last executing test programs: 6.259675849s ago: executing program 2 (id=232): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80800) r1 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000200)=""/121, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000240)) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) clock_nanosleep(0x1, 0x0, &(0x7f0000002000), 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read(r6, &(0x7f0000000040)=""/200, 0xc8) 6.259428029s ago: executing program 3 (id=234): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xffffffffffff3ac6) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 5.51983644s ago: executing program 1 (id=236): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 5.300258262s ago: executing program 3 (id=238): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 4.824411579s ago: executing program 1 (id=239): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x10000) readv(r0, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)={0x1, 0x4, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x10000}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_io_uring_setup(0x5914, &(0x7f0000000440)={0x0, 0x0, 0x800, 0x0, 0x80002f6}, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}) io_uring_enter(r5, 0x18ec, 0xfd9d, 0x1, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0xfc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 4.389912963s ago: executing program 4 (id=240): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) r3 = socket$inet(0x2, 0x801, 0x0) listen(r3, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) 4.075649929s ago: executing program 0 (id=241): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x14, 0x0, 0xfffffffe, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x7, 0x2, 0x3, 0x100, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r4, 0x100}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) writev(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) 4.075435049s ago: executing program 2 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 3.939600905s ago: executing program 1 (id=243): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 3.489461556s ago: executing program 4 (id=244): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 3.318745677s ago: executing program 3 (id=246): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.945777162s ago: executing program 2 (id=247): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.928347159s ago: executing program 0 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) 2.571199727s ago: executing program 1 (id=249): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$x25(0xffffffffffffffff, &(0x7f0000000a80), 0x12) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000140)="c4", 0x1) 2.563068576s ago: executing program 4 (id=250): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 2.235122388s ago: executing program 4 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) 1.988451135s ago: executing program 0 (id=253): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 1.869145105s ago: executing program 0 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.861933823s ago: executing program 3 (id=255): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xffffffffffff3ac6) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 1.537831467s ago: executing program 2 (id=256): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xffffffffffff3ac6) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 1.012821515s ago: executing program 0 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 957.949416ms ago: executing program 1 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 957.001046ms ago: executing program 3 (id=259): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 72.287612ms ago: executing program 3 (id=260): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) fcntl$lock(r0, 0x7, 0xffffffffffffffff) read(r0, &(0x7f0000000080)=""/108, 0x3d) 72.051772ms ago: executing program 4 (id=261): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000a80), 0x12) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 56.962359ms ago: executing program 1 (id=262): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r4, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 0s ago: executing program 0 (id=263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 23.876847][ T4304] cgroup: Unknown subsys name 'net' [ 24.169724][ T4304] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.427439][ T4304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.107916][ T4324] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.110272][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.115035][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.116842][ T4329] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.118477][ T4329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.119910][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.121239][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.122824][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.123952][ T4331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.125203][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.127356][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.128494][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.129834][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.130966][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.132130][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.133302][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.134656][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.136136][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.137003][ T4335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.137822][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.139105][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.139741][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.141316][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.141721][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.142813][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.146357][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.146703][ T4324] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.148356][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.151853][ T4329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.153148][ T4324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.285662][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 25.301942][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 25.327096][ T4333] chnl_net:caif_netlink_parms(): no params data found [ 25.341504][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 25.350948][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.352174][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.353618][ T4326] device bridge_slave_0 entered promiscuous mode [ 25.357018][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 25.358980][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.360108][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.361657][ T4326] device bridge_slave_1 entered promiscuous mode [ 25.363341][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.364490][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.366053][ T4330] device bridge_slave_0 entered promiscuous mode [ 25.367874][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.368981][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.370398][ T4330] device bridge_slave_1 entered promiscuous mode [ 25.402349][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.404696][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.414887][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.417053][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.434932][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.436217][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.437898][ T4320] device bridge_slave_0 entered promiscuous mode [ 25.441367][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.442502][ T4333] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.444007][ T4333] device bridge_slave_0 entered promiscuous mode [ 25.447290][ T4330] team0: Port device team_slave_0 added [ 25.449267][ T4326] team0: Port device team_slave_0 added [ 25.451604][ T4326] team0: Port device team_slave_1 added [ 25.454675][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.455824][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.459853][ T4320] device bridge_slave_1 entered promiscuous mode [ 25.463136][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.464188][ T4333] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.465737][ T4333] device bridge_slave_1 entered promiscuous mode [ 25.467752][ T4330] team0: Port device team_slave_1 added [ 25.474923][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.475955][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.482699][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.487132][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.488314][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.489768][ T4321] device bridge_slave_0 entered promiscuous mode [ 25.493374][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.494490][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.498825][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.500787][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.501818][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.505821][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.510382][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.511570][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.513012][ T4321] device bridge_slave_1 entered promiscuous mode [ 25.518460][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.519550][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.523793][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.532664][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.535092][ T4333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.537753][ T4333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.544861][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.598517][ T4330] device hsr_slave_0 entered promiscuous mode [ 25.636944][ T4330] device hsr_slave_1 entered promiscuous mode [ 25.677663][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.717905][ T4326] device hsr_slave_0 entered promiscuous mode [ 25.766993][ T4326] device hsr_slave_1 entered promiscuous mode [ 25.806854][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.808058][ T4326] Cannot create hsr debugfs directory [ 25.809969][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.816512][ T4333] team0: Port device team_slave_0 added [ 25.824662][ T4333] team0: Port device team_slave_1 added [ 25.830844][ T4320] team0: Port device team_slave_0 added [ 25.838898][ T4321] team0: Port device team_slave_0 added [ 25.840451][ T4320] team0: Port device team_slave_1 added [ 25.849493][ T4321] team0: Port device team_slave_1 added [ 25.856548][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.857854][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.861947][ T4333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.871765][ T4333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.872753][ T4333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.877291][ T4333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.883784][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.884982][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.889241][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.894380][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.895505][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.899896][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.902035][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.903122][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.907380][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.914121][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.915146][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.919200][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.967827][ T4333] device hsr_slave_0 entered promiscuous mode [ 26.006998][ T4333] device hsr_slave_1 entered promiscuous mode [ 26.046841][ T4333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.048169][ T4333] Cannot create hsr debugfs directory [ 26.107867][ T4320] device hsr_slave_0 entered promiscuous mode [ 26.157013][ T4320] device hsr_slave_1 entered promiscuous mode [ 26.196859][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.198010][ T4320] Cannot create hsr debugfs directory [ 26.258165][ T4321] device hsr_slave_0 entered promiscuous mode [ 26.297024][ T4321] device hsr_slave_1 entered promiscuous mode [ 26.336854][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.338083][ T4321] Cannot create hsr debugfs directory [ 26.340077][ T4330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.391588][ T4330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.427888][ T4330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.469941][ T4330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.561717][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.578006][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.619951][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.678786][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.754820][ T4333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.771848][ T4333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.810639][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.816160][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.820374][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.822549][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.824991][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.860986][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.908423][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.957766][ T4333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.999633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.001372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.002950][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.004157][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.013960][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.059192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.063374][ T4333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.114662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.116476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.117990][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.119164][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.126104][ T4321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.168394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.170102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.171668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.173511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.175002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.180415][ T4321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.206997][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 27.208010][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 27.209102][ T4327] Bluetooth: hci0: command 0x0409 tx timeout [ 27.210143][ T4327] Bluetooth: hci3: command 0x0409 tx timeout [ 27.211095][ T4327] Bluetooth: hci2: command 0x0409 tx timeout [ 27.228218][ T4321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.272178][ T4321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.315154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.320341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.325617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.327992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.330938][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.345179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.347475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.348940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.350424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.352595][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.363795][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.381616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.383147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.384576][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.385722][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.387856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.396405][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.398001][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.399474][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.400582][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.407092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.408802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.410385][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.412339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.414031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.415560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.422897][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.434427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.435934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.438868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.446414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.449141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.450580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.452039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.454573][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.464850][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.466552][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.468528][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.469949][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.471089][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.473318][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.480906][ T4333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.486505][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.488237][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.494927][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.496257][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.498130][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.499648][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.500750][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.502099][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.503493][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.509208][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.515531][ T4333] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.524194][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.525911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.529167][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.530677][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.531910][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.533373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.534899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.536362][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.537530][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.539244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.540808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.543124][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.550027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.551779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.553715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.555285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.560035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.565458][ T4320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.567514][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.575806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.578152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.579927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.581467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.582981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.584458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.585925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.589507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.591166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.594399][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.599981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.601587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.603054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.604545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.605967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.611434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.621632][ T4330] device veth0_vlan entered promiscuous mode [ 27.626412][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.627864][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.629063][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.630570][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.631880][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.633035][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.634392][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.635821][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.639896][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.641318][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.642813][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.644460][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.646177][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.647354][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.649278][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.650891][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.652387][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.653710][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.655095][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.657736][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.661540][ T4330] device veth1_vlan entered promiscuous mode [ 27.666377][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.674440][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.676171][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.679775][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.695110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.697267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.698943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.700569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.702105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.703579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.705028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.706461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.709582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.711106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.717868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.719544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.733974][ T4326] device veth0_vlan entered promiscuous mode [ 27.737260][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.738776][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.740610][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.742019][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.745037][ T4330] device veth0_macvtap entered promiscuous mode [ 27.748584][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.750265][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.751840][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.756138][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.769106][ T4326] device veth1_vlan entered promiscuous mode [ 27.770414][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.771930][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.773185][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.778165][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.790472][ T4330] device veth1_macvtap entered promiscuous mode [ 27.792420][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.793907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.795401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.800457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.808253][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.809634][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.818531][ T4333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.821743][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.823440][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.829197][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.831656][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.832989][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.834742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.836382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.840554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.843459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.845065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.850961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.852512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.857524][ T4330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.859143][ T4330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.860548][ T4330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.861918][ T4330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.865468][ T4320] device veth0_vlan entered promiscuous mode [ 27.872479][ T4320] device veth1_vlan entered promiscuous mode [ 27.874602][ T4326] device veth0_macvtap entered promiscuous mode [ 27.880780][ T4326] device veth1_macvtap entered promiscuous mode [ 27.884143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.885623][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.891295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.892807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.894007][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.906262][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.909686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.911213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.912815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.931089][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.932625][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.934758][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.936375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.938102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.951607][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.953215][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.954768][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.956354][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.959005][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.960683][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.971306][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.973001][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.975171][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.977997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.979566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.988154][ T4320] device veth0_macvtap entered promiscuous mode [ 27.990204][ T4333] device veth0_vlan entered promiscuous mode [ 27.993598][ T4333] device veth1_vlan entered promiscuous mode [ 27.998075][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.999494][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.000998][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.002452][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.007783][ T4320] device veth1_macvtap entered promiscuous mode [ 28.022486][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.023732][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.031532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.033111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.034482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.035981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.041847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.046086][ T4333] device veth0_macvtap entered promiscuous mode [ 28.049391][ T4333] device veth1_macvtap entered promiscuous mode [ 28.053334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.055002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.056410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.061484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.073687][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.075477][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.078960][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.080641][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.082874][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.090090][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.091740][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.093471][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.095131][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.096690][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.099171][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.101710][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.103374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.104987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.106451][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.108816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.110382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.111923][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.114836][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.116513][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.119257][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.120695][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.122910][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.130059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.131719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.133143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.134734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.136579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.141716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.145655][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.148204][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.149664][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.151175][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.152589][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.154172][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.156583][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.159600][ T4333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.161049][ T4333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.162517][ T4333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.163937][ T4333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.167174][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.168801][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.172291][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.172667][ T4321] device veth0_vlan entered promiscuous mode [ 28.173564][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.176097][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.188375][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.190047][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.191549][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.192971][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.197612][ T4321] device veth1_vlan entered promiscuous mode [ 28.220618][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.221866][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.225475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.227104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.228571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.245577][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.250153][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.255108][ T4321] device veth0_macvtap entered promiscuous mode [ 28.263253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.264771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.266344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.268747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.316613][ T4321] device veth1_macvtap entered promiscuous mode [ 28.320659][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.321971][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.325689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.327379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.331862][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.333094][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.336181][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.345764][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.349318][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.350874][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.352662][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.354296][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.356354][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.361550][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.363299][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.589321][ T4407] loop3: detected capacity change from 0 to 8192 [ 28.727230][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.739883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.741465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.798338][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.801964][ T4407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 28.802914][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.804364][ T4407] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 28.807115][ T4407] REISERFS (device loop3): using ordered data mode [ 28.808085][ T4407] reiserfs: using flush barriers [ 28.819704][ T4407] REISERFS warning (device loop3): sh-460 journal_init: journal header magic 4911e1e (device loop3) does not match to magic found in super block 49ce1e1e [ 28.821926][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.823828][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.825494][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.828647][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.830230][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.831959][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.834434][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.843032][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.843333][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.844295][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.847078][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.848810][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.856076][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.861085][ T4321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.862557][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.862609][ T4321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.865162][ T4321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.867088][ T4321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.177095][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.287259][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 29.289530][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 29.289554][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 29.290399][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 29.291436][ T4329] Bluetooth: hci1: command 0x041b tx timeout [ 29.395716][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.397174][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.409978][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.412391][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.413656][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.415468][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.802339][ T4424] loop0: detected capacity change from 0 to 16 [ 29.803968][ T4424] ======================================================= [ 29.803968][ T4424] WARNING: The mand mount option has been deprecated and [ 29.803968][ T4424] and is ignored by this kernel. Remove the mand [ 29.803968][ T4424] option from the mount to silence this warning. [ 29.803968][ T4424] ======================================================= [ 29.854178][ T4424] erofs: (device loop0): mounted with root inode @ nid 36. [ 29.957182][ T4426] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure [ 30.372189][ T4434] IPv6: NLM_F_REPLACE set, but no existing node found! [ 31.404237][ T4322] Bluetooth: hci2: command 0x040f tx timeout [ 31.405286][ T4322] Bluetooth: hci0: command 0x040f tx timeout [ 31.406303][ T4322] Bluetooth: hci3: command 0x040f tx timeout [ 31.407594][ T4329] Bluetooth: hci4: command 0x040f tx timeout [ 31.409503][ T4322] Bluetooth: hci1: command 0x040f tx timeout [ 31.433349][ T4444] Bluetooth: MGMT ver 1.22 [ 32.165267][ T4456] loop1: detected capacity change from 0 to 512 [ 33.296736][ C0] sched: RT throttling activated [ 33.448547][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 33.448570][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 33.448644][ T4322] Bluetooth: hci4: command 0x0419 tx timeout [ 33.451592][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 33.452748][ T4322] Bluetooth: hci2: command 0x0419 tx timeout [ 33.774599][ T4456] EXT4-fs (loop1): 1 truncate cleaned up [ 33.775606][ T4456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.065881][ T4465] loop2: detected capacity change from 0 to 512 [ 34.073269][ T4465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.078022][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 34.085771][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 34.100120][ T4465] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 34.712796][ T4465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 34.741634][ T4465] System zones: 1-12 [ 35.445431][ T4465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.461711][ T4465] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.13: invalid indirect mapped block 2 (level 2) [ 35.507912][ T4465] EXT4-fs (loop2): Remounting filesystem read-only [ 35.509809][ T4465] EXT4-fs (loop2): 1 truncate cleaned up [ 35.511024][ T4465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.058539][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 37.745510][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 37.820001][ T4509] loop0: detected capacity change from 0 to 1024 [ 37.831457][ T4509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.865753][ T4508] loop2: detected capacity change from 0 to 8192 [ 37.925852][ T4508] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 37.935328][ T4508] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 38.216041][ T4508] REISERFS (device loop2): using ordered data mode [ 38.224329][ T4508] reiserfs: using flush barriers [ 38.462677][ T4508] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 38.469892][ T4508] REISERFS (device loop2): checking transaction log (loop2) [ 38.477817][ T4508] REISERFS (device loop2): Using r5 hash to sort names [ 38.482030][ T4508] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 38.635230][ T4515] loop1: detected capacity change from 0 to 32768 [ 39.442588][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 39.554809][ T4515] XFS (loop1): Mounting V5 Filesystem [ 40.802302][ T4541] loop3: detected capacity change from 0 to 4096 [ 40.833431][ T4515] XFS (loop1): Ending clean mount [ 40.836328][ T4541] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 41.047614][ T4556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.32'. [ 41.506440][ T4557] loop4: detected capacity change from 0 to 32768 [ 41.648483][ T4557] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.32 (4557) [ 41.712936][ T4557] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 41.714976][ T4557] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 41.716470][ T4557] BTRFS info (device loop4): using free space tree [ 41.746417][ T4563] loop0: detected capacity change from 0 to 1024 [ 41.752766][ T4320] XFS (loop1): Unmounting Filesystem [ 41.779485][ T4563] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 41.836943][ T4563] EXT4-fs error (device loop0): ext4_get_journal_inode:5756: inode #32: comm syz.0.33: iget: special inode unallocated [ 41.850109][ T4563] EXT4-fs (loop0): no journal found [ 41.851090][ T4563] EXT4-fs (loop0): can't get journal size [ 41.858574][ T4563] EXT4-fs (loop0): filesystem is read-only [ 41.860304][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.168306][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 42.193621][ T4557] BTRFS info (device loop4): enabling ssd optimizations [ 42.335593][ T4321] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.340950][ T4610] Zero length message leads to an empty skb [ 43.463049][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 43.718145][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.719539][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.797303][ T39] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 47.086454][ T4640] loop0: detected capacity change from 0 to 256 [ 47.099969][ T4640] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.695452][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.726261][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.728674][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.729840][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.772063][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.093662][ T4657] loop1: detected capacity change from 0 to 4096 [ 48.468516][ T4661] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 48.562583][ T4661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.566648][ T4661] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 48.568645][ T4664] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 48.569890][ T4664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 48.571771][ T4664] device batadv0 entered promiscuous mode [ 48.848852][ T4657] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 48.864414][ T4664] bond0: (slave batadv0): Releasing backup interface [ 48.940095][ T4664] bridge0: port 3(batadv0) entered blocking state [ 48.941173][ T4664] bridge0: port 3(batadv0) entered disabled state [ 49.738164][ T4475] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 49.739906][ T4475] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 50.198120][ T47] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 50.199776][ T47] CPU: 0 PID: 47 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 50.200926][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 50.202590][ T47] Workqueue: hci2 hci_rx_work [ 50.203435][ T47] Call trace: [ 50.203951][ T47] dump_backtrace+0x1c0/0x1ec [ 50.204716][ T47] show_stack+0x2c/0x3c [ 50.205443][ T47] __dump_stack+0x30/0x40 [ 50.206159][ T47] dump_stack_lvl+0xf4/0x15c [ 50.206959][ T47] dump_stack+0x1c/0x5c [ 50.207670][ T47] sysfs_create_dir_ns+0x244/0x264 [ 50.208559][ T47] kobject_add_internal+0x598/0xb08 [ 50.209483][ T47] kobject_add+0x140/0x20c [ 50.210205][ T47] device_add+0x3f0/0xf90 [ 50.210940][ T47] hci_conn_add_sysfs+0xbc/0x1c8 [ 50.211723][ T47] le_conn_complete_evt+0xcc8/0x1244 [ 50.212534][ T47] hci_le_conn_complete_evt+0x114/0x3f4 [ 50.213470][ T47] hci_le_meta_evt+0x2c0/0x4a0 [ 50.214255][ T47] hci_event_packet+0x6b8/0xf18 [ 50.215059][ T47] hci_rx_work+0x324/0xa80 [ 50.215760][ T47] process_one_work+0x7f8/0x13a4 [ 50.216553][ T47] worker_thread+0x8c4/0xfec [ 50.217336][ T47] kthread+0x250/0x2d8 [ 50.217990][ T47] ret_from_fork+0x10/0x20 [ 50.221173][ T47] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 50.223370][ T47] Bluetooth: hci2: failed to register connection device [ 51.009759][ T4683] loop2: detected capacity change from 0 to 512 [ 51.040906][ T4683] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.57: inode has both inline data and extents flags [ 51.044096][ T4683] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.57: couldn't read orphan inode 15 (err -117) [ 51.046510][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.534141][ T4690] overlayfs: failed to resolve './file0': -2 [ 51.822815][ T4498] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 51.947723][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 52.018437][ T4498] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 53.103211][ T39] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 53.648677][ T4715] loop4: detected capacity change from 0 to 16 [ 53.681958][ T4721] loop0: detected capacity change from 0 to 4096 [ 53.763250][ T4719] loop2: detected capacity change from 0 to 32768 [ 53.773387][ T4719] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 53.774855][ T4719] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 53.778129][ T4410] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 53.792235][ T4715] erofs: (device loop4): mounted with root inode @ nid 36. [ 53.798063][ T4719] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 53.801064][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 53.802194][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 53.818225][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 53.820553][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 53.821742][ T4719] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 56.326027][ T4719] gfs2: fsid=syz:syz.0: found 1 quota changes [ 56.754598][ T4322] Bluetooth: hci2: command 0x0406 tx timeout [ 57.494837][ T4475] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 57.722777][ T4333] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 57.722777][ T4333] inode = 11 2339 [ 57.722777][ T4333] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 57.726193][ T4333] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 57.736861][ T4333] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4333 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 57.738648][ T4333] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 57.739927][ T4333] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 57.766318][ T4333] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 57.767179][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.768270][ T4333] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 57.769090][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.770929][ T4333] gfs2: fsid=syz:syz.0: File system withdrawn [ 57.772805][ T4333] CPU: 0 PID: 4333 Comm: syz-executor Not tainted syzkaller #0 [ 57.773958][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 57.775615][ T4333] Call trace: [ 57.776146][ T4333] dump_backtrace+0x1c0/0x1ec [ 57.776920][ T4333] show_stack+0x2c/0x3c [ 57.777646][ T4333] __dump_stack+0x30/0x40 [ 57.778354][ T4333] dump_stack_lvl+0xf4/0x15c [ 57.779126][ T4333] dump_stack+0x1c/0x5c [ 57.779828][ T4333] gfs2_withdraw+0xfa4/0x1390 [ 57.780547][ T4333] gfs2_consist_inode_i+0xf0/0x10c [ 57.781331][ T4333] gfs2_inode_refresh+0x918/0xd64 [ 57.782152][ T4333] inode_go_instantiate+0x4c/0x68 [ 57.782999][ T4333] gfs2_instantiate+0x178/0x2b4 [ 57.783754][ T4333] gfs2_glock_wait+0x1b4/0x298 [ 57.784549][ T4333] gfs2_glock_nq+0x8bc/0x11c4 [ 57.785362][ T4333] do_sync+0x41c/0xaec [ 57.786048][ T4333] gfs2_quota_sync+0x2cc/0x500 [ 57.786800][ T4333] gfs2_sync_fs+0x4c/0xc4 [ 57.787470][ T4333] sync_filesystem+0xe8/0x218 [ 57.788275][ T4333] generic_shutdown_super+0x70/0x324 [ 57.789162][ T4333] kill_block_super+0x70/0xdc [ 57.789940][ T4333] gfs2_kill_sb+0xc0/0xd4 [ 57.790597][ T4333] deactivate_locked_super+0xac/0x120 [ 57.791474][ T4333] deactivate_super+0xe4/0x104 [ 57.792234][ T4333] cleanup_mnt+0x390/0x418 [ 57.792940][ T4333] __cleanup_mnt+0x20/0x30 [ 57.793699][ T4333] task_work_run+0x1ec/0x278 [ 57.794465][ T4333] do_notify_resume+0x1fa0/0x2aa4 [ 57.795328][ T4333] el0_svc+0x98/0x128 [ 57.796000][ T4333] el0t_64_sync_handler+0x84/0xf0 [ 57.796850][ T4333] el0t_64_sync+0x18c/0x190 [ 57.798541][ T4747] loop4: detected capacity change from 0 to 4096 [ 57.801685][ T4333] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 57.804152][ T4333] CPU: 0 PID: 4333 Comm: syz-executor Not tainted syzkaller #0 [ 57.805317][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 57.806974][ T4333] Call trace: [ 57.807470][ T4333] dump_backtrace+0x1c0/0x1ec [ 57.808236][ T4333] show_stack+0x2c/0x3c [ 57.808906][ T4333] __dump_stack+0x30/0x40 [ 57.809670][ T4333] dump_stack_lvl+0xf4/0x15c [ 57.810387][ T4333] dump_stack+0x1c/0x5c [ 57.811011][ T4333] gfs2_assert_warn_i+0x16c/0x26c [ 57.811821][ T4333] gfs2_quota_cleanup+0x464/0x668 [ 57.812617][ T4333] gfs2_put_super+0x1f0/0x760 [ 57.813372][ T4333] generic_shutdown_super+0x130/0x324 [ 57.814291][ T4333] kill_block_super+0x70/0xdc [ 57.815087][ T4333] gfs2_kill_sb+0xc0/0xd4 [ 57.815857][ T4333] deactivate_locked_super+0xac/0x120 [ 57.816752][ T4333] deactivate_super+0xe4/0x104 [ 57.817585][ T4333] cleanup_mnt+0x390/0x418 [ 57.818316][ T4333] __cleanup_mnt+0x20/0x30 [ 57.818995][ T4333] task_work_run+0x1ec/0x278 [ 57.819789][ T4333] do_notify_resume+0x1fa0/0x2aa4 [ 57.820571][ T4333] el0_svc+0x98/0x128 [ 57.821192][ T4333] el0t_64_sync_handler+0x84/0xf0 [ 57.822074][ T4333] el0t_64_sync+0x18c/0x190 [ 57.870006][ T4747] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 57.885023][ T4753] delete_channel: no stack [ 57.887128][ T4753] delete_channel: no stack [ 57.889848][ T4747] ntfs3: loop4: Failed to load $Extend. [ 59.381869][ T4767] IPv6: NLM_F_REPLACE set, but no existing node found! [ 59.651107][ T4425] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 59.817690][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.819428][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.086063][ T4498] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 60.875564][ T4783] loop1: detected capacity change from 0 to 16 [ 60.878692][ T4783] erofs: (device loop1): mounted with root inode @ nid 36. [ 62.070222][ T4498] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 62.078770][ T4806] loop0: detected capacity change from 0 to 16 [ 62.097853][ T4806] erofs: (device loop0): mounted with root inode @ nid 36. [ 62.193320][ T4815] loop2: detected capacity change from 0 to 512 [ 62.475033][ T4815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.478135][ T4815] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.482372][ T4815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 62.483695][ T4815] System zones: 1-12 [ 62.484647][ T4815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.491301][ T4815] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.86: invalid indirect mapped block 2 (level 2) [ 62.501430][ T4815] EXT4-fs (loop2): Remounting filesystem read-only [ 62.502740][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 62.504486][ T4815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.548644][ T4824] loop4: detected capacity change from 0 to 4096 [ 62.587573][ T4824] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 63.061804][ T4834] loop0: detected capacity change from 0 to 4096 [ 63.158711][ T4384] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 63.249193][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.250669][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.165106][ T4612] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 64.387871][ T4612] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 64.498540][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499744][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.560358][ T4852] loop3: detected capacity change from 0 to 16 [ 64.565793][ T4852] erofs: (device loop3): mounted with root inode @ nid 36. [ 64.719393][ T4333] EXT4-fs (loop2): unmounting filesystem. [ 64.850680][ T4384] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 65.251777][ T4859] loop0: detected capacity change from 0 to 256 [ 65.262468][ T4859] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.267056][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.268292][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.270672][ T4859] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 65.292472][ T4859] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 65.834353][ T4865] loop2: detected capacity change from 0 to 16 [ 65.867900][ T4865] erofs: (device loop2): mounted with root inode @ nid 36. [ 65.906380][ T4867] loop3: detected capacity change from 0 to 1024 [ 65.913278][ T4867] EXT4-fs: inline encryption not supported [ 65.914773][ T4867] EXT4-fs: Ignoring removed nobh option [ 65.916669][ T4867] EXT4-fs: Ignoring removed bh option [ 65.921193][ T4867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.953927][ T4867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 65.961308][ T4873] loop4: detected capacity change from 0 to 16 [ 65.984685][ T4873] erofs: (device loop4): mounted with root inode @ nid 36. [ 67.065357][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 67.269893][ T4890] binder: 4876:4890 tried to acquire reference to desc 0, got 1 instead [ 67.275162][ T4890] binder: 4876:4890 got transaction with invalid parent offset or type [ 67.276981][ T4890] binder: 4876:4890 transaction call to 4876:0 failed 5/29201/-22, size 96-24 line 3439 [ 68.846090][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 68.848423][ T4799] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 68.848794][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 68.876578][ T4884] device syzkaller0 entered promiscuous mode [ 68.976991][ T39] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 69.239733][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 69.840345][ T22] cfg80211: failed to load regulatory.db [ 70.191960][ T4906] loop3: detected capacity change from 0 to 256 [ 70.193422][ T4906] exfat: Deprecated parameter 'utf8' [ 70.194298][ T4906] exfat: Deprecated parameter 'namecase' [ 70.195332][ T4906] exfat: Deprecated parameter 'utf8' [ 70.419059][ T4906] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 71.904557][ T4384] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 71.906364][ T4384] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 72.115506][ T4922] loop4: detected capacity change from 0 to 32768 [ 72.206785][ T4922] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.110 (4922) [ 72.238913][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.308053][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.319878][ T4922] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 72.321599][ T4922] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 72.323114][ T4922] BTRFS info (device loop4): enabling disk space caching [ 72.324290][ T4922] BTRFS info (device loop4): force clearing of disk cache [ 72.325537][ T4922] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 72.327160][ T4922] BTRFS info (device loop4): use zstd compression, level 3 [ 72.328310][ T4922] BTRFS info (device loop4): disk space caching is enabled [ 72.443746][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.458006][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.492286][ T4931] loop3: detected capacity change from 0 to 16 [ 72.494728][ T4931] erofs: (device loop3): mounted with root inode @ nid 36. [ 72.980043][ T4944] loop0: detected capacity change from 0 to 16 [ 73.017536][ T4944] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.101300][ T4922] BTRFS info (device loop4): enabling ssd optimizations [ 73.103004][ T4922] BTRFS info (device loop4): rebuilding free space tree [ 73.114386][ T4922] BTRFS info (device loop4): disabling free space tree [ 73.115633][ T4922] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.117365][ T4922] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.428160][ T4958] loop3: detected capacity change from 0 to 16 [ 73.494014][ T4958] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.849846][ T4959] loop2: detected capacity change from 0 to 32768 [ 73.988037][ T4959] [ 73.988037][ T4959] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.988037][ T4959] [ 74.139922][ T4321] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 74.623403][ T9] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 74.857617][ T4410] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 74.915266][ T4333] [ 74.915266][ T4333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.915266][ T4333] [ 74.936188][ T4333] [ 74.936188][ T4333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.936188][ T4333] [ 75.006990][ T4311] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (4311) [ 75.528894][ T4994] IPv6: NLM_F_REPLACE set, but no existing node found! [ 75.799794][ T47] Bluetooth: hci4: link tx timeout [ 75.802065][ T47] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 76.267557][ T4458] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 76.326473][ T4999] loop1: detected capacity change from 0 to 512 [ 76.844949][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.299137][ T4458] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 77.299336][ T5005] loop0: detected capacity change from 0 to 16 [ 77.303515][ T5005] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.786641][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 78.542038][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 78.665368][ T5027] loop4: detected capacity change from 0 to 32768 [ 79.276831][ T5027] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 79.279034][ T5027] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 79.280527][ T5027] BTRFS info (device loop4): enabling disk space caching [ 79.281558][ T5027] BTRFS info (device loop4): force clearing of disk cache [ 79.282750][ T5027] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.284141][ T5027] BTRFS info (device loop4): use zstd compression, level 3 [ 79.285239][ T5027] BTRFS info (device loop4): disk space caching is enabled [ 79.563629][ T5027] BTRFS info (device loop4): enabling ssd optimizations [ 79.565061][ T5027] BTRFS info (device loop4): rebuilding free space tree [ 79.598717][ T5027] BTRFS info (device loop4): disabling free space tree [ 79.599909][ T5027] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.601520][ T5027] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.970131][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.328013][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 81.424696][ T4321] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 82.413903][ T5090] loop2: detected capacity change from 0 to 16 [ 82.433037][ T5090] erofs: (device loop2): mounted with root inode @ nid 36. [ 82.506320][ T5095] loop0: detected capacity change from 0 to 16 [ 82.508892][ T5095] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.572472][ T5114] netlink: 64 bytes leftover after parsing attributes in process `syz.1.144'. [ 84.810866][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 84.970483][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.972334][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.459014][ T5139] loop0: detected capacity change from 0 to 256 [ 85.461414][ T5139] exfat: Deprecated parameter 'utf8' [ 85.462322][ T5139] exfat: Deprecated parameter 'namecase' [ 85.463314][ T5139] exfat: Deprecated parameter 'utf8' [ 85.500182][ T5139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 86.274251][ T5149] loop4: detected capacity change from 0 to 16 [ 86.405743][ T5148] loop1: detected capacity change from 0 to 32768 [ 86.500175][ T5148] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.501506][ T5148] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.504933][ T5148] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 86.507014][ T5149] erofs: (device loop4): mounted with root inode @ nid 36. [ 86.977817][ T4368] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.979007][ T4368] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.017111][ T4368] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 87.023834][ T4368] gfs2: fsid=syz:syz.0: jid=0: Done [ 87.024817][ T5148] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 87.145194][ T5148] gfs2: fsid=syz:syz.0: found 1 quota changes [ 87.150655][ T5159] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 87.150655][ T5159] inode = 11 2339 [ 87.150655][ T5159] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 87.153821][ T5159] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 87.159864][ T5159] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5159 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 87.161697][ T5159] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 87.163106][ T5159] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 87.180385][ T5159] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 87.181671][ T5159] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 87.583763][ T5159] gfs2: fsid=syz:syz.0: File system withdrawn [ 87.585792][ T5159] CPU: 0 PID: 5159 Comm: gfs2_quotad Not tainted syzkaller #0 [ 87.586987][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 87.588634][ T5159] Call trace: [ 87.589169][ T5159] dump_backtrace+0x1c0/0x1ec [ 87.589913][ T5159] show_stack+0x2c/0x3c [ 87.590580][ T5159] __dump_stack+0x30/0x40 [ 87.591359][ T5159] dump_stack_lvl+0xf4/0x15c [ 87.592064][ T5159] dump_stack+0x1c/0x5c [ 87.592698][ T5159] gfs2_withdraw+0xfa4/0x1390 [ 87.593479][ T5159] gfs2_consist_inode_i+0xf0/0x10c [ 87.594289][ T5159] gfs2_inode_refresh+0x918/0xd64 [ 87.595083][ T5159] inode_go_instantiate+0x4c/0x68 [ 87.595870][ T5159] gfs2_instantiate+0x178/0x2b4 [ 87.596681][ T5159] gfs2_glock_wait+0x1b4/0x298 [ 87.597444][ T5159] gfs2_glock_nq+0x8bc/0x11c4 [ 87.598264][ T5159] do_sync+0x41c/0xaec [ 87.598924][ T5159] gfs2_quota_sync+0x2cc/0x500 [ 87.599709][ T5159] gfs2_quotad+0x2d8/0x500 [ 87.600456][ T5159] kthread+0x250/0x2d8 [ 87.601119][ T5159] ret_from_fork+0x10/0x20 [ 87.649558][ T5166] loop0: detected capacity change from 0 to 512 [ 87.652249][ T5166] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.659371][ T5166] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.681444][ T5166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002] [ 87.696172][ T5166] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.701635][ T5166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.156: bg 0: block 361: padding at end of block bitmap is not set [ 87.709334][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 87.712593][ T5166] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 87.715315][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 87.720765][ T5166] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.156: attempt to clear invalid blocks 33619980 len 1 [ 87.725403][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 87.731010][ T5166] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.156: invalid indirect mapped block 1811939328 (level 0) [ 87.901571][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 88.067595][ T5166] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.156: invalid indirect mapped block 2185560079 (level 1) [ 88.086314][ T5166] EXT4-fs (loop0): Remounting filesystem read-only [ 88.090453][ T5166] EXT4-fs (loop0): 1 truncate cleaned up [ 88.091462][ T5166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.114613][ T4320] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 88.116965][ T4320] CPU: 0 PID: 4320 Comm: syz-executor Not tainted syzkaller #0 [ 88.118106][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 88.119651][ T4320] Call trace: [ 88.120139][ T4320] dump_backtrace+0x1c0/0x1ec [ 88.120946][ T4320] show_stack+0x2c/0x3c [ 88.121591][ T4320] __dump_stack+0x30/0x40 [ 88.122310][ T4320] dump_stack_lvl+0xf4/0x15c [ 88.123006][ T4320] dump_stack+0x1c/0x5c [ 88.123629][ T4320] gfs2_assert_warn_i+0x16c/0x26c [ 88.124452][ T4320] gfs2_quota_cleanup+0x464/0x668 [ 88.125267][ T4320] gfs2_put_super+0x1f0/0x760 [ 88.125990][ T4320] generic_shutdown_super+0x130/0x324 [ 88.126790][ T4320] kill_block_super+0x70/0xdc [ 88.127517][ T4320] gfs2_kill_sb+0xc0/0xd4 [ 88.128232][ T4320] deactivate_locked_super+0xac/0x120 [ 88.129188][ T4320] deactivate_super+0xe4/0x104 [ 88.130027][ T4320] cleanup_mnt+0x390/0x418 [ 88.130740][ T4320] __cleanup_mnt+0x20/0x30 [ 88.131585][ T4320] task_work_run+0x1ec/0x278 [ 88.132308][ T4320] do_notify_resume+0x1fa0/0x2aa4 [ 88.133111][ T4320] el0_svc+0x98/0x128 [ 88.133731][ T4320] el0t_64_sync_handler+0x84/0xf0 [ 88.134550][ T4320] el0t_64_sync+0x18c/0x190 [ 92.472830][ T5199] loop1: detected capacity change from 0 to 16 [ 92.474570][ T5199] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.494741][ T5182] bridge0: port 4(wlan1) entered blocking state [ 92.496065][ T5182] bridge0: port 4(wlan1) entered disabled state [ 92.499385][ T5182] device wlan1 entered promiscuous mode [ 92.500828][ T5182] bridge0: port 4(wlan1) entered blocking state [ 92.501946][ T5182] bridge0: port 4(wlan1) entered forwarding state [ 92.570530][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 92.589013][ T55] bridge0: port 4(wlan1) entered disabled state [ 92.592070][ T4425] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 92.597790][ T5202] loop4: detected capacity change from 0 to 16 [ 92.602573][ T5202] erofs: (device loop4): mounted with root inode @ nid 36. [ 92.698188][ T5205] loop1: detected capacity change from 0 to 16 [ 92.713445][ T5205] erofs: (device loop1): mounted with root inode @ nid 36. [ 93.077451][ T4442] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 93.264077][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 94.442437][ T5231] loop1: detected capacity change from 0 to 256 [ 94.445129][ T5231] exfat: Deprecated parameter 'utf8' [ 94.446048][ T5231] exfat: Deprecated parameter 'namecase' [ 94.447046][ T5231] exfat: Deprecated parameter 'utf8' [ 94.513892][ T5231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 96.152364][ T5252] loop0: detected capacity change from 0 to 512 [ 96.469782][ T5252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.404775][ T4458] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 98.192488][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 98.208102][ T4637] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 98.235031][ T5276] loop2: detected capacity change from 0 to 16 [ 98.236907][ T5277] loop0: detected capacity change from 0 to 16 [ 98.238645][ T5276] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.240015][ T5277] erofs: (device loop0): mounted with root inode @ nid 36. [ 99.718760][ T5297] loop1: detected capacity change from 0 to 32768 [ 99.723550][ T5297] [ 99.723550][ T5297] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.723550][ T5297] [ 100.680083][ T4320] [ 100.680083][ T4320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.680083][ T4320] [ 100.696981][ T4320] [ 100.696981][ T4320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.696981][ T4320] [ 100.818106][ T4637] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 101.112190][ T5322] loop1: detected capacity change from 0 to 16 [ 101.114859][ T5322] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.118508][ T4637] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 101.157128][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 101.308896][ T4637] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 101.322569][ T5331] loop3: detected capacity change from 0 to 512 [ 101.406113][ T5331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.333439][ T5338] Can't find ip_set type hash:net,por [ 102.428545][ T5344] loop2: detected capacity change from 0 to 16 [ 102.438008][ T5345] loop0: detected capacity change from 0 to 16 [ 102.525815][ T5345] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.527335][ T5344] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.354805][ T5364] loop4: detected capacity change from 0 to 256 [ 104.356248][ T5364] exfat: Deprecated parameter 'utf8' [ 104.357234][ T5364] exfat: Deprecated parameter 'namecase' [ 104.358227][ T5364] exfat: Deprecated parameter 'utf8' [ 104.481941][ T5364] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 105.763547][ T5380] loop4: detected capacity change from 0 to 16 [ 105.772404][ T5380] erofs: (device loop4): mounted with root inode @ nid 36. [ 106.282370][ T5388] loop2: detected capacity change from 0 to 4096 [ 106.886579][ T4488] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 106.977045][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.978305][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.237849][ T5401] loop2: detected capacity change from 0 to 16 [ 107.240197][ T5401] erofs: (device loop2): mounted with root inode @ nid 36. [ 107.617467][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 108.207496][ T5416] IPv6: NLM_F_REPLACE set, but no existing node found! [ 108.844118][ T5421] loop4: detected capacity change from 0 to 16 [ 108.853109][ T5420] loop2: detected capacity change from 0 to 16 [ 108.866274][ T5421] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.868389][ T5420] erofs: (device loop2): mounted with root inode @ nid 36. [ 110.138177][ T5437] binder: 5431:5437 tried to acquire reference to desc 0, got 1 instead [ 110.140290][ T5437] binder: 5431:5437 got transaction with invalid parent offset or type [ 110.141689][ T5437] binder: 5431:5437 transaction call to 5431:0 failed 12/29201/-22, size 96-24 line 3439 [ 110.578269][ T4366] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.002464][ T4663] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 111.087191][ T4612] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 111.095239][ T5450] loop2: detected capacity change from 0 to 4096 [ 111.130014][ T4488] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 111.338141][ T4488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.350409][ T4488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.399952][ T5460] loop4: detected capacity change from 0 to 16 [ 111.408758][ T5460] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.999965][ T5470] loop3: detected capacity change from 0 to 16 [ 112.005945][ T5470] erofs: (device loop3): mounted with root inode @ nid 36. [ 113.072693][ T4612] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 113.156445][ T5492] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.547403][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 113.644108][ T5498] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.892726][ T5500] loop4: detected capacity change from 0 to 16 [ 113.897527][ T5500] erofs: (device loop4): mounted with root inode @ nid 36. [ 114.783955][ T5515] loop4: detected capacity change from 0 to 64 [ 114.806126][ T4475] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 114.937659][ T4475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.939000][ T4475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.010765][ T4488] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 116.108719][ T4498] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 116.430735][ T5548] loop3: detected capacity change from 0 to 16 [ 116.495336][ T5548] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.736024][ T5553] loop2: detected capacity change from 0 to 16 [ 116.764538][ T5553] erofs: (device loop2): mounted with root inode @ nid 36. [ 117.424849][ T4498] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 117.649056][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.651912][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.243719][ T4498] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 118.247077][ T5159] ================================================================== [ 118.248361][ T5159] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6800 [ 118.249531][ T5159] Read of size 8 at addr ffff0000db314bb0 by task gfs2_quotad/5159 [ 118.250922][ T5159] [ 118.251293][ T5159] CPU: 0 PID: 5159 Comm: gfs2_quotad Not tainted syzkaller #0 [ 118.252498][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 118.254103][ T5159] Call trace: [ 118.254644][ T5159] dump_backtrace+0x1c0/0x1ec [ 118.255385][ T5159] show_stack+0x2c/0x3c [ 118.256029][ T5159] __dump_stack+0x30/0x40 [ 118.256778][ T5159] dump_stack_lvl+0xf4/0x15c [ 118.257545][ T5159] print_address_description+0x88/0x218 [ 118.258405][ T5159] print_report+0x50/0x68 [ 118.259125][ T5159] kasan_report+0xa8/0xfc [ 118.259847][ T5159] __asan_report_load8_noabort+0x2c/0x38 [ 118.260818][ T5159] __lock_acquire+0x104/0x6800 [ 118.261608][ T5159] lock_acquire+0x20c/0x63c [ 118.262349][ T5159] _raw_spin_lock_irqsave+0x6c/0xb0 [ 118.263178][ T5159] finish_wait+0xc8/0x1ac [ 118.263867][ T5159] gfs2_quotad+0x390/0x500 [ 118.264562][ T5159] kthread+0x250/0x2d8 [ 118.265207][ T5159] ret_from_fork+0x10/0x20 [ 118.265893][ T5159] [ 118.266274][ T5159] Allocated by task 4488: [ 118.266906][ T5159] kasan_set_track+0x4c/0x80 [ 118.267682][ T5159] kasan_save_alloc_info+0x24/0x30 [ 118.268584][ T5159] __kasan_kmalloc+0xa0/0xb8 [ 118.269356][ T5159] __kmalloc_node_track_caller+0xe0/0x16c [ 118.270287][ T5159] __alloc_skb+0x264/0x714 [ 118.271022][ T5159] nsim_dev_trap_report_work+0x214/0x984 [ 118.271923][ T5159] process_one_work+0x7f8/0x13a4 [ 118.272725][ T5159] worker_thread+0x8c4/0xfec [ 118.273422][ T5159] kthread+0x250/0x2d8 [ 118.274129][ T5159] ret_from_fork+0x10/0x20 [ 118.274887][ T5159] [ 118.275257][ T5159] Freed by task 4488: [ 118.275911][ T5159] kasan_set_track+0x4c/0x80 [ 118.276696][ T5159] kasan_save_free_info+0x38/0x5c [ 118.277530][ T5159] ____kasan_slab_free+0x148/0x1b0 [ 118.278337][ T5159] __kasan_slab_free+0x18/0x28 [ 118.279098][ T5159] slab_free_freelist_hook+0x16c/0x1e8 [ 118.279993][ T5159] __kmem_cache_free+0xbc/0x218 [ 118.280844][ T5159] kfree+0xd0/0x1a8 [ 118.281456][ T5159] skb_release_data+0x434/0x63c [ 118.282239][ T5159] consume_skb+0xa0/0x104 [ 118.282938][ T5159] nsim_dev_trap_report_work+0x630/0x984 [ 118.283832][ T5159] process_one_work+0x7f8/0x13a4 [ 118.284660][ T5159] worker_thread+0x8c4/0xfec [ 118.285406][ T5159] kthread+0x250/0x2d8 [ 118.286094][ T5159] ret_from_fork+0x10/0x20 [ 118.286838][ T5159] [ 118.287275][ T5159] The buggy address belongs to the object at ffff0000db314000 [ 118.287275][ T5159] which belongs to the cache kmalloc-4k of size 4096 [ 118.289614][ T5159] The buggy address is located 2992 bytes inside of [ 118.289614][ T5159] 4096-byte region [ffff0000db314000, ffff0000db315000) [ 118.291757][ T5159] [ 118.292114][ T5159] The buggy address belongs to the physical page: [ 118.293154][ T5159] page:00000000edaa2fe1 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b310 [ 118.294874][ T5159] head:00000000edaa2fe1 order:3 compound_mapcount:0 compound_pincount:0 [ 118.296287][ T5159] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 118.297636][ T5159] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002a80 [ 118.298900][ T5159] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 118.300160][ T5159] page dumped because: kasan: bad access detected [ 118.301130][ T5159] [ 118.301500][ T5159] Memory state around the buggy address: [ 118.302310][ T5159] ffff0000db314a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.303503][ T5159] ffff0000db314b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.304684][ T5159] >ffff0000db314b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.306001][ T5159] ^ [ 118.306919][ T5159] ffff0000db314c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.308220][ T5159] ffff0000db314c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.309408][ T5159] ================================================================== [ 118.310667][ T5159] Disabling lock debugging due to kernel taint [ 118.311726][ T5159] INFO: trying to register non-static key. [ 118.312705][ T5159] The code is fine but needs lockdep annotation, or maybe [ 118.313846][ T5159] you didn't initialize this object before use? [ 118.314894][ T5159] turning off the locking correctness validator. [ 118.315968][ T5159] CPU: 0 PID: 5159 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 118.317480][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 118.319109][ T5159] Call trace: [ 118.319655][ T5159] dump_backtrace+0x1c0/0x1ec [ 118.320406][ T5159] show_stack+0x2c/0x3c [ 118.321029][ T5159] __dump_stack+0x30/0x40 [ 118.321700][ T5159] dump_stack_lvl+0xf4/0x15c [ 118.322395][ T5159] dump_stack+0x1c/0x5c [ 118.323093][ T5159] assign_lock_key+0x230/0x264 [ 118.323903][ T5159] register_lock_class+0x1ac/0x694 [ 118.324735][ T5159] __lock_acquire+0x164/0x6800 [ 118.325529][ T5159] lock_acquire+0x20c/0x63c [ 118.326234][ T5159] _raw_spin_lock_irqsave+0x6c/0xb0 [ 118.327038][ T5159] finish_wait+0xc8/0x1ac [ 118.327676][ T5159] gfs2_quotad+0x390/0x500 [ 118.328380][ T5159] kthread+0x250/0x2d8 [ 118.328955][ T5159] ret_from_fork+0x10/0x20 [ 118.329637][ T5159] list_del corruption. prev->next should be ffff800020c47d98, but was 0000000000000000. (prev=ffff0000db314bd8) [ 118.331681][ T5159] ------------[ cut here ]------------ [ 118.332546][ T5159] kernel BUG at lib/list_debug.c:61! [ 118.333423][ T5159] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 118.334610][ T5159] Modules linked in: [ 118.335160][ T5159] CPU: 0 PID: 5159 Comm: gfs2_quotad Tainted: G B syzkaller #0 [ 118.336548][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 118.338114][ T5159] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 118.339380][ T5159] pc : __list_del_entry_valid+0x13c/0x158 [ 118.340379][ T5159] lr : __list_del_entry_valid+0x13c/0x158 [ 118.341371][ T5159] sp : ffff800020c47c70 [ 118.342027][ T5159] x29: ffff800020c47c70 x28: 0000000000000000 x27: 0000000000000bb8 [ 118.343415][ T5159] x26: 0000000000001770 x25: dfff800000000000 x24: dfff800000000000 [ 118.344745][ T5159] x23: ffff0000db3147c0 x22: dfff800000000000 x21: ffff0000db314bd8 [ 118.345934][ T5159] x20: ffff0000db314bd8 x19: ffff800020c47d98 x18: ffff800011b8bf60 [ 118.347141][ T5159] x17: 20747562202c3839 x16: ffff8000082eee68 x15: 0000000000000000 [ 118.348432][ T5159] x14: 0000000000000001 x13: 1fffe00033ea87a3 x12: 0000000000ff0100 [ 118.349705][ T5159] x11: ff00800008311550 x10: 0000000000000000 x9 : 85e9fb62129f2600 [ 118.351044][ T5159] x8 : 85e9fb62129f2600 x7 : 0000000000000001 x6 : 0000000000000001 [ 118.352281][ T5159] x5 : ffff800020c47738 x4 : ffff8000152f4cc0 x3 : ffff80000853854c [ 118.353577][ T5159] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 000000000000006d [ 118.354846][ T5159] Call trace: [ 118.355406][ T5159] __list_del_entry_valid+0x13c/0x158 [ 118.356273][ T5159] finish_wait+0xd4/0x1ac [ 118.356965][ T5159] gfs2_quotad+0x390/0x500 [ 118.357666][ T5159] kthread+0x250/0x2d8 [ 118.358317][ T5159] ret_from_fork+0x10/0x20 [ 118.359049][ T5159] Code: 91340000 aa1303e1 aa1503e3 95c1c904 (d4210000) [ 118.360145][ T5159] ---[ end trace 0000000000000000 ]--- [ 118.573499][ T5159] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 118.574449][ T5159] SMP: stopping secondary CPUs [ 118.575254][ T5159] Kernel Offset: disabled [ 118.575940][ T5159] CPU features: 0x080000,000f0097,a65bfea7 [ 118.576844][ T5159] Memory Limit: none [ 118.790239][ T5159] Rebooting in 86400 seconds..