last executing test programs: 2m9.033464808s ago: executing program 1 (id=87): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3, 0x80000000}, 0x10) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r3, 0x0, r1}, 0x10) bind$xdp(r0, &(0x7f0000000280)={0x2c, 0x5, r3, 0x1b, r1}, 0x10) 2m8.68960327s ago: executing program 1 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x121c488, &(0x7f00000005c0)=ANY=[], 0x1, 0x2d9, &(0x7f0000000200)="$eJzs3T9vG2UcB/DfOc75gMEemBBST6IDU0U6gVgcoVZCZKLyUBggoq2EYguplSLxR7idWFkYGHgFSEgsvIsuvAMkViQ2ilTp0J3v4nNwEzvEQZDPZ+mvz/N8757n8sSxhzz58OXJwZ087j364pfIsiQ6wxjGkyQG0YnGw1gw/DoAgP+yJ0URvxcz6+SSiMg2Ny0AYINW+/nfnZc/Xsi0AIANunX7vXd29/ZuvJtFFjcnXx2Oyk/25b+z/t178XGM4268Fv14GlG9T6g/+Jf1zaIopt28NIirk+nhqExOPnhcX3/3t4gqvxP9GBzFqncbVf7tvRs7VTzvtfLTch7P1/cflvnr0Y8Xj8IL+euzfN7OxyiNV19pzf9a9OPnj+KTGMedahLz/Jc7ef5W8c0fn79fTq/MJ9PDUa8aN1dsXeTXBQAAAAAAAAAAAAAAAAAAAACA/7dreXP4Tn4lrk7Kpvr8na2naT2mHjKYp8r+WZU0Ta3zgUrTIr6bHSm4fZQaLOS78VK3fbAgAAAAAAAAAAAAAAAAAAAAXF4PI2J/PL57/8Gnnx3846I5DaAbEX/eOvuVh62WK3Hy4F59z/3xuFOXC2Mep+2W2GrGJBEnTqNcxDk9ltOK57Jjc26K738oF7jOBbNWyxvLF7h92rpu14/07OtqdtfBfrL8Xr1oWrJ6k3ybRszHpLHivdJndRULG/u0JadLu/prrz19oSqmzxxTJEu2aKt489dZf92SHP/2TKunuvTu23XRih/bGyvt58hm8b+/ViTVaR29Vsvr5/lSBAAAAAAAAAAAAAAAAAAAl978t3/L//202PnoxGin6G10agAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwYeZ//3+NYlqHVxicxv0H//ISAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAT+CgAA///ZVko8") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m6.202412211s ago: executing program 1 (id=95): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m3.76615267s ago: executing program 1 (id=102): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b0, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) creat(0x0, 0x268) r2 = socket(0x1, 0x5, 0x0) write$nbd(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b520a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) 2m1.947509189s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) syz_io_uring_setup(0xec4, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x2b) 2m0.731717109s ago: executing program 1 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m59.879929127s ago: executing program 32 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 9.068460685s ago: executing program 0 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x10400, 0x0, 0xfb, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,\xfc\xb5%o\x85\x9b\xe1F\xe8*X\xe7\x84\xcc\xfd\xec\xcd\xbe\x9d3\x1a\x00\v_\xcf\xb7\xb5\xe1\xf9\x1eC') 7.760603808s ago: executing program 5 (id=441): io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.562302894s ago: executing program 4 (id=442): openat$kvm(0xffffffffffffff9c, 0x0, 0x10040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) 7.291787763s ago: executing program 0 (id=443): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x24000080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 7.290035243s ago: executing program 5 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xc35, 0x6, 0xbe9e, 0x40}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4aff, 0xd, 0xc}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 6.467998819s ago: executing program 4 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 5.967681456s ago: executing program 3 (id=447): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r1 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) socket$netlink(0x10, 0x3, 0x0) 5.959049896s ago: executing program 4 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) 5.878057689s ago: executing program 5 (id=449): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x62300) dup3(r2, r0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000140)='./file2\x00', 0x2000082, &(0x7f0000000440)=ANY=[@ANYBLOB="756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757466383d312c636f6465706167653d3836352c756e695f786c6174653d312c696f636861727365743d63703837342c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c00f423ba5dfcbaf8aac1edf75150a5c455aecbcb2e7b22bf3d896408e23dfea63dc1d419eb8cdacd8eb281df2ee5dadcb5ee43db09fee852ebadf655840106ee2725b3b877fe2443b8c105b369f06ec95d4da8fd82fe898a9249bccdf465bd92677cd96458ba30231f62a8e1df2d047d5f4177aa096229c1ede03ffcf944967f0d4807ff4b9aea344afbdc8bb74643c623be10b1ffc475d502258fc480c2b9c130f08ddc252219645dc64b18e5e1555275010958037c5ca833600a235fc94ba82522e34530a76c4cbee5807724abd9edc47bc5618e16ffee0dac65"], 0x1, 0x368, &(0x7f00000008c0)="$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") r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.067627446s ago: executing program 2 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0xfc00) 5.067319775s ago: executing program 0 (id=451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0x1}, {0x3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.967234649s ago: executing program 3 (id=452): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, &(0x7f00000005c0)=""/199, 0xc7, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.925876745s ago: executing program 4 (id=453): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df4ba4200b07aeeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f302e0f017500", 0x68}], 0x1, 0x48, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x2, 0x983a}, {0x6}]}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x101) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.877782346s ago: executing program 2 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000600)="bad330fbc9b55400040000ea0756", 0xe, 0x810, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.799670859s ago: executing program 3 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.406730582s ago: executing program 0 (id=456): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x8, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r6, r5, &(0x7f0000000080)=0xb, 0x8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$TCGETS2(r0, 0x5434, 0x0) 1.85699035s ago: executing program 5 (id=457): setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.769267993s ago: executing program 3 (id=458): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2009}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) pipe(&(0x7f00000025c0)) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0xf1a8, 0x20, 0xffffffffffffffff, 0x401}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x7ff, 0x9, 0x400004, 0x80000001, 0x7fffffff, 0xd}, 0x0, 0x0) 1.639769867s ago: executing program 2 (id=459): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x1}, 0x8) 1.632595138s ago: executing program 0 (id=460): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2510018}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbdd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10004, 0x6c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24048804) 1.600881618s ago: executing program 3 (id=461): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x85000}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x130, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400, 0x1a}}}}, [@NL80211_ATTR_IE={0x102, 0x2a, [@supported_rates={0x1, 0x2, [{0x4, 0x1}, {0x1b, 0x1}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xe0, "fcdbeced7633dc22d2626e10af7ed9af577bf7cda3958c9aebadedc9adacef6f9d219ce65df278bfcebdb8e3ffa2c89c37ad579ef0ef9e7bec795e878b7be3e5363b9ee011d588191299d6667536cc955c1bc5707c2756e334911aac582ceae4982be61596a6ed9dede9aaabeff93337fabc8086ef6d2d94551086abda10ecc740ea9a1a40d7d391d34f40b501cfc9d8aa02328d60950eb82b4814dccf5d0779e0d71a5d7710cddb225d39f63e60aec97d9eb583aae2b049db390b4f11cda3618ffefa4600627c542f5b67befbb692fce9aca785e363915c198e81acf86bee46"}, @mesh_chsw={0x76, 0x6, {0x0, 0x40, 0x22, 0x9}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x28004084}, 0x80) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x453, 0x2, 0xa1, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000ffffffffc3000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 1.54775592s ago: executing program 4 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r5, 0x301, 0xfffffffd, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x8000) 1.535277111s ago: executing program 2 (id=463): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x6d2442) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) pipe(0x0) unshare(0x20000400) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x48}}, 0x44) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.480810612s ago: executing program 5 (id=464): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 1.184488272s ago: executing program 2 (id=465): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x3, 0xbf27, 0x500}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 975.278818ms ago: executing program 0 (id=466): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 159.761695ms ago: executing program 4 (id=467): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000000), 0x0, 0xfe37, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) 129.662666ms ago: executing program 3 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) 121.008116ms ago: executing program 2 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd4, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x54, 0x6, "547b827676be676efab0418cca13bb99a56e0ccdcb06126d11ac19d844d7105d61164d9a4678da7958f51f573170e7937e9d2803f187ba69228305111fc9f4655ccd4382e6fb423e339312b3144b85e0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x48, 0x6, "cc13d89126c2b1db5b7fd32ca78b45a9888da02ac3084617624901aacc537dea561c92e4f504baae38ce2863efc09a59e4300da5cab73a8c951c2b9f4a7f80a085f9f57a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2045}, 0x40001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r7, @ANYBLOB="0500330041"], 0x2c}}, 0x80) 0s ago: executing program 5 (id=470): syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x60200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 54.583608][ T4172] cgroup: Unknown subsys name 'net' [ 54.734354][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.221259][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.565740][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 57.684215][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.691540][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.700148][ T4185] device bridge_slave_0 entered promiscuous mode [ 57.718187][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 57.728659][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.735781][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.744532][ T4185] device bridge_slave_1 entered promiscuous mode [ 57.785943][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.803718][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 57.823789][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.856286][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 57.906295][ T4185] team0: Port device team_slave_0 added [ 57.935867][ T4185] team0: Port device team_slave_1 added [ 57.946281][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 57.991792][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.999053][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.007447][ T4191] device bridge_slave_0 entered promiscuous mode [ 58.040889][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.048444][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.056253][ T4191] device bridge_slave_1 entered promiscuous mode [ 58.076807][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.084046][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.111111][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.129568][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.136828][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.146409][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.167994][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.174977][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.201431][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.220123][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.227748][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.235626][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.243281][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.250560][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.258834][ T4186] device bridge_slave_0 entered promiscuous mode [ 58.268508][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.280370][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.314789][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.322563][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.330710][ T4186] device bridge_slave_1 entered promiscuous mode [ 58.351186][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.358695][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.366494][ T4187] device bridge_slave_0 entered promiscuous mode [ 58.398622][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.406235][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.414996][ T4187] device bridge_slave_1 entered promiscuous mode [ 58.423782][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.437201][ T4191] team0: Port device team_slave_0 added [ 58.444978][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.459073][ T4185] device hsr_slave_0 entered promiscuous mode [ 58.465840][ T4185] device hsr_slave_1 entered promiscuous mode [ 58.474475][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.486432][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.504817][ T4191] team0: Port device team_slave_1 added [ 58.552708][ T4184] team0: Port device team_slave_0 added [ 58.560989][ T4184] team0: Port device team_slave_1 added [ 58.573587][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.583533][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.590775][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.617276][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.633282][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.640429][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.667413][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.694108][ T4186] team0: Port device team_slave_0 added [ 58.701700][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.729749][ T4186] team0: Port device team_slave_1 added [ 58.753102][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.760269][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.786442][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.804383][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.811685][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.838231][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.881985][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.889338][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.917652][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.931575][ T4187] team0: Port device team_slave_0 added [ 58.943589][ T4187] team0: Port device team_slave_1 added [ 58.967095][ T4191] device hsr_slave_0 entered promiscuous mode [ 58.974442][ T4191] device hsr_slave_1 entered promiscuous mode [ 58.981503][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.989464][ T4191] Cannot create hsr debugfs directory [ 58.995430][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.002748][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.029387][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.058695][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.065671][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.072464][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.080158][ T4184] Cannot create hsr debugfs directory [ 59.115994][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.123359][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.149483][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.191256][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.198466][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.224810][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.263188][ T4186] device hsr_slave_0 entered promiscuous mode [ 59.270460][ T4186] device hsr_slave_1 entered promiscuous mode [ 59.277227][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.285164][ T4186] Cannot create hsr debugfs directory [ 59.292143][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 59.365398][ T4187] device hsr_slave_0 entered promiscuous mode [ 59.371751][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 59.377946][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 59.384690][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 59.385248][ T4187] device hsr_slave_1 entered promiscuous mode [ 59.391195][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 59.403894][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.412210][ T4187] Cannot create hsr debugfs directory [ 59.604899][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.615394][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.636682][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.650428][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.712139][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.730026][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.745988][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.755296][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.796149][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.825858][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.859300][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.881982][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.903370][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.949627][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.960672][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.986587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.995877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.006947][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.016469][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.031979][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.061098][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.070831][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.080541][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.090561][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.097911][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.107335][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.120828][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.133969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.145106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.154323][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.161461][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.190176][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.203615][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.212866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.222075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.233078][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.254439][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.273395][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.282694][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.314929][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.326564][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.336707][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.345530][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.352645][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.361484][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.371197][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.380386][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.388737][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.426685][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.436160][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.446246][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.453478][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.462456][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.473137][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.482717][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.492739][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.502028][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.511536][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.520471][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.528648][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.547626][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.567404][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.576378][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.586851][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.598608][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.607211][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.616220][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.625319][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.635118][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.660690][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.670799][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.681900][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.692020][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.702345][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.709469][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.718446][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.727352][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.737237][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.744409][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.752992][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.771255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.794338][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.823506][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.850214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.860402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.869823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.880114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.890294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.899431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.908739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.917318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.942444][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.952568][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.964928][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.977160][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.997406][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.006883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.023208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.044284][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.081873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.095098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.127060][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.150554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.161436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.177461][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.184666][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.197841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.206469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.215458][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.222695][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.233664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.243368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.257015][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.283706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.297004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.316867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.327322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.343136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.364373][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.378168][ T2303] Bluetooth: hci1: command 0x041b tx timeout [ 61.401971][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.412750][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.424763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.434687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.443024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.450773][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 61.457105][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 61.462269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.464505][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 61.478645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.478846][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 61.487201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.499969][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.509254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.518397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.526805][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.533957][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.542953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.551686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.560213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.569067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.577362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.585349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.606322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.615373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.624889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.639706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.663686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.671635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.723569][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.731970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.750075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.764729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.785720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.795032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.803288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.811064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.820639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.829374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.837329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.845355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.862961][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.872532][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.886690][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.898466][ T4185] device veth0_vlan entered promiscuous mode [ 61.916043][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.955081][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.969922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.986023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.004508][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.015641][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.078090][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.086018][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.111382][ T4185] device veth1_vlan entered promiscuous mode [ 62.126657][ T4184] device veth0_vlan entered promiscuous mode [ 62.138739][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.147245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.168712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.178788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.186619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.205390][ T4184] device veth1_vlan entered promiscuous mode [ 62.275675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.285140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.295772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.305444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.314844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.323816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.336317][ T4185] device veth0_macvtap entered promiscuous mode [ 62.372079][ T4186] device veth0_vlan entered promiscuous mode [ 62.382482][ T4185] device veth1_macvtap entered promiscuous mode [ 62.391880][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.400439][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.410251][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.419461][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.429192][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.437329][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.446009][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.454373][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.468784][ T4191] device veth0_vlan entered promiscuous mode [ 62.487030][ T4186] device veth1_vlan entered promiscuous mode [ 62.498551][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.506309][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.514643][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.523177][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.531537][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.539854][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.547715][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.555346][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.564006][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.576865][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.587095][ T4184] device veth0_macvtap entered promiscuous mode [ 62.595936][ T4191] device veth1_vlan entered promiscuous mode [ 62.613487][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.623537][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.632323][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.641008][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.650955][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.659785][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.670361][ T4184] device veth1_macvtap entered promiscuous mode [ 62.692885][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.702792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.713452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.722844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.751391][ T4186] device veth0_macvtap entered promiscuous mode [ 62.760511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.768890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.777437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.789275][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.798771][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.813396][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.822787][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.842639][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.853891][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.866348][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.876542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.885155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.895630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.906105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.914838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.949629][ T4186] device veth1_macvtap entered promiscuous mode [ 62.958129][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.969990][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.982978][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.002613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.016153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.025708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.035032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.065087][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.089375][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.103842][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.113349][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.125289][ T4191] device veth0_macvtap entered promiscuous mode [ 63.142016][ T4191] device veth1_macvtap entered promiscuous mode [ 63.153910][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.167352][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.178484][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.189248][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.201112][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.226971][ T4187] device veth0_vlan entered promiscuous mode [ 63.253568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.262639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.271537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.281940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.291074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.299921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.312110][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.323056][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.333684][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.344829][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.356051][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.369599][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.379583][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.388872][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.398584][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.422956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.431494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.440199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.448959][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 63.454648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.470214][ T4187] device veth1_vlan entered promiscuous mode [ 63.506212][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.516968][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.528809][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 63.534840][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 63.534991][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.547146][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 63.552206][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 63.564939][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.575473][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.586506][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.600775][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.618915][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.629951][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.641329][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.652671][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.662963][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.675079][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.686472][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.699646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.709403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.717459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.726585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.735837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.745340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.770183][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.780568][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.788770][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.802667][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.813149][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.822415][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.849093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.910647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.919873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.945543][ T4187] device veth0_macvtap entered promiscuous mode [ 63.952678][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.973323][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.009198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.020060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.036337][ T4187] device veth1_macvtap entered promiscuous mode [ 64.065574][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.083348][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.095497][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.111308][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.126633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.135815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.172640][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.187342][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.199632][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.210171][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.220037][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.230629][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.240681][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.252396][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.264447][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.285863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.299605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.312280][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.348903][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.359197][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.370202][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.380974][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.392230][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.402318][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.413554][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.425890][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.445666][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.459384][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.470366][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.471531][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.488627][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.493334][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.505558][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.514436][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.574184][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.575423][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.595265][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.612272][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.664464][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.678137][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.704545][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.739129][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.779320][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.914116][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.914352][ T420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.930383][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.170710][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.608884][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 65.648953][ T420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.669422][ T4213] Bluetooth: hci1: command 0x0419 tx timeout [ 65.675567][ T4213] Bluetooth: hci2: command 0x0419 tx timeout [ 65.682149][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 65.688773][ T4213] Bluetooth: hci0: command 0x0419 tx timeout [ 65.757318][ T4279] device syzkaller0 entered promiscuous mode [ 65.809903][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.886234][ T4292] loop4: detected capacity change from 0 to 1024 [ 67.049217][ T4292] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.096158][ T4292] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 67.152333][ T26] audit: type=1804 audit(1774916900.803:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8" name="bus" dev="ramfs" ino=32836 res=1 errno=0 [ 67.173115][ T4292] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #5: comm syz.4.5: unexpected bad inode w/o EXT4_IGET_BAD [ 67.217433][ T4292] EXT4-fs (loop4): no journal found [ 67.236343][ T26] audit: type=1804 audit(1774916900.823:3): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8" name="bus" dev="ramfs" ino=32836 res=1 errno=0 [ 67.237627][ T4292] EXT4-fs (loop4): can't get journal size [ 67.357932][ T4292] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 67.361782][ T4286] loop3: detected capacity change from 0 to 32768 [ 67.571794][ T4286] ======================================================= [ 67.571794][ T4286] WARNING: The mand mount option has been deprecated and [ 67.571794][ T4286] and is ignored by this kernel. Remove the mand [ 67.571794][ T4286] option from the mount to silence this warning. [ 67.571794][ T4286] ======================================================= [ 68.627504][ C0] sched: RT throttling activated [ 69.566285][ T4317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 69.625861][ T4317] device bridge1 entered promiscuous mode [ 69.668798][ T4317] team0: Port device bridge1 added [ 70.137435][ T4318] bridge0: port 3(team0) entered blocking state [ 70.184161][ T4318] bridge0: port 3(team0) entered disabled state [ 70.229979][ T4318] device team0 entered promiscuous mode [ 70.246395][ T4318] device team_slave_0 entered promiscuous mode [ 70.269990][ T4318] device team_slave_1 entered promiscuous mode [ 70.283696][ T4318] bridge0: port 3(team0) entered blocking state [ 70.290404][ T4318] bridge0: port 3(team0) entered forwarding state [ 70.418861][ T4332] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 70.653555][ T4346] loop4: detected capacity change from 0 to 128 [ 70.713405][ T4339] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 70.815461][ T4350] loop3: detected capacity change from 0 to 256 [ 70.989114][ T4346] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 71.673201][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.679852][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.777408][ T4346] hpfs: filesystem error: improperly stopped [ 71.783977][ T4346] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 71.807836][ T4346] hpfs: You really don't want any checks? You are crazy... [ 71.816186][ T4346] hpfs: hpfs_map_sector(): read error [ 71.857614][ T4346] hpfs: code page support is disabled [ 71.864377][ T4356] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.898250][ T4346] hpfs: hpfs_map_4sectors(): unaligned read [ 71.904458][ T4346] hpfs: hpfs_map_4sectors(): unaligned read [ 71.948118][ T4346] hpfs: filesystem error: unable to find root dir [ 72.005655][ T4346] hpfs: hpfs_map_4sectors(): unaligned read [ 72.060965][ T4346] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 73.001640][ T4346] hpfs: hpfs_map_4sectors(): unaligned read [ 73.008520][ T4346] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 73.052841][ T4346] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 73.453880][ T4366] loop3: detected capacity change from 0 to 40427 [ 73.504066][ T4373] loop1: detected capacity change from 0 to 4096 [ 73.581526][ T4366] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.589688][ T4366] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.602118][ T4366] F2FS-fs (loop3): invalid crc value [ 73.693978][ T4366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.987153][ T4366] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.994678][ T4366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.787629][ T26] audit: type=1800 audit(1774916908.413:4): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.24" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 74.833222][ T4383] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.522303][ T4379] device syzkaller0 entered promiscuous mode [ 75.627553][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 75.637574][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.647547][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 75.968523][ T4231] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.387668][ T4231] usb 1-1: config 0 has too many interfaces: 229, using maximum allowed: 32 [ 76.420350][ T4231] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 229 [ 77.517032][ T4231] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 77.547971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 77.557559][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.567352][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.576281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.585403][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.594397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.603537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.666596][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31 [ 77.697970][ T4231] usb 1-1: SerialNumber: syz [ 77.749788][ T4231] usb 1-1: config 0 descriptor?? [ 78.796242][ T4410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.846471][ T4387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'. [ 78.883032][ T4231] usb 1-1: USB disconnect, device number 2 [ 78.894903][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 81.467663][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.618043][ T4446] device syzkaller0 entered promiscuous mode [ 81.704300][ T13] cfg80211: failed to load regulatory.db [ 81.777874][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 82.778329][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.847669][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 82.855605][ T21] usb 3-1: can't read configurations, error -71 [ 82.899138][ T4458] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 84.140496][ T4469] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 84.252505][ T4470] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 84.270007][ T4470] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 84.288345][ T4470] Zero length message leads to an empty skb [ 86.678531][ T4479] loop3: detected capacity change from 0 to 2048 [ 86.761888][ T4492] device syzkaller0 entered promiscuous mode [ 86.917659][ T4498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.952558][ T4502] loop2: detected capacity change from 0 to 256 [ 87.739186][ T4479] syz.3.52 (4479) used greatest stack depth: 20016 bytes left [ 89.507743][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.802979][ T4530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.851590][ T4532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 90.108377][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.229156][ T4231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.508233][ T4231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.953365][ T4231] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.963293][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.973343][ T4231] usb 3-1: config 0 descriptor?? [ 90.993542][ T4535] loop1: detected capacity change from 0 to 4096 [ 91.241052][ T4535] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 91.919065][ T4553] loop4: detected capacity change from 0 to 1024 [ 92.003882][ T4553] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 92.059549][ T4535] ntfs3: loop1: Inode r=19 is not in use! [ 92.074206][ T4231] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 92.088722][ T4535] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.141235][ T4231] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 92.157339][ T4553] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 92.167283][ T4231] usb 3-1: USB disconnect, device number 4 [ 92.317301][ T4566] fido_id[4566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 97.801680][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 97.840568][ T4595] netlink: 'syz.4.82': attribute type 10 has an invalid length. [ 99.489584][ T4623] loop1: detected capacity change from 0 to 256 [ 100.943482][ T4629] netlink: 104 bytes leftover after parsing attributes in process `syz.3.94'. [ 101.008511][ T4231] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.418040][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.523802][ T4231] usb 1-1: config 0 has no interfaces? [ 101.539175][ T4631] ipt_CLUSTERIP: Please specify destination IP [ 101.616118][ T4231] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 101.746340][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.893052][ T4231] usb 1-1: config 0 descriptor?? [ 102.193071][ T4636] capability: warning: `syz.4.96' uses deprecated v2 capabilities in a way that may be insecure [ 103.007837][ T4231] usb 1-1: can't set config #0, error -71 [ 103.016542][ T4231] usb 1-1: USB disconnect, device number 3 [ 104.289219][ T4666] loop1: detected capacity change from 0 to 256 [ 105.052233][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 105.171545][ T4187] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 105.219358][ T4187] FAT-fs (loop1): Filesystem has been set read-only [ 105.236856][ T4187] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 106.983787][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.073687][ T4696] loop0: detected capacity change from 0 to 2048 [ 107.192233][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.223483][ T4696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.457746][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.631418][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.277823][ T4726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.285464][ T4726] IPv6: NLM_F_CREATE should be set when creating new route [ 110.717649][ T4736] ufs: You didn't specify the type of your ufs filesystem [ 110.717649][ T4736] [ 110.717649][ T4736] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 110.717649][ T4736] [ 110.717649][ T4736] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 110.749754][ T4736] ufs: ufstype=old is supported read-only [ 110.759096][ T4736] blk_update_request: I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.625729][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 112.707835][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.716642][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.578281][ T4729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.665363][ T4729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.857726][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 114.013445][ T4729] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.022581][ T4729] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.031488][ T4729] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.041030][ T4729] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.005102][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 118.862676][ T4713] chnl_net:caif_netlink_parms(): no params data found [ 119.504439][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.540178][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.573612][ T4713] device bridge_slave_0 entered promiscuous mode [ 119.613878][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.648469][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.672122][ T4713] device bridge_slave_1 entered promiscuous mode [ 119.742141][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.795747][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.900907][ T4713] team0: Port device team_slave_0 added [ 119.947186][ T4713] team0: Port device team_slave_1 added [ 122.004188][ T4827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.011626][ T4827] IPv6: NLM_F_CREATE should be set when creating new route [ 122.173148][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 122.844342][ T4831] bridge0: port 3(team0) entered disabled state [ 122.851272][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.858963][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.501364][ T4843] loop0: detected capacity change from 0 to 2048 [ 123.596436][ T4843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.603295][ T4855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.958563][ T4860] loop0: detected capacity change from 0 to 256 [ 126.069059][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.308920][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.439691][ T4831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.747914][ T4233] usb 3-1: config 0 has no interfaces? [ 126.754325][ T4233] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 127.189489][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.860975][ T4233] usb 3-1: config 0 descriptor?? [ 128.927844][ T4233] usb 3-1: can't set config #0, error -71 [ 128.976762][ T4233] usb 3-1: USB disconnect, device number 5 [ 129.138950][ T4883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.159'. [ 130.696320][ T4831] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.705594][ T4831] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.715263][ T4831] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.724309][ T4831] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.952875][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.963871][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.994683][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.054524][ T4890] lo speed is unknown, defaulting to 1000 [ 131.061570][ T4890] lo speed is unknown, defaulting to 1000 [ 131.087294][ T4905] device syzkaller0 entered promiscuous mode [ 131.097024][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.108724][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.136160][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.160834][ T4890] lo speed is unknown, defaulting to 1000 [ 131.259148][ T4890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.278365][ T4713] device hsr_slave_0 entered promiscuous mode [ 131.316393][ T4713] device hsr_slave_1 entered promiscuous mode [ 131.334488][ T4890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.389372][ T4713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.398767][ T4713] Cannot create hsr debugfs directory [ 132.326330][ T4890] lo speed is unknown, defaulting to 1000 [ 132.362731][ T4890] lo speed is unknown, defaulting to 1000 [ 132.464340][ T4890] lo speed is unknown, defaulting to 1000 [ 132.558659][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.168'. [ 132.673108][ T4890] lo speed is unknown, defaulting to 1000 [ 132.692649][ T4890] lo speed is unknown, defaulting to 1000 [ 132.892519][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900251][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.827004][ T4890] lo speed is unknown, defaulting to 1000 [ 135.629290][ T4713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.686322][ T4713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.778306][ T4958] atomic_op ffff88805e512998 conn xmit_atomic 0000000000000000 [ 135.816001][ T4713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.843576][ T4713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.741673][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.899861][ T4973] loop2: detected capacity change from 0 to 256 [ 136.998264][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.868473][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.948645][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.972653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.018424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.036575][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.043830][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.086027][ T4981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.178'. [ 138.097850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.115076][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 138.209105][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.234125][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.296244][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.303521][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.323490][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.369190][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.548754][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 138.712280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.816485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.246571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.421946][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.468953][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.536128][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.589559][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.616355][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.645458][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.715092][ T5012] loop0: detected capacity change from 0 to 22 [ 139.756439][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.768647][ T5012] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 139.856797][ T5012] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 139.878443][ T154] device hsr_slave_0 left promiscuous mode [ 139.928455][ T154] device hsr_slave_1 left promiscuous mode [ 139.936811][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.993424][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.023032][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.045790][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.078181][ T154] device bridge_slave_1 left promiscuous mode [ 140.086701][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.132954][ T154] device bridge_slave_0 left promiscuous mode [ 140.138747][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.148013][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.208010][ T154] device veth1_macvtap left promiscuous mode [ 140.215098][ T154] device veth0_macvtap left promiscuous mode [ 140.234753][ T154] device veth1_vlan left promiscuous mode [ 140.254689][ T154] device veth0_vlan left promiscuous mode [ 140.387650][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 141.477899][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.557931][ T23] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 141.577538][ T23] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 141.668926][ T154] team0 (unregistering): Port device team_slave_1 removed [ 141.694838][ T154] team0 (unregistering): Port device team_slave_0 removed [ 141.727267][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.765144][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.817935][ T23] usb 3-1: string descriptor 0 read error: -22 [ 141.824276][ T23] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 141.845226][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.932910][ T154] bond0 (unregistering): Released all slaves [ 143.040400][ T5056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.195'. [ 143.201016][ T1399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.210618][ T1399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.265741][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.177443][ T4190] usb 3-1: USB disconnect, device number 6 [ 145.520041][ T5085] loop2: detected capacity change from 0 to 128 [ 146.127805][ T5085] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 146.392817][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.477771][ T5085] ext2 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.760960][ T5105] sctp: [Deprecated]: syz.0.206 (pid 5105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.760960][ T5105] Use struct sctp_sack_info instead [ 147.668945][ T5114] device bridge2 entered promiscuous mode [ 147.690250][ T5114] team0: Port device bridge2 added [ 147.759469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.789752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.861691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.908362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.919127][ T4713] device veth0_vlan entered promiscuous mode [ 147.973136][ T4713] device veth1_vlan entered promiscuous mode [ 148.002359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.035154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.048588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.213678][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.226135][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.245775][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.310816][ T4713] device veth0_macvtap entered promiscuous mode [ 148.355112][ T4713] device veth1_macvtap entered promiscuous mode [ 148.434283][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.502600][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.532573][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.573842][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.610126][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.685602][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.696409][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.706410][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.717857][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.730226][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.753241][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.838524][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.929680][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.960059][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.008403][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.047395][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.081111][ T4713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.177555][ T4713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.186319][ T4713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.289966][ T4713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.092720][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'. [ 151.454579][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.473138][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.547402][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.706283][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.735428][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.770082][ T5192] device team_slave_0 entered promiscuous mode [ 152.776644][ T5192] device team_slave_1 entered promiscuous mode [ 152.938765][ T5192] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.981282][ T5192] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 153.780076][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.390112][ T5227] mmap: syz.2.235 (5227) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 159.580075][ T5275] loop0: detected capacity change from 0 to 128 [ 160.032534][ T5294] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 160.032534][ T5294] The task syz.3.249 (5294) triggered the difference, watch for misbehavior. [ 161.793942][ T5312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.681185][ T5319] loop5: detected capacity change from 0 to 256 [ 162.771521][ T5321] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 162.794001][ T5319] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.907600][ T5319] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 162.984973][ T5319] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.482546][ T5335] loop2: detected capacity change from 0 to 8192 [ 164.407975][ T5347] fuse: Bad value for 'fd' [ 164.571711][ T5353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.832633][ T5378] loop4: detected capacity change from 0 to 1024 [ 165.967814][ T5384] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 166.070011][ T5384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.273'. [ 166.124070][ T5384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.891402][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 169.076143][ T5432] bridge1: port 1(veth5) entered blocking state [ 169.113422][ T5432] bridge1: port 1(veth5) entered disabled state [ 169.204731][ T5432] device veth5 entered promiscuous mode [ 169.262166][ T5431] device syzkaller0 entered promiscuous mode [ 169.298317][ T5427] bridge1: port 2(veth0_to_bond) entered blocking state [ 169.327724][ T5427] bridge1: port 2(veth0_to_bond) entered disabled state [ 169.356399][ T5427] device veth0_to_bond entered promiscuous mode [ 169.450348][ T5441] kvm: pic: non byte write [ 169.475740][ T5441] kvm: pic: non byte write [ 169.684749][ T5448] loop0: detected capacity change from 0 to 512 [ 169.876823][ T5448] EXT4-fs (loop0): 1 truncate cleaned up [ 170.080462][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 172.456291][ T5469] ODEBUG: Out of memory. ODEBUG disabled [ 172.524101][ T5481] loop0: detected capacity change from 0 to 64 [ 173.817637][ T4768] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.034373][ T5491] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 174.317942][ T4768] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.364505][ T4768] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 174.450879][ T4768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.573042][ T4768] usb 1-1: config 0 descriptor?? [ 174.630079][ T4768] option 1-1:0.0: GSM modem (1-port) converter detected [ 175.366223][ T23] usb 1-1: USB disconnect, device number 4 [ 175.411731][ T23] option 1-1:0.0: device disconnected [ 175.741443][ T5510] device ip6gre1 entered promiscuous mode [ 175.900816][ T5516] process 'syz.2.302' launched './file0' with NULL argv: empty string added [ 178.123619][ T5545] loop4: detected capacity change from 0 to 32768 [ 178.187742][ T5545] (syz.4.311,5545,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.203942][ T5545] (syz.4.311,5545,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.244565][ T5545] JBD2: Ignoring recovery information on journal [ 178.277723][ T5545] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.160483][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 181.166610][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 181.173122][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 181.179737][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 182.442728][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 182.601405][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 184.420840][ T5620] ptrace attach of "./syz-executor exec"[4713] was attempted by ""[5620] [ 185.411860][ T5641] MPTCP: addr_signal error, add_addr=1, echo=0 [ 185.692841][ T5652] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.833104][ T5661] netlink: 'syz.4.338': attribute type 13 has an invalid length. [ 185.888116][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.911296][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.924069][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.072371][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 187.626816][ T5672] gfs2: gfs2 mount does not exist [ 188.821849][ T5678] loop5: detected capacity change from 0 to 32768 [ 188.841315][ T5678] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 188.849874][ T5678] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 188.874577][ T5678] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 188.894789][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 188.902518][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 188.967606][ T7] usb 3-1: device descriptor read/all, error -71 [ 188.997162][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms [ 189.183050][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 190.402758][ T5678] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 190.607217][ T5678] gfs2: fsid=syz:syz.0: found 1 quota changes [ 190.690999][ T5699] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 191.225961][ T5698] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 191.225961][ T5698] inode = 11 2339 [ 191.225961][ T5698] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 191.258542][ T5698] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 191.418693][ T5698] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing. [ 191.438804][ T5708] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 191.500227][ T5708] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.538553][ T5710] netlink: 'syz.4.352': attribute type 33 has an invalid length. [ 191.546456][ T5710] netlink: 152 bytes leftover after parsing attributes in process `syz.4.352'. [ 191.729285][ T5720] netlink: 'syz.3.353': attribute type 10 has an invalid length. [ 191.749076][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 192.716690][ T5737] device macvtap0 entered promiscuous mode [ 192.735102][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 192.808163][ T5737] device macvtap0 left promiscuous mode [ 193.772081][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 196.055293][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.074412][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.739456][ T5698] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 196.756255][ T5698] CPU: 1 PID: 5698 Comm: gfs2_quotad Not tainted syzkaller #0 [ 196.763766][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.773943][ T5698] Call Trace: [ 196.777440][ T5698] [ 196.780400][ T5698] dump_stack_lvl+0x188/0x250 [ 196.785111][ T5698] ? show_regs_print_info+0x20/0x20 [ 196.790432][ T5698] ? load_image+0x400/0x400 [ 196.794978][ T5698] ? do_raw_spin_unlock+0x11d/0x230 [ 196.800246][ T5698] gfs2_assert_warn_i+0x18f/0x2c0 [ 196.805314][ T5698] gfs2_quota_cleanup+0x4b4/0x6a0 [ 196.810386][ T5698] gfs2_make_fs_ro+0x440/0x620 [ 196.815186][ T5698] ? __might_sleep+0xf0/0xf0 [ 196.819929][ T5698] ? gfs2_dinode_out+0xb00/0xb00 [ 196.824901][ T5698] ? _raw_spin_unlock+0x24/0x40 [ 196.829901][ T5698] ? gfs2_glock_nq+0xcb0/0x1550 [ 196.834812][ T5698] ? init_wait_entry+0xd0/0xd0 [ 196.839736][ T5698] gfs2_withdraw+0x610/0x1490 [ 196.844533][ T5698] ? gfs2_lm+0x240/0x240 [ 196.849305][ T5698] ? __schedule+0x11f7/0x43c0 [ 196.854022][ T5698] ? gfs2_freeze_lock+0x52/0xc0 [ 196.858906][ T5698] ? gfs2_consist_inode_i+0xc0/0xe0 [ 196.864350][ T5698] gfs2_inode_refresh+0xb64/0xff0 [ 196.869427][ T5698] ? do_promote+0x71a/0xab0 [ 196.874070][ T5698] ? gfs2_inode_metasync+0xf0/0xf0 [ 196.879522][ T5698] ? __lock_acquire+0x7d10/0x7d10 [ 196.884692][ T5698] inode_go_lock+0x127/0x470 [ 196.889341][ T5698] do_promote+0x741/0xab0 [ 196.893943][ T5698] finish_xmote+0x4df/0xb00 [ 196.898494][ T5698] do_xmote+0x7b6/0x1120 [ 196.902788][ T5698] gfs2_glock_nq+0xc7a/0x1550 [ 196.907525][ T5698] do_sync+0x4ab/0xc40 [ 196.911729][ T5698] ? slot_put+0x1e0/0x1e0 [ 196.916118][ T5698] ? __lock_acquire+0x7d10/0x7d10 [ 196.921305][ T5698] ? do_raw_spin_lock+0x128/0x2f0 [ 196.926347][ T5698] ? do_sync+0x4a3/0xc40 [ 196.930604][ T5698] ? do_raw_spin_unlock+0x11d/0x230 [ 196.935825][ T5698] gfs2_quota_sync+0x32c/0x700 [ 196.940619][ T5698] gfs2_quotad+0x403/0x890 [ 196.945098][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 196.950397][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 196.956301][ T5698] ? init_wait_entry+0xd0/0xd0 [ 196.961075][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 196.966995][ T5698] ? __kthread_parkme+0x157/0x1b0 [ 196.972053][ T5698] kthread+0x436/0x520 [ 196.976143][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 196.981268][ T5698] ? kthread_blkcg+0xd0/0xd0 [ 196.985953][ T5698] ret_from_fork+0x1f/0x30 [ 196.990735][ T5698] [ 197.111535][ T5698] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 197.124591][ T5698] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 197.136666][ T5698] gfs2: fsid=syz:syz.0: File system withdrawn [ 197.146721][ T5698] CPU: 1 PID: 5698 Comm: gfs2_quotad Not tainted syzkaller #0 [ 197.154226][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.164310][ T5698] Call Trace: [ 197.167623][ T5698] [ 197.170585][ T5698] dump_stack_lvl+0x188/0x250 [ 197.175294][ T5698] ? kobject_uevent_env+0x371/0x890 [ 197.180586][ T5698] ? show_regs_print_info+0x20/0x20 [ 197.185917][ T5698] ? load_image+0x400/0x400 [ 197.190454][ T5698] ? kobject_uevent_env+0x371/0x890 [ 197.195691][ T5698] ? lockref_put_or_lock+0x6e/0xb0 [ 197.200847][ T5698] gfs2_withdraw+0x1149/0x1490 [ 197.205760][ T5698] ? gfs2_lm+0x240/0x240 [ 197.210035][ T5698] ? __schedule+0x11f7/0x43c0 [ 197.214859][ T5698] ? gfs2_consist_inode_i+0xc0/0xe0 [ 197.220096][ T5698] gfs2_inode_refresh+0xb64/0xff0 [ 197.225165][ T5698] ? do_promote+0x71a/0xab0 [ 197.229710][ T5698] ? gfs2_inode_metasync+0xf0/0xf0 [ 197.234854][ T5698] ? __lock_acquire+0x7d10/0x7d10 [ 197.239918][ T5698] inode_go_lock+0x127/0x470 [ 197.244538][ T5698] do_promote+0x741/0xab0 [ 197.248997][ T5698] finish_xmote+0x4df/0xb00 [ 197.253541][ T5698] do_xmote+0x7b6/0x1120 [ 197.257829][ T5698] gfs2_glock_nq+0xc7a/0x1550 [ 197.262639][ T5698] do_sync+0x4ab/0xc40 [ 197.266836][ T5698] ? slot_put+0x1e0/0x1e0 [ 197.271197][ T5698] ? __lock_acquire+0x7d10/0x7d10 [ 197.276249][ T5698] ? do_raw_spin_lock+0x128/0x2f0 [ 197.281308][ T5698] ? do_sync+0x4a3/0xc40 [ 197.285585][ T5698] ? do_raw_spin_unlock+0x11d/0x230 [ 197.290815][ T5698] gfs2_quota_sync+0x32c/0x700 [ 197.295631][ T5698] gfs2_quotad+0x403/0x890 [ 197.300096][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 197.305249][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 197.311291][ T5698] ? init_wait_entry+0xd0/0xd0 [ 197.316088][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 197.322107][ T5698] ? __kthread_parkme+0x157/0x1b0 [ 197.327250][ T5698] kthread+0x436/0x520 [ 197.331349][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 197.336584][ T5698] ? kthread_blkcg+0xd0/0xd0 [ 197.341382][ T5698] ret_from_fork+0x1f/0x30 [ 197.345936][ T5698] [ 198.690662][ T5819] loop4: detected capacity change from 0 to 128 [ 198.713801][ T5815] loop5: detected capacity change from 0 to 2048 [ 198.829079][ T5819] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.855259][ T5819] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.963092][ T5815] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 199.097698][ T5815] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.055993][ T5825] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 201.519954][ T5825] EXT4-fs (loop5): Remounting filesystem read-only [ 204.634615][ T5870] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 204.661506][ T5870] CIFS mount error: No usable UNC path provided in device string! [ 204.661506][ T5870] [ 204.672023][ T5870] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.655176][ T5903] loop0: detected capacity change from 0 to 16 [ 206.742614][ T5903] erofs: (device loop0): mounted with root inode @ nid 36. [ 206.920082][ T5909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.397'. [ 208.908656][ T5930] loop5: detected capacity change from 0 to 2048 [ 209.538366][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.380903][ T5930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.077881][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.610239][ T23] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 211.639705][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.987471][ T23] usb 5-1: Product: syz [ 212.991904][ T23] usb 5-1: Manufacturer: syz [ 213.066947][ T23] usb 5-1: SerialNumber: syz [ 213.101019][ T5972] lo speed is unknown, defaulting to 1000 [ 213.154727][ T23] usb 5-1: config 0 descriptor?? [ 213.367639][ T23] usb 5-1: can't set config #0, error -71 [ 213.379041][ T23] usb 5-1: USB disconnect, device number 2 [ 213.632442][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.639746][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.652042][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.951578][ T5995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.271276][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.278879][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.286944][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.294577][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.302057][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.309518][ T5995] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.955761][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 216.506645][ T6025] loop5: detected capacity change from 0 to 512 [ 216.567680][ T6025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 216.664212][ T6025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.677972][ T6029] device syzkaller0 entered promiscuous mode [ 216.792287][ T6025] EXT4-fs (loop5): 1 truncate cleaned up [ 216.834270][ T6025] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 219.061411][ T6062] loop2: detected capacity change from 0 to 4096 [ 219.116673][ T6070] device syzkaller0 entered promiscuous mode [ 219.144183][ T6072] lo: Caught tx_queue_len zero misconfig [ 219.199527][ T6073] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.454787][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.441'. [ 219.602073][ T6081] device team1 entered promiscuous mode [ 219.631132][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.441'. [ 219.660117][ T6081] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 219.764326][ T6081] device team2 entered promiscuous mode [ 221.902723][ T6115] loop5: detected capacity change from 0 to 256 [ 222.089423][ T6115] FAT-fs (loop5): Directory bread(block 64) failed [ 222.096411][ T6115] FAT-fs (loop5): Directory bread(block 65) failed [ 222.242717][ T6115] FAT-fs (loop5): Directory bread(block 66) failed [ 222.256161][ T6115] FAT-fs (loop5): Directory bread(block 67) failed [ 222.273295][ T6115] FAT-fs (loop5): Directory bread(block 68) failed [ 224.024701][ T6115] FAT-fs (loop5): Directory bread(block 69) failed [ 224.031695][ T6115] FAT-fs (loop5): Directory bread(block 70) failed [ 224.038479][ T6115] FAT-fs (loop5): Directory bread(block 71) failed [ 224.045339][ T6115] FAT-fs (loop5): Directory bread(block 72) failed [ 224.208883][ T26] audit: type=1800 audit(1774917057.853:5): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.452" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 224.209375][ T6115] FAT-fs (loop5): Directory bread(block 73) failed [ 224.425433][ T6135] device syzkaller0 entered promiscuous mode [ 224.475426][ T6115] overlayfs: filesystem on './file0' not supported [ 224.537189][ T6139] kvm: emulating exchange as write [ 225.675347][ T6163] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.900053][ T6165] netlink: 116 bytes leftover after parsing attributes in process `syz.3.461'. [ 227.628016][ T5698] ================================================================== [ 227.636296][ T5698] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10 [ 227.643952][ T5698] Read of size 8 at addr ffff888079c24bb0 by task gfs2_quotad/5698 [ 227.651866][ T5698] [ 227.654212][ T5698] CPU: 1 PID: 5698 Comm: gfs2_quotad Not tainted syzkaller #0 [ 227.661777][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.672207][ T5698] Call Trace: [ 227.675497][ T5698] [ 227.678441][ T5698] dump_stack_lvl+0x188/0x250 [ 227.683149][ T5698] ? show_regs_print_info+0x20/0x20 [ 227.688575][ T5698] ? load_image+0x400/0x400 [ 227.693236][ T5698] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 227.698719][ T5698] ? __lock_acquire+0x13bc/0x7d10 [ 227.703779][ T5698] ? verify_lock_unused+0x140/0x140 [ 227.709007][ T5698] print_address_description+0x60/0x2d0 [ 227.714762][ T5698] ? __lock_acquire+0x106/0x7d10 [ 227.719714][ T5698] kasan_report+0xdf/0x130 [ 227.724149][ T5698] ? __lock_acquire+0x106/0x7d10 [ 227.729192][ T5698] __lock_acquire+0x106/0x7d10 [ 227.733983][ T5698] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 227.739979][ T5698] ? lock_chain_count+0x20/0x20 [ 227.745044][ T5698] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 227.750701][ T5698] ? verify_lock_unused+0x140/0x140 [ 227.755940][ T5698] ? lockdep_hardirqs_off+0x70/0x100 [ 227.761249][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 227.767155][ T5698] ? lockdep_hardirqs_on+0x94/0x140 [ 227.772377][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 227.778296][ T5698] ? _raw_spin_unlock+0x40/0x40 [ 227.783206][ T5698] lock_acquire+0x19e/0x400 [ 227.787985][ T5698] ? finish_wait+0xb5/0x1d0 [ 227.792505][ T5698] ? timer_delete_sync+0x20/0x20 [ 227.797452][ T5698] ? __mod_timer+0x91e/0xd00 [ 227.802054][ T5698] ? read_lock_is_recursive+0x10/0x10 [ 227.807447][ T5698] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 227.812922][ T5698] ? lockdep_hardirqs_off+0x70/0x100 [ 227.818312][ T5698] _raw_spin_lock_irqsave+0xb0/0x100 [ 227.823635][ T5698] ? finish_wait+0xb5/0x1d0 [ 227.828356][ T5698] ? _raw_spin_lock+0x40/0x40 [ 227.833054][ T5698] ? update_process_times+0x200/0x200 [ 227.838460][ T5698] finish_wait+0xb5/0x1d0 [ 227.842828][ T5698] gfs2_quotad+0x710/0x890 [ 227.847375][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 227.852515][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 227.858535][ T5698] ? init_wait_entry+0xd0/0xd0 [ 227.863317][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 227.869315][ T5698] ? __kthread_parkme+0x157/0x1b0 [ 227.874365][ T5698] kthread+0x436/0x520 [ 227.878458][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 227.883642][ T5698] ? kthread_blkcg+0xd0/0xd0 [ 227.888244][ T5698] ret_from_fork+0x1f/0x30 [ 227.892815][ T5698] [ 227.895843][ T5698] [ 227.898274][ T5698] Allocated by task 5678: [ 227.902603][ T5698] __kasan_kmalloc+0xb5/0xf0 [ 227.907243][ T5698] gfs2_fill_super+0x17d/0x1f00 [ 227.912097][ T5698] get_tree_bdev+0x3f1/0x610 [ 227.916687][ T5698] gfs2_get_tree+0x4d/0x1e0 [ 227.921187][ T5698] vfs_get_tree+0x88/0x270 [ 227.925787][ T5698] do_new_mount+0x24a/0xa40 [ 227.930375][ T5698] __se_sys_mount+0x2e3/0x3d0 [ 227.935047][ T5698] do_syscall_64+0x4c/0xa0 [ 227.939457][ T5698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.945337][ T5698] [ 227.947655][ T5698] Last potentially related work creation: [ 227.953363][ T5698] kasan_save_stack+0x35/0x60 [ 227.958042][ T5698] kasan_record_aux_stack+0xb8/0x100 [ 227.963419][ T5698] call_rcu+0x189/0x950 [ 227.967566][ T5698] generic_shutdown_super+0x130/0x300 [ 227.972943][ T5698] kill_block_super+0x7c/0xe0 [ 227.977714][ T5698] deactivate_locked_super+0x93/0xf0 [ 227.982989][ T5698] cleanup_mnt+0x42d/0x4e0 [ 227.987394][ T5698] task_work_run+0x125/0x1a0 [ 227.991982][ T5698] exit_to_user_mode_loop+0x10f/0x130 [ 227.997344][ T5698] exit_to_user_mode_prepare+0xee/0x180 [ 228.002912][ T5698] syscall_exit_to_user_mode+0x16/0x40 [ 228.008381][ T5698] do_syscall_64+0x58/0xa0 [ 228.012814][ T5698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.018696][ T5698] [ 228.021096][ T5698] Second to last potentially related work creation: [ 228.027850][ T5698] kasan_save_stack+0x35/0x60 [ 228.032528][ T5698] kasan_record_aux_stack+0xb8/0x100 [ 228.038006][ T5698] kvfree_call_rcu+0x105/0x7d0 [ 228.042883][ T5698] process_one_work+0x85f/0x1010 [ 228.047973][ T5698] worker_thread+0xaa6/0x1290 [ 228.052646][ T5698] kthread+0x436/0x520 [ 228.056705][ T5698] ret_from_fork+0x1f/0x30 [ 228.061150][ T5698] [ 228.063491][ T5698] The buggy address belongs to the object at ffff888079c24000 [ 228.063491][ T5698] which belongs to the cache kmalloc-8k of size 8192 [ 228.077704][ T5698] The buggy address is located 2992 bytes inside of [ 228.077704][ T5698] 8192-byte region [ffff888079c24000, ffff888079c26000) [ 228.091236][ T5698] The buggy address belongs to the page: [ 228.096869][ T5698] page:ffffea0001e70800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079c24000 pfn:0x79c20 [ 228.108313][ T5698] head:ffffea0001e70800 order:3 compound_mapcount:0 compound_pincount:0 [ 228.116624][ T5698] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 228.124637][ T5698] raw: 00fff00000010200 ffffea0001627e08 ffffea0001e49e08 ffff888016c42280 [ 228.133215][ T5698] raw: ffff888079c24000 0000000000020001 00000001ffffffff 0000000000000000 [ 228.141786][ T5698] page dumped because: kasan: bad access detected [ 228.148181][ T5698] page_owner tracks the page as allocated [ 228.153885][ T5698] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4172, ts 54727993631, free_ts 54648374432 [ 228.172966][ T5698] get_page_from_freelist+0x1bbd/0x1ca0 [ 228.178659][ T5698] __alloc_pages+0x1ee/0x480 [ 228.183259][ T5698] new_slab+0xc0/0x4b0 [ 228.187325][ T5698] ___slab_alloc+0x80a/0xdd0 [ 228.191915][ T5698] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 228.197289][ T5698] cgroup1_get_tree+0x7c0/0xb30 [ 228.202154][ T5698] vfs_get_tree+0x88/0x270 [ 228.206592][ T5698] do_new_mount+0x24a/0xa40 [ 228.211107][ T5698] __se_sys_mount+0x2e3/0x3d0 [ 228.215773][ T5698] do_syscall_64+0x4c/0xa0 [ 228.220174][ T5698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.226062][ T5698] page last free stack trace: [ 228.230721][ T5698] free_unref_page_prepare+0x637/0x6c0 [ 228.236172][ T5698] free_unref_page+0x8f/0x2a0 [ 228.240920][ T5698] qlist_free_all+0x35/0x90 [ 228.245583][ T5698] kasan_quarantine_reduce+0x150/0x160 [ 228.251024][ T5698] __kasan_slab_alloc+0x2f/0xd0 [ 228.255865][ T5698] slab_post_alloc_hook+0x4c/0x380 [ 228.260963][ T5698] __kmalloc+0x127/0x330 [ 228.265280][ T5698] tomoyo_encode+0x27e/0x540 [ 228.269857][ T5698] tomoyo_mount_permission+0x376/0x9b0 [ 228.275309][ T5698] security_sb_mount+0x83/0xb0 [ 228.280076][ T5698] path_mount+0xb8/0x1030 [ 228.284405][ T5698] __se_sys_mount+0x2e3/0x3d0 [ 228.289080][ T5698] do_syscall_64+0x4c/0xa0 [ 228.293496][ T5698] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.299476][ T5698] [ 228.301786][ T5698] Memory state around the buggy address: [ 228.307404][ T5698] ffff888079c24a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.315568][ T5698] ffff888079c24b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.323708][ T5698] >ffff888079c24b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.331755][ T5698] ^ [ 228.337373][ T5698] ffff888079c24c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.345513][ T5698] ffff888079c24c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.353732][ T5698] ================================================================== [ 228.361872][ T5698] Disabling lock debugging due to kernel taint [ 228.368106][ T5698] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.375936][ T5698] CPU: 1 PID: 5698 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 228.384777][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.395021][ T5698] Call Trace: [ 228.398300][ T5698] [ 228.401231][ T5698] dump_stack_lvl+0x188/0x250 [ 228.405987][ T5698] ? show_regs_print_info+0x20/0x20 [ 228.411184][ T5698] ? load_image+0x400/0x400 [ 228.415676][ T5698] panic+0x2e5/0x810 [ 228.419559][ T5698] ? bpf_jit_dump+0xd0/0xd0 [ 228.424214][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.430137][ T5698] ? _raw_spin_unlock+0x40/0x40 [ 228.434997][ T5698] ? __lock_acquire+0x106/0x7d10 [ 228.439934][ T5698] check_panic_on_warn+0x80/0xa0 [ 228.444961][ T5698] ? __lock_acquire+0x106/0x7d10 [ 228.449984][ T5698] end_report+0x6d/0xf0 [ 228.454134][ T5698] kasan_report+0x102/0x130 [ 228.458899][ T5698] ? __lock_acquire+0x106/0x7d10 [ 228.463827][ T5698] __lock_acquire+0x106/0x7d10 [ 228.468675][ T5698] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 228.474831][ T5698] ? lock_chain_count+0x20/0x20 [ 228.479755][ T5698] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 228.485286][ T5698] ? verify_lock_unused+0x140/0x140 [ 228.490487][ T5698] ? lockdep_hardirqs_off+0x70/0x100 [ 228.495760][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 228.501641][ T5698] ? lockdep_hardirqs_on+0x94/0x140 [ 228.506827][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.512714][ T5698] ? _raw_spin_unlock+0x40/0x40 [ 228.517568][ T5698] lock_acquire+0x19e/0x400 [ 228.522142][ T5698] ? finish_wait+0xb5/0x1d0 [ 228.526650][ T5698] ? timer_delete_sync+0x20/0x20 [ 228.531601][ T5698] ? __mod_timer+0x91e/0xd00 [ 228.536189][ T5698] ? read_lock_is_recursive+0x10/0x10 [ 228.541557][ T5698] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 228.547097][ T5698] ? lockdep_hardirqs_off+0x70/0x100 [ 228.552391][ T5698] _raw_spin_lock_irqsave+0xb0/0x100 [ 228.557663][ T5698] ? finish_wait+0xb5/0x1d0 [ 228.562158][ T5698] ? _raw_spin_lock+0x40/0x40 [ 228.566957][ T5698] ? update_process_times+0x200/0x200 [ 228.572343][ T5698] finish_wait+0xb5/0x1d0 [ 228.576675][ T5698] gfs2_quotad+0x710/0x890 [ 228.581227][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 228.586420][ T5698] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 228.592303][ T5698] ? init_wait_entry+0xd0/0xd0 [ 228.597060][ T5698] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 228.602938][ T5698] ? __kthread_parkme+0x157/0x1b0 [ 228.607951][ T5698] kthread+0x436/0x520 [ 228.612006][ T5698] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 228.617112][ T5698] ? kthread_blkcg+0xd0/0xd0 [ 228.621708][ T5698] ret_from_fork+0x1f/0x30 [ 228.626156][ T5698] [ 228.629258][ T5698] Kernel Offset: disabled [ 228.633577][ T5698] Rebooting in 86400 seconds..