0x4, 0x7, 0x80000000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 1.328430949s ago: executing program 1 (id=92): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$vim2m(&(0x7f0000000200), 0x7ff, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000001640)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x8080) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000000ffe, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x1, 0xd, 0x80000002}, 0x0, 0x0) 466.634226ms ago: executing program 0 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x24}}, 0x0) 273.408222ms ago: executing program 3 (id=94): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 197.463225ms ago: executing program 0 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x200088d4) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 0s ago: executing program 2 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x200088d4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0x5}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 27.653769][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.664234][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. syzkaller login: [ 47.154155][ T4176] cgroup: Unknown subsys name 'net' [ 47.288469][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.500218][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.764705][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 49.787426][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 49.859481][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 49.930176][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 49.952819][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.960213][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.968496][ T4189] device bridge_slave_0 entered promiscuous mode [ 49.976775][ T4202] chnl_net:caif_netlink_parms(): no params data found [ 50.012469][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.019747][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.027619][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.049300][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.056635][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.064791][ T4191] device bridge_slave_0 entered promiscuous mode [ 50.082647][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.089832][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.097635][ T4190] device bridge_slave_0 entered promiscuous mode [ 50.110715][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.117878][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.126241][ T4190] device bridge_slave_1 entered promiscuous mode [ 50.136597][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.143917][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.151812][ T4191] device bridge_slave_1 entered promiscuous mode [ 50.168500][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.202558][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.251153][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.264185][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.273881][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.281212][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.289429][ T4197] device bridge_slave_0 entered promiscuous mode [ 50.302520][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.309745][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.317815][ T4197] device bridge_slave_1 entered promiscuous mode [ 50.326065][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.347839][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.364142][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.371223][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.379102][ T4202] device bridge_slave_0 entered promiscuous mode [ 50.392190][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.399583][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.407279][ T4202] device bridge_slave_1 entered promiscuous mode [ 50.417585][ T4189] team0: Port device team_slave_0 added [ 50.436570][ T4190] team0: Port device team_slave_0 added [ 50.454886][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.466998][ T4189] team0: Port device team_slave_1 added [ 50.475625][ T4191] team0: Port device team_slave_0 added [ 50.483135][ T4190] team0: Port device team_slave_1 added [ 50.495928][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.512246][ T4191] team0: Port device team_slave_1 added [ 50.531389][ T4202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.562667][ T4202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.579107][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.586449][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.613002][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.631773][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.639240][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.665490][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.677015][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.684161][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.710345][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.728610][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.735798][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.761809][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.774316][ T4197] team0: Port device team_slave_0 added [ 50.780552][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.787984][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.814153][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.831890][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.838906][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.865248][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.879121][ T4202] team0: Port device team_slave_0 added [ 50.890303][ T4197] team0: Port device team_slave_1 added [ 50.910590][ T4202] team0: Port device team_slave_1 added [ 50.927250][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.934476][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.960668][ T4202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.977904][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.985334][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.011533][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.023599][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.030635][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.056550][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.068683][ T4202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.076046][ T4202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.102499][ T4202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.160636][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.167340][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.184871][ T4191] device hsr_slave_0 entered promiscuous mode [ 51.191702][ T4191] device hsr_slave_1 entered promiscuous mode [ 51.199114][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.206925][ T4191] Cannot create hsr debugfs directory [ 51.220818][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.227908][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.234944][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.242500][ T4190] Cannot create hsr debugfs directory [ 51.284810][ T4197] device hsr_slave_0 entered promiscuous mode [ 51.291536][ T4197] device hsr_slave_1 entered promiscuous mode [ 51.298229][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.306281][ T4197] Cannot create hsr debugfs directory [ 51.314973][ T4202] device hsr_slave_0 entered promiscuous mode [ 51.321973][ T4202] device hsr_slave_1 entered promiscuous mode [ 51.329079][ T4202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.336915][ T4202] Cannot create hsr debugfs directory [ 51.503716][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 51.513604][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 51.518618][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 51.526576][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 51.583163][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 51.638659][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.649736][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.661649][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.676335][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.729152][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.741684][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.754925][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.767599][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.811947][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.820877][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.845519][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.855025][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.892569][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.902014][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.945292][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.957459][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.967791][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.997673][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.007064][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.019262][ T4202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.029274][ T4202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.039876][ T4202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.052264][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.070596][ T4202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.086436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.098350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.107596][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.114809][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.131580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.140515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.150890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.160553][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.167797][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.176059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.185088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.204891][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.236125][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.246450][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.256177][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.265257][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.273871][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.282208][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.291534][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.305609][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.316260][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.338626][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.350782][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.366496][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.378010][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.387283][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.429259][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.458386][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.467796][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.479035][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.486280][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.497154][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.508973][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.518115][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.527009][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.534124][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.553700][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.565595][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.575605][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.604294][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.622659][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.630087][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.639490][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.651971][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.661577][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.670229][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.679219][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.689761][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.697195][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.706237][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.715404][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.724347][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.732664][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.739758][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.747927][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.772178][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.781474][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.791319][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.800278][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.809734][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.817837][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.826923][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.835988][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.844597][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.853881][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.862366][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.871290][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.880277][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.892609][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.905585][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.916373][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.925857][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.937273][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.955136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.964552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.975961][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.983151][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.990825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.998781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.016719][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.028014][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.042614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.053044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.061800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.070705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.079443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.088821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.097215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.106528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.117082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.129551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.141001][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.148122][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.172552][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.192704][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.201730][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.211669][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.218864][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.227798][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.236949][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.246754][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.253976][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.261689][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.271084][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.280836][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.289724][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.339719][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.366230][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.376424][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.385257][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.394845][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.403904][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.412263][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.421127][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.430108][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.439048][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.448168][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.456731][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.466456][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.475214][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.484054][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.499388][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.508927][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.517334][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.527402][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.539395][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.552316][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.564475][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.583132][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 53.589291][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 53.603234][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 53.609425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.619187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.627774][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 53.637318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.645808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.662386][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.669672][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 53.705831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.716840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.739749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.749616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.760016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.771889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.783744][ T4189] device veth0_vlan entered promiscuous mode [ 53.795981][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.812824][ T4189] device veth1_vlan entered promiscuous mode [ 53.838119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.852687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.879532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.888666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.939571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.949844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.959576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.967546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.976092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.988675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.997363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.006999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.022561][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.037646][ T4191] device veth0_vlan entered promiscuous mode [ 54.054158][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.061654][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.076322][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.090126][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.106587][ T4197] device veth0_vlan entered promiscuous mode [ 54.118232][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.127921][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.137757][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.147977][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.157486][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.169854][ T4197] device veth1_vlan entered promiscuous mode [ 54.186416][ T4189] device veth0_macvtap entered promiscuous mode [ 54.212670][ T4189] device veth1_macvtap entered promiscuous mode [ 54.221681][ T4191] device veth1_vlan entered promiscuous mode [ 54.255231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.264783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.272718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.281778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.290576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.299866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.317365][ T4197] device veth0_macvtap entered promiscuous mode [ 54.324870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.335450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.360055][ T4197] device veth1_macvtap entered promiscuous mode [ 54.375599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.385086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.399303][ T4191] device veth0_macvtap entered promiscuous mode [ 54.414583][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.424575][ T4202] device veth0_vlan entered promiscuous mode [ 54.432460][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.440995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.452225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.461315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.471154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.479807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.489236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.498305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.507659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.518363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.527175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.535166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.547608][ T4191] device veth1_macvtap entered promiscuous mode [ 54.574163][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.584193][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.593244][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.601978][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.621831][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.634779][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.646798][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.656866][ T4202] device veth1_vlan entered promiscuous mode [ 54.665983][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.676919][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.687328][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.698069][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.710738][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.721622][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.732652][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.747617][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.760215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.770748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.779296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.788390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.798244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.807050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.816100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.824845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.835357][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.846612][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.856763][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.868871][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.880837][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.895798][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.904890][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.913925][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.922621][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.932557][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.940814][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.950729][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.959657][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.968498][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.991864][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.012573][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.021814][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.038951][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.110001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.120236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.129676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.139058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.147775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.155775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.165572][ T4202] device veth0_macvtap entered promiscuous mode [ 55.176660][ T4190] device veth0_vlan entered promiscuous mode [ 55.207454][ T4202] device veth1_macvtap entered promiscuous mode [ 55.220591][ T4190] device veth1_vlan entered promiscuous mode [ 55.264414][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.272406][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.323355][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.331194][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.337671][ T4190] device veth0_macvtap entered promiscuous mode [ 55.347790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.357302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.365758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.374911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.385023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.392748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.400908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.409984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.421656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.431059][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.441740][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.451856][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.462599][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.472686][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.483245][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.495140][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.527777][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.537237][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.541807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.555534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.565590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.576627][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.576856][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.593738][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.602390][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.614023][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.624746][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.634880][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.645341][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.656426][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.663417][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 55.670865][ T4190] device veth1_macvtap entered promiscuous mode [ 55.677461][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 55.684837][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 55.692416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.701470][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 55.707768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.717803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.727585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.739054][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.747804][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 55.755960][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.765237][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.774061][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.798615][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.814885][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.825517][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.837101][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.847219][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.859156][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.874581][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.889329][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.904311][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.929623][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.940591][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.083581][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.094687][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.104976][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.116238][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.126539][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.137856][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.158100][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.273170][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.339393][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.453645][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.552328][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.906491][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.910774][ T4275] loop0: detected capacity change from 0 to 2048 [ 56.921484][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.961179][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.014869][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.057289][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.081347][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.098278][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.284835][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.308509][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.509330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.675073][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.703672][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.911703][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 57.925048][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 57.931104][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.939626][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 57.948253][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 57.955440][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 58.334384][ T144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 58.424915][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.436714][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 58.459983][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.459983][ T144] [ 58.486221][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.506043][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.538756][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 58.551800][ T144] EXT4-fs (loop0): Free/Dirty block details [ 58.563162][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.565720][ T144] EXT4-fs (loop0): free_blocks=4096 [ 58.576278][ T144] EXT4-fs (loop0): dirty_blocks=160 [ 58.591850][ T144] EXT4-fs (loop0): Block reservation details [ 58.600630][ T144] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 58.690342][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.748010][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.829888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.921033][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.945031][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.951236][ T4294] loop2: detected capacity change from 0 to 32768 [ 58.978956][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.009554][ T4294] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 59.018124][ T4294] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 59.023946][ T4300] Zero length message leads to an empty skb [ 59.045533][ T4294] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 59.055379][ T4301] loop3: detected capacity change from 0 to 2048 [ 59.063387][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 59.081389][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 59.119236][ T4304] loop0: detected capacity change from 0 to 2048 [ 59.207843][ T4301] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.232496][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 59.248057][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 59.255877][ T4294] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 59.411058][ T4294] gfs2: fsid=syz:syz.0: found 1 quota changes [ 59.429472][ T4321] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 59.429472][ T4321] inode = 11 2339 [ 59.429472][ T4321] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 59.697567][ T4321] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 60.046994][ T4321] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing. [ 60.098164][ T4314] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 60.167475][ T4321] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 60.182201][ T4321] CPU: 1 PID: 4321 Comm: gfs2_quotad Not tainted syzkaller #0 [ 60.189774][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.199849][ T4321] Call Trace: [ 60.203138][ T4321] [ 60.206078][ T4321] dump_stack_lvl+0x188/0x250 [ 60.210964][ T4321] ? asm_common_interrupt+0x22/0x40 [ 60.216179][ T4321] ? show_regs_print_info+0x20/0x20 [ 60.221395][ T4321] ? asm_common_interrupt+0x22/0x40 [ 60.226614][ T4321] ? gfs2_assert_warn_i+0x180/0x2c0 [ 60.231852][ T4321] gfs2_assert_warn_i+0x18f/0x2c0 [ 60.236905][ T4321] gfs2_quota_cleanup+0x4b4/0x6a0 [ 60.241955][ T4321] gfs2_make_fs_ro+0x440/0x620 [ 60.246751][ T4321] ? __might_sleep+0xf0/0xf0 [ 60.251361][ T4321] ? gfs2_dinode_out+0xb00/0xb00 [ 60.252963][ T4314] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 60.256303][ T4321] ? _raw_spin_unlock+0x36/0x40 [ 60.273219][ T4330] trusted_key: encrypted_key: key user:syz not found [ 60.273436][ T4321] ? gfs2_glock_nq+0xcb0/0x1550 [ 60.285093][ T4321] gfs2_withdraw+0x610/0x1490 [ 60.289808][ T4321] ? gfs2_lm+0x240/0x240 [ 60.294065][ T4321] ? __schedule+0x11f7/0x43c0 [ 60.298753][ T4321] ? gfs2_freeze_lock+0x52/0xc0 [ 60.303626][ T4321] ? gfs2_consist_inode_i+0xc0/0xe0 [ 60.308839][ T4321] gfs2_inode_refresh+0xb64/0xff0 [ 60.313872][ T4321] ? do_promote+0x71a/0xab0 [ 60.318383][ T4321] ? gfs2_inode_metasync+0xf0/0xf0 [ 60.323496][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 60.328532][ T4321] inode_go_lock+0x127/0x470 [ 60.333128][ T4321] do_promote+0x741/0xab0 [ 60.337487][ T4321] finish_xmote+0x4df/0xb00 [ 60.342012][ T4321] do_xmote+0x7b6/0x1120 [ 60.346282][ T4321] gfs2_glock_nq+0xc7a/0x1550 [ 60.350986][ T4321] do_sync+0x4ab/0xc40 [ 60.355073][ T4321] ? slot_put+0x1e0/0x1e0 [ 60.359418][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 60.364450][ T4321] ? do_raw_spin_lock+0x128/0x2f0 [ 60.369484][ T4321] ? do_sync+0x4a3/0xc40 [ 60.373901][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 60.379126][ T4321] gfs2_quota_sync+0x32c/0x700 [ 60.384091][ T4321] gfs2_quotad+0x403/0x890 [ 60.388543][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 60.393669][ T4321] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 60.399663][ T4321] ? init_wait_entry+0xd0/0xd0 [ 60.404552][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 60.410460][ T4321] ? __kthread_parkme+0x157/0x1b0 [ 60.415492][ T4321] kthread+0x436/0x520 [ 60.419648][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 60.424778][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 60.429375][ T4321] ret_from_fork+0x1f/0x30 [ 60.433810][ T4321] [ 60.469554][ T4331] loop1: detected capacity change from 0 to 32768 [ 60.484479][ T4321] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 60.493338][ T4321] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 60.500434][ T4321] gfs2: fsid=syz:syz.0: File system withdrawn [ 60.506888][ T4321] CPU: 0 PID: 4321 Comm: gfs2_quotad Not tainted syzkaller #0 [ 60.514446][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.524698][ T4321] Call Trace: [ 60.527996][ T4321] [ 60.530939][ T4321] dump_stack_lvl+0x188/0x250 [ 60.535640][ T4321] ? kobject_uevent_env+0x371/0x890 [ 60.540935][ T4321] ? show_regs_print_info+0x20/0x20 [ 60.546147][ T4321] ? load_image+0x400/0x400 [ 60.550658][ T4321] ? kobject_uevent_env+0x371/0x890 [ 60.555860][ T4321] ? lockref_put_or_lock+0x6e/0xb0 [ 60.561031][ T4321] gfs2_withdraw+0x1149/0x1490 [ 60.565814][ T4321] ? gfs2_lm+0x240/0x240 [ 60.570080][ T4321] ? __schedule+0x11f7/0x43c0 [ 60.575192][ T4321] ? gfs2_consist_inode_i+0xc0/0xe0 [ 60.580499][ T4321] gfs2_inode_refresh+0xb64/0xff0 [ 60.585540][ T4321] ? do_promote+0x71a/0xab0 [ 60.590056][ T4321] ? gfs2_inode_metasync+0xf0/0xf0 [ 60.595172][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 60.600236][ T4321] inode_go_lock+0x127/0x470 [ 60.604964][ T4321] do_promote+0x741/0xab0 [ 60.609403][ T4321] finish_xmote+0x4df/0xb00 [ 60.613930][ T4321] do_xmote+0x7b6/0x1120 [ 60.618196][ T4321] gfs2_glock_nq+0xc7a/0x1550 [ 60.622914][ T4321] do_sync+0x4ab/0xc40 [ 60.627108][ T4321] ? slot_put+0x1e0/0x1e0 [ 60.631455][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 60.636488][ T4321] ? do_raw_spin_lock+0x128/0x2f0 [ 60.641536][ T4321] ? do_sync+0x4a3/0xc40 [ 60.645835][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 60.651045][ T4321] gfs2_quota_sync+0x32c/0x700 [ 60.655828][ T4321] gfs2_quotad+0x403/0x890 [ 60.660263][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 60.665381][ T4321] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 60.671284][ T4321] ? init_wait_entry+0xd0/0xd0 [ 60.676074][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 60.681982][ T4321] ? __kthread_parkme+0x157/0x1b0 [ 60.687015][ T4321] kthread+0x436/0x520 [ 60.691085][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 60.696280][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 60.700872][ T4321] ret_from_fork+0x1f/0x30 [ 60.705315][ T4321] [ 60.760810][ T4314] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.760810][ T4314] [ 60.770702][ T4314] EXT4-fs (loop3): Total free blocks count 0 [ 60.779156][ T4304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.792079][ T4314] EXT4-fs (loop3): Free/Dirty block details [ 60.798851][ T4314] EXT4-fs (loop3): free_blocks=4096 [ 60.986207][ T4314] EXT4-fs (loop3): dirty_blocks=160 [ 60.991541][ T4314] EXT4-fs (loop3): Block reservation details [ 61.002621][ T4314] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 61.089330][ T4335] process 'syz.4.13' launched './file0' with NULL argv: empty string added [ 61.169500][ T4331] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4331) [ 61.299312][ T4331] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 61.308268][ T4331] BTRFS info (device loop1): setting nodatacow, compression disabled [ 61.316470][ T4331] BTRFS info (device loop1): force clearing of disk cache [ 61.323623][ T4331] BTRFS info (device loop1): turning on sync discard [ 61.330401][ T4331] BTRFS info (device loop1): turning off barriers [ 61.336850][ T4331] BTRFS info (device loop1): use no compression [ 61.343126][ T4331] BTRFS info (device loop1): disabling free space tree [ 61.349995][ T4331] BTRFS info (device loop1): enabling ssd optimizations [ 61.356970][ T4331] BTRFS info (device loop1): using spread ssd allocation scheme [ 61.364639][ T4331] BTRFS info (device loop1): not using ssd optimizations [ 61.371690][ T4331] BTRFS info (device loop1): not using spread ssd allocation scheme [ 61.379808][ T4331] BTRFS info (device loop1): has skinny extents [ 61.425465][ T1278] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 61.536463][ T1278] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 61.640444][ T1278] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.640444][ T1278] [ 61.689365][ T1278] EXT4-fs (loop0): Total free blocks count 0 [ 61.706336][ T1278] EXT4-fs (loop0): Free/Dirty block details [ 61.712274][ T1278] EXT4-fs (loop0): free_blocks=4096 [ 61.821924][ T1278] EXT4-fs (loop0): dirty_blocks=160 [ 61.870111][ T1278] EXT4-fs (loop0): Block reservation details [ 61.902664][ T1278] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 61.920809][ T4331] BTRFS info (device loop1): clearing free space tree [ 61.928394][ T4331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 61.939258][ T4331] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.782999][ T4380] trusted_key: encrypted_key: key user:syz not found [ 64.755293][ T4306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4306) [ 65.708545][ T4405] device syzkaller0 entered promiscuous mode [ 66.792865][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.802888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.812869][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.822864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.832864][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 66.842867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 67.088789][ T4433] loop2: detected capacity change from 0 to 32768 [ 69.388821][ T4461] loop2: detected capacity change from 0 to 2048 [ 70.022250][ T4461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.542867][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.788220][ T4450] loop0: detected capacity change from 0 to 32768 [ 70.948971][ T1278] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 70.971348][ T1278] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 70.989118][ T1278] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.989118][ T1278] [ 71.000099][ T1278] EXT4-fs (loop2): Total free blocks count 0 [ 71.006529][ T1278] EXT4-fs (loop2): Free/Dirty block details [ 71.012440][ T1278] EXT4-fs (loop2): free_blocks=4096 [ 71.020485][ T1278] EXT4-fs (loop2): dirty_blocks=160 [ 71.026073][ T1278] EXT4-fs (loop2): Block reservation details [ 71.032475][ T1278] EXT4-fs (loop2): i_reserved_data_blocks=10 [ 71.122876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 71.142873][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 71.152882][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 71.930568][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.937294][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.957275][ T4479] trusted_key: encrypted_key: key user:syz not found [ 72.296079][ T4489] device syzkaller0 entered promiscuous mode [ 73.938064][ T4514] device syzkaller0 entered promiscuous mode [ 76.485499][ T1762] cfg80211: failed to load regulatory.db [ 76.691525][ T4537] loop1: detected capacity change from 0 to 2048 [ 76.794230][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.317321][ T4552] device syzkaller0 entered promiscuous mode [ 77.455036][ T4549] loop3: detected capacity change from 0 to 1024 [ 77.559513][ T4549] EXT4-fs (loop3): Ignoring removed bh option [ 77.637839][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 78.790106][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 78.830850][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 78.887374][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.887374][ T9] [ 78.971846][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 79.026278][ T9] EXT4-fs (loop1): Free/Dirty block details [ 79.094869][ T9] EXT4-fs (loop1): free_blocks=4096 [ 79.153897][ T9] EXT4-fs (loop1): dirty_blocks=160 [ 79.213402][ T9] EXT4-fs (loop1): Block reservation details [ 79.282053][ T9] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 80.944810][ T4582] hub 8-0:1.0: USB hub found [ 80.953172][ T4582] hub 8-0:1.0: 1 port detected [ 81.053808][ T4573] loop1: detected capacity change from 0 to 1024 [ 81.349130][ T4573] EXT4-fs (loop1): Ignoring removed bh option [ 81.624153][ T4573] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 82.579960][ T4596] hub 8-0:1.0: USB hub found [ 82.586318][ T4596] hub 8-0:1.0: 1 port detected [ 82.746942][ T4592] device syzkaller0 entered promiscuous mode [ 82.902857][ C1] sched: RT throttling activated [ 83.683602][ T4603] hub 8-0:1.0: USB hub found [ 83.689559][ T4603] hub 8-0:1.0: 1 port detected [ 86.840012][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.248226][ T4628] loop4: detected capacity change from 0 to 1024 [ 87.333089][ T4628] EXT4-fs (loop4): Ignoring removed bh option [ 87.472514][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 87.511053][ T4625] loop1: detected capacity change from 0 to 1024 [ 87.589936][ T4618] loop3: detected capacity change from 0 to 1024 [ 87.740115][ T4646] loop0: detected capacity change from 0 to 1024 [ 87.950145][ T4646] EXT4-fs (loop0): Ignoring removed bh option [ 87.964330][ T4625] EXT4-fs (loop1): Ignoring removed bh option [ 87.970885][ T4618] EXT4-fs (loop3): Ignoring removed bh option [ 88.028924][ T4646] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 88.085069][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 88.811735][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 88.996953][ T4654] loop2: detected capacity change from 0 to 2048 [ 89.427586][ T4665] hub 8-0:1.0: USB hub found [ 89.433075][ T4665] hub 8-0:1.0: 1 port detected [ 90.224649][ T4654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.541151][ T4675] device syzkaller0 entered promiscuous mode [ 90.651623][ T4677] loop3: detected capacity change from 0 to 2048 [ 90.688790][ T4364] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 90.708288][ T4364] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 90.838984][ T4677] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.930725][ T4364] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.930725][ T4364] [ 91.136562][ T4364] EXT4-fs (loop2): Total free blocks count 0 [ 91.183337][ T4321] ================================================================== [ 91.191423][ T4321] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 91.198716][ T4321] Read of size 8 at addr ffff88802a8c4bb0 by task gfs2_quotad/4321 [ 91.206615][ T4321] [ 91.208980][ T4321] CPU: 1 PID: 4321 Comm: gfs2_quotad Not tainted syzkaller #0 [ 91.216526][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.226699][ T4321] Call Trace: [ 91.229998][ T4321] [ 91.232938][ T4321] dump_stack_lvl+0x188/0x250 [ 91.237620][ T4321] ? show_regs_print_info+0x20/0x20 [ 91.242839][ T4321] ? load_image+0x400/0x400 [ 91.247342][ T4321] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 91.252999][ T4321] print_address_description+0x60/0x2d0 [ 91.258575][ T4321] ? __lock_acquire+0x106/0x7d10 [ 91.263516][ T4321] kasan_report+0xdf/0x130 [ 91.267941][ T4321] ? __lock_acquire+0x106/0x7d10 [ 91.272893][ T4321] __lock_acquire+0x106/0x7d10 [ 91.277770][ T4321] ? verify_lock_unused+0x140/0x140 [ 91.283249][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 91.289242][ T4321] ? __free_object+0x218/0xa70 [ 91.294019][ T4321] ? lockdep_hardirqs_on+0x94/0x140 [ 91.299309][ T4321] ? verify_lock_unused+0x140/0x140 [ 91.304527][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 91.310521][ T4321] ? alloc_object+0x640/0x640 [ 91.315201][ T4321] ? lock_chain_count+0x20/0x20 [ 91.320054][ T4321] ? __rwlock_init+0x140/0x140 [ 91.324823][ T4321] lock_acquire+0x19e/0x400 [ 91.329340][ T4321] ? finish_wait+0xb5/0x1d0 [ 91.333848][ T4321] ? timer_delete_sync+0x20/0x20 [ 91.338802][ T4321] ? __mod_timer+0x91e/0xd00 [ 91.343559][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 91.348947][ T4321] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 91.354593][ T4321] ? lockdep_hardirqs_off+0x70/0x100 [ 91.360008][ T4321] _raw_spin_lock_irqsave+0xb0/0x100 [ 91.365400][ T4321] ? finish_wait+0xb5/0x1d0 [ 91.370023][ T4321] ? _raw_spin_lock+0x40/0x40 [ 91.374798][ T4321] ? update_process_times+0x200/0x200 [ 91.380372][ T4321] finish_wait+0xb5/0x1d0 [ 91.385023][ T4321] gfs2_quotad+0x710/0x890 [ 91.389582][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 91.394698][ T4321] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 91.400597][ T4321] ? init_wait_entry+0xd0/0xd0 [ 91.405740][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 91.411657][ T4321] ? __kthread_parkme+0x157/0x1b0 [ 91.417024][ T4321] kthread+0x436/0x520 [ 91.421223][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 91.426440][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 91.431045][ T4321] ret_from_fork+0x1f/0x30 [ 91.435492][ T4321] [ 91.438598][ T4321] [ 91.440918][ T4321] Allocated by task 4610: [ 91.445257][ T4321] __kasan_kmalloc+0xb5/0xf0 [ 91.449977][ T4321] snd_seq_oss_readq_new+0x7e/0x240 [ 91.455346][ T4321] snd_seq_oss_open+0x7e7/0xf50 [ 91.460386][ T4321] odev_open+0x63/0x90 [ 91.464453][ T4321] chrdev_open+0x5c5/0x6a0 [ 91.468932][ T4321] do_dentry_open+0x7ff/0xf80 [ 91.473809][ T4321] path_openat+0x26f5/0x2fa0 [ 91.478410][ T4321] do_filp_open+0x1e2/0x410 [ 91.483350][ T4321] do_sys_openat2+0x150/0x4b0 [ 91.488037][ T4321] __x64_sys_openat+0x135/0x160 [ 91.493020][ T4321] do_syscall_64+0x4c/0xa0 [ 91.497562][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.503640][ T4321] [ 91.505963][ T4321] Freed by task 4613: [ 91.509952][ T4321] kasan_set_track+0x4b/0x70 [ 91.514547][ T4321] kasan_set_free_info+0x1f/0x40 [ 91.519491][ T4321] ____kasan_slab_free+0xd5/0x110 [ 91.524528][ T4321] slab_free_freelist_hook+0xea/0x170 [ 91.529904][ T4321] kfree+0xef/0x2a0 [ 91.533715][ T4321] snd_seq_oss_readq_delete+0x3a/0x50 [ 91.539117][ T4321] free_devinfo+0x87/0xa0 [ 91.543479][ T4321] port_delete+0xc9/0x1a0 [ 91.547818][ T4321] snd_seq_delete_port+0x1c0/0x200 [ 91.553023][ T4321] snd_seq_ioctl_delete_port+0x8d/0x190 [ 91.558729][ T4321] snd_seq_event_port_detach+0xe1/0x160 [ 91.564289][ T4321] snd_seq_oss_release+0x17b/0x310 [ 91.569410][ T4321] odev_release+0x52/0x70 [ 91.573735][ T4321] __fput+0x234/0x930 [ 91.577727][ T4321] task_work_run+0x125/0x1a0 [ 91.582448][ T4321] get_signal+0x1222/0x12c0 [ 91.587045][ T4321] arch_do_signal_or_restart+0xe7/0x12c0 [ 91.592913][ T4321] exit_to_user_mode_loop+0x9e/0x130 [ 91.598509][ T4321] exit_to_user_mode_prepare+0xee/0x180 [ 91.604062][ T4321] syscall_exit_to_user_mode+0x16/0x40 [ 91.609632][ T4321] do_syscall_64+0x58/0xa0 [ 91.614048][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.620467][ T4321] [ 91.622871][ T4321] The buggy address belongs to the object at ffff88802a8c4000 [ 91.622871][ T4321] which belongs to the cache kmalloc-8k of size 8192 [ 91.637037][ T4321] The buggy address is located 2992 bytes inside of [ 91.637037][ T4321] 8192-byte region [ffff88802a8c4000, ffff88802a8c6000) [ 91.650496][ T4321] The buggy address belongs to the page: [ 91.656194][ T4321] page:ffffea0000aa3000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a8c0 [ 91.666442][ T4321] head:ffffea0000aa3000 order:3 compound_mapcount:0 compound_pincount:0 [ 91.674760][ T4321] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 91.682742][ T4321] raw: 00fff00000010200 ffffea0000ab8800 0000000200000002 ffff888016c42280 [ 91.691328][ T4321] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 91.699942][ T4321] page dumped because: kasan: bad access detected [ 91.706448][ T4321] page_owner tracks the page as allocated [ 91.712170][ T4321] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4032, ts 37809305076, free_ts 37807948488 [ 91.730500][ T4321] get_page_from_freelist+0x1bbd/0x1ca0 [ 91.736282][ T4321] __alloc_pages+0x1ee/0x480 [ 91.740892][ T4321] new_slab+0xc0/0x4b0 [ 91.744971][ T4321] ___slab_alloc+0x80a/0xdd0 [ 91.749559][ T4321] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 91.754940][ T4321] tomoyo_init_log+0x1008/0x1e90 [ 91.759988][ T4321] tomoyo_supervisor+0x38d/0x11f0 [ 91.765024][ T4321] tomoyo_env_perm+0x14e/0x1f0 [ 91.769788][ T4321] tomoyo_find_next_domain+0x1591/0x1a60 [ 91.775419][ T4321] tomoyo_bprm_check_security+0xdd/0x120 [ 91.781055][ T4321] security_bprm_check+0x5e/0x90 [ 91.785999][ T4321] bprm_execve+0xa53/0x1840 [ 91.790504][ T4321] do_execveat_common+0x51e/0x6d0 [ 91.795525][ T4321] __x64_sys_execve+0x8e/0xa0 [ 91.800206][ T4321] do_syscall_64+0x4c/0xa0 [ 91.804636][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.810564][ T4321] page last free stack trace: [ 91.815233][ T4321] free_unref_page_prepare+0x637/0x6c0 [ 91.820900][ T4321] free_unref_page+0x8f/0x2a0 [ 91.825588][ T4321] __unfreeze_partials+0x1a5/0x200 [ 91.830721][ T4321] put_cpu_partial+0x12d/0x190 [ 91.835576][ T4321] qlist_free_all+0x35/0x90 [ 91.840087][ T4321] kasan_quarantine_reduce+0x150/0x160 [ 91.845548][ T4321] __kasan_slab_alloc+0x2f/0xd0 [ 91.850409][ T4321] slab_post_alloc_hook+0x4c/0x380 [ 91.855522][ T4321] kmem_cache_alloc+0x100/0x290 [ 91.860372][ T4321] getname_flags+0xb5/0x500 [ 91.864878][ T4321] user_path_at_empty+0x2a/0x190 [ 91.869835][ T4321] vfs_statx+0x107/0x500 [ 91.874270][ T4321] __x64_sys_newfstatat+0x15f/0x200 [ 91.879476][ T4321] do_syscall_64+0x4c/0xa0 [ 91.883905][ T4321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.889955][ T4321] [ 91.892287][ T4321] Memory state around the buggy address: [ 91.897915][ T4321] ffff88802a8c4a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.905980][ T4321] ffff88802a8c4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.914602][ T4321] >ffff88802a8c4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.922979][ T4321] ^ [ 91.928609][ T4321] ffff88802a8c4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.936674][ T4321] ffff88802a8c4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.944725][ T4321] ================================================================== [ 91.952783][ T4321] Disabling lock debugging due to kernel taint [ 91.958959][ T4321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.966141][ T4321] CPU: 1 PID: 4321 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 91.975169][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.985227][ T4321] Call Trace: [ 91.988593][ T4321] [ 91.991518][ T4321] dump_stack_lvl+0x188/0x250 [ 91.996205][ T4321] ? show_regs_print_info+0x20/0x20 [ 92.001657][ T4321] ? load_image+0x400/0x400 [ 92.006163][ T4321] panic+0x2e5/0x810 [ 92.010059][ T4321] ? bpf_jit_dump+0xd0/0xd0 [ 92.014562][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.020657][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 92.025516][ T4321] ? __lock_acquire+0x106/0x7d10 [ 92.030570][ T4321] check_panic_on_warn+0x80/0xa0 [ 92.035627][ T4321] ? __lock_acquire+0x106/0x7d10 [ 92.040668][ T4321] end_report+0x6d/0xf0 [ 92.045153][ T4321] kasan_report+0x102/0x130 [ 92.049843][ T4321] ? __lock_acquire+0x106/0x7d10 [ 92.054784][ T4321] __lock_acquire+0x106/0x7d10 [ 92.059552][ T4321] ? verify_lock_unused+0x140/0x140 [ 92.064758][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 92.070745][ T4321] ? __free_object+0x218/0xa70 [ 92.075505][ T4321] ? lockdep_hardirqs_on+0x94/0x140 [ 92.080706][ T4321] ? verify_lock_unused+0x140/0x140 [ 92.086037][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 92.092018][ T4321] ? alloc_object+0x640/0x640 [ 92.096688][ T4321] ? lock_chain_count+0x20/0x20 [ 92.101536][ T4321] ? __rwlock_init+0x140/0x140 [ 92.106296][ T4321] lock_acquire+0x19e/0x400 [ 92.110803][ T4321] ? finish_wait+0xb5/0x1d0 [ 92.115311][ T4321] ? timer_delete_sync+0x20/0x20 [ 92.120254][ T4321] ? __mod_timer+0x91e/0xd00 [ 92.124859][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 92.130267][ T4321] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 92.135739][ T4321] ? lockdep_hardirqs_off+0x70/0x100 [ 92.141031][ T4321] _raw_spin_lock_irqsave+0xb0/0x100 [ 92.146324][ T4321] ? finish_wait+0xb5/0x1d0 [ 92.150830][ T4321] ? _raw_spin_lock+0x40/0x40 [ 92.155506][ T4321] ? update_process_times+0x200/0x200 [ 92.160881][ T4321] finish_wait+0xb5/0x1d0 [ 92.165266][ T4321] gfs2_quotad+0x710/0x890 [ 92.169713][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 92.174843][ T4321] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 92.180843][ T4321] ? init_wait_entry+0xd0/0xd0 [ 92.185749][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 92.191664][ T4321] ? __kthread_parkme+0x157/0x1b0 [ 92.196700][ T4321] kthread+0x436/0x520 [ 92.200783][ T4321] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 92.206016][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 92.210619][ T4321] ret_from_fork+0x1f/0x30 [ 92.215049][ T4321] [ 92.218370][ T4321] Kernel Offset: disabled [ 92.222714][ T4321] Rebooting in 86400 seconds..