last executing test programs: 6.323246431s ago: executing program 0 (id=372): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x3) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, 0x0, 0x0) 5.601456985s ago: executing program 1 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300), 0x0, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.897664542s ago: executing program 0 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r3, &(0x7f0000000480)="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", 0x160) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4.727587973s ago: executing program 1 (id=379): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000003380), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x402, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.406541727s ago: executing program 1 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.243868739s ago: executing program 4 (id=382): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.014810609s ago: executing program 0 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.9110545s ago: executing program 3 (id=385): socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.894119088s ago: executing program 4 (id=386): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, 0x0, 0x0) 3.880768756s ago: executing program 2 (id=387): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 3.534449235s ago: executing program 4 (id=388): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x3) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, 0x0, 0x0) 3.476289575s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300), 0x0, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.622317986s ago: executing program 0 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) recvmsg$unix(r2, 0x0, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) waitid(0x1, 0x0, 0x0, 0x80000004, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcb, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}}, 0x5c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x14, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20006940}, 0xc000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800011, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES16=r6, @ANYRESDEC, @ANYRES32, @ANYBLOB="e34fef60310d8cf8b38314a774f0fa06a4f1e0a0d12f3e17794e0670c41c48144163ab7c06110af0ccfe0a945c94e8c446b483c1261b2d1c60bb4c50ee09185715da09b32c95c220be58f921de50529f5ef243c442050f3b0c826e2829f13898c1d3a783dfa7f74798240321a2c203e6b890db4dcbe78c9cf00677c16a9f051ffd869e950f5bc3e5b41fc465cf1e57ddc678583b3f7a123595c246ffe8da4f82090167708b60b99adb182cf5c389b47bb77748350d2b98d429d4f0af73bf4976000000000000000000", @ANYRES16, @ANYRES32], 0x0, 0x32b, &(0x7f0000000340)="$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") 2.618978626s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000480)="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", 0x160) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.58527108s ago: executing program 2 (id=392): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000003380), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x402, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.577223468s ago: executing program 1 (id=393): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, r6, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x64, 0xf}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0xc, 0x6}}}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 2.535595541s ago: executing program 2 (id=394): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) 2.307478092s ago: executing program 2 (id=395): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) 2.149443104s ago: executing program 4 (id=396): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, 0x0, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7ffffffc, 0xfff}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b90000000608", 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0xe6eedc45313651a9, 0x94, 0x1}, 0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.700016005s ago: executing program 0 (id=397): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r3, &(0x7f0000000480)="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", 0x160) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.672084811s ago: executing program 3 (id=398): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, 0x0, 0x0) 1.611441421s ago: executing program 3 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.566582983s ago: executing program 4 (id=400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.03719783s ago: executing program 2 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 537.699194ms ago: executing program 4 (id=402): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 500.017467ms ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 499.608167ms ago: executing program 3 (id=404): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) accept(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000003380), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x402, 0x2e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd_index=0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 455.91068ms ago: executing program 3 (id=405): ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0xd9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0xffffffffffff3ac6) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x540) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) 395.139459ms ago: executing program 1 (id=406): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 0s ago: executing program 2 (id=407): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x3) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): veth0_to_team: link becomes ready [ 33.968354][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.970111][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.981871][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.983978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.986636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.988227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.989748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.993170][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.000856][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.006671][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.010257][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.011783][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.020279][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.021680][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.023200][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.025470][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.028524][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.031745][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.043692][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.045977][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.047382][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.048832][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.050210][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.051757][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.053402][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.054592][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.059055][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.060719][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.062275][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.063305][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.066232][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.068819][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.073761][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.078260][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.079830][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.081296][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.082402][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.083760][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.085642][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.087215][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.088537][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.099601][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.101912][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.103385][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.106336][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.107532][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.108701][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.110683][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.112187][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.113290][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.118288][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.129568][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.131287][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.133286][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.134380][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.136361][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.138037][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.139838][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.141725][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.143382][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.146635][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.156152][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.157783][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.162428][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.163951][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.167414][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.169026][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.170468][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.172319][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.173829][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.176496][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.177892][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.179406][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.180869][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.182299][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.183851][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.186516][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.187946][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.189403][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.190885][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.192341][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.193827][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.202646][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.208068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.209343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.210565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.212265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.216210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.217938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.224774][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.226314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.227825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.229191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.230609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.240209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.241827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.243924][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.251491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.253096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.255150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.256621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.262136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.263671][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.279113][ T4328] device veth0_vlan entered promiscuous mode [ 34.286820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.288353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.289961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.291300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.300284][ T4328] device veth1_vlan entered promiscuous mode [ 34.303165][ T4322] device veth0_vlan entered promiscuous mode [ 34.316291][ T4322] device veth1_vlan entered promiscuous mode [ 34.333281][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.335249][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.336728][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.338204][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.339732][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.341471][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.344968][ T4328] device veth0_macvtap entered promiscuous mode [ 34.355663][ T4328] device veth1_macvtap entered promiscuous mode [ 34.360273][ T4322] device veth0_macvtap entered promiscuous mode [ 34.373485][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.375107][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.376477][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.378052][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.385864][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.388313][ T4322] device veth1_macvtap entered promiscuous mode [ 34.391628][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.393187][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.395273][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.396560][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.408003][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.410454][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.411753][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.413024][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.414808][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.419676][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.422256][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.423524][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.436445][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.438766][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.440159][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.441514][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.442827][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.448341][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.449969][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.459827][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.461253][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.463132][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.466150][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.467689][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.470306][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.471757][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.473359][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.488122][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.489797][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.491522][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.492800][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.500288][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.501961][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.504190][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.508657][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.510337][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.511831][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.513424][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.517225][ T4321] device veth0_vlan entered promiscuous mode [ 34.528735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.530440][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.533665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.538347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.549124][ T4322] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.550654][ T4322] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.552124][ T4322] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.553568][ T4322] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.560747][ T4321] device veth1_vlan entered promiscuous mode [ 34.562426][ T4330] device veth0_vlan entered promiscuous mode [ 34.563634][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.565222][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.566712][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.590028][ T4329] device veth0_vlan entered promiscuous mode [ 34.594151][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.595998][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.598193][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.599850][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.601315][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.603844][ T4330] device veth1_vlan entered promiscuous mode [ 34.610861][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.612057][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.617738][ T4329] device veth1_vlan entered promiscuous mode [ 34.619823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.621253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.622637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.646226][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.647694][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.649133][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.650687][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.658072][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.659296][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.661514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.665082][ T4321] device veth0_macvtap entered promiscuous mode [ 34.669954][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.671193][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.672630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.674154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.687323][ T4321] device veth1_macvtap entered promiscuous mode [ 34.690395][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.691974][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.693588][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.696026][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.697855][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.700160][ T4330] device veth0_macvtap entered promiscuous mode [ 34.702168][ T4329] device veth0_macvtap entered promiscuous mode [ 34.705481][ T4329] device veth1_macvtap entered promiscuous mode [ 34.710707][ T4330] device veth1_macvtap entered promiscuous mode [ 34.726068][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.727763][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.729269][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.730909][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.732694][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.733012][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.734006][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.745817][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.747370][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.749486][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.750887][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.752177][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.754098][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.756353][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.763809][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.769057][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.775482][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.776986][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.780277][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.784194][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.787365][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.789265][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.791032][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.817000][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.818735][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.822164][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.824006][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.826662][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.828182][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.829828][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.831444][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.833051][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.837716][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.839287][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.842488][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.845511][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.847675][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.849265][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.850880][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.854702][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.856228][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.869057][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.870784][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.872498][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.874103][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.879162][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.880923][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.883377][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.888156][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.889618][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.891091][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.892496][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.895690][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.897298][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.899178][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.900784][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.902451][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.904044][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.906141][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.907686][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.909326][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.910834][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.913101][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.188332][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.190295][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.196550][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.209390][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.212336][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.213907][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.261854][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.263163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.267704][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.285804][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.288129][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.289466][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.290873][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.332178][ T278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.333655][ T278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.338031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.702016][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.703364][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.706432][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.722387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.723823][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.727301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.751301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.752871][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.754215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.760371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.761847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.763960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.787258][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 35.788898][ T4327] Bluetooth: hci4: command 0x041b tx timeout [ 35.790047][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 35.791090][ T4327] Bluetooth: hci2: command 0x041b tx timeout [ 35.792210][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 35.869719][ T4414] loop3: detected capacity change from 0 to 4096 [ 35.874767][ T4414] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 35.913254][ T4414] ntfs3: loop3: mft corrupted [ 35.914187][ T4414] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 35.923656][ T4414] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 36.033149][ T4422] loop4: detected capacity change from 0 to 4096 [ 36.037260][ T4422] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 36.194794][ T4422] ntfs3: loop4: mft corrupted [ 36.195731][ T4422] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 36.197345][ T4422] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 36.276270][ T4426] loop1: detected capacity change from 0 to 4096 [ 36.278719][ T4426] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 36.292315][ T4426] ntfs3: loop1: mft corrupted [ 36.293151][ T4426] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 36.295179][ T4426] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 37.412149][ T4437] loop1: detected capacity change from 0 to 32768 [ 37.416603][ T4437] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 37.418068][ T4437] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 37.422744][ T4437] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 37.429886][ T4367] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 37.430944][ T4367] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 37.447742][ T4367] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 37.450129][ T4367] gfs2: fsid=syz:syz.0: jid=0: Done [ 37.451748][ T4437] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 37.563892][ T4437] gfs2: fsid=syz:syz.0: found 1 quota changes [ 37.955114][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 37.956380][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.957654][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.958893][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 37.960060][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 38.428068][ T4322] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 38.428068][ T4322] inode = 11 2339 [ 38.428068][ T4322] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 38.434305][ T4322] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 38.437871][ T4322] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4322 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 38.439724][ T4322] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 38.441195][ T4322] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 38.446745][ T4322] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 38.450415][ T4322] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 38.454954][ T4322] gfs2: fsid=syz:syz.0: File system withdrawn [ 38.456068][ T4322] CPU: 1 PID: 4322 Comm: syz-executor Not tainted syzkaller #0 [ 38.457226][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 38.458845][ T4322] Call trace: [ 38.459428][ T4322] dump_backtrace+0x1c0/0x1ec [ 38.460174][ T4322] show_stack+0x2c/0x3c [ 38.460839][ T4322] __dump_stack+0x30/0x40 [ 38.461524][ T4322] dump_stack_lvl+0xf4/0x15c [ 38.462249][ T4322] dump_stack+0x1c/0x5c [ 38.462933][ T4322] gfs2_withdraw+0xfa4/0x1390 [ 38.463684][ T4322] gfs2_consist_inode_i+0xf0/0x10c [ 38.464520][ T4322] gfs2_inode_refresh+0x918/0xd64 [ 38.465386][ T4322] inode_go_instantiate+0x4c/0x68 [ 38.466190][ T4322] gfs2_instantiate+0x178/0x2b4 [ 38.467027][ T4322] gfs2_glock_wait+0x1b4/0x298 [ 38.467832][ T4322] gfs2_glock_nq+0x8bc/0x11c4 [ 38.468639][ T4322] do_sync+0x41c/0xaec [ 38.469343][ T4322] gfs2_quota_sync+0x2cc/0x500 [ 38.470164][ T4322] gfs2_sync_fs+0x4c/0xc4 [ 38.470855][ T4322] sync_filesystem+0xe8/0x218 [ 38.471600][ T4322] generic_shutdown_super+0x70/0x324 [ 38.472483][ T4322] kill_block_super+0x70/0xdc [ 38.473215][ T4322] gfs2_kill_sb+0xc0/0xd4 [ 38.473885][ T4322] deactivate_locked_super+0xac/0x120 [ 38.474719][ T4322] deactivate_super+0xe4/0x104 [ 38.475416][ T4322] cleanup_mnt+0x390/0x418 [ 38.476158][ T4322] __cleanup_mnt+0x20/0x30 [ 38.476934][ T4322] task_work_run+0x1ec/0x278 [ 38.477659][ T4322] do_notify_resume+0x1fa0/0x2aa4 [ 38.478452][ T4322] el0_svc+0x98/0x128 [ 38.479151][ T4322] el0t_64_sync_handler+0x84/0xf0 [ 38.480039][ T4322] el0t_64_sync+0x18c/0x190 [ 38.552291][ T4322] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 38.564318][ T4322] CPU: 0 PID: 4322 Comm: syz-executor Not tainted syzkaller #0 [ 38.565525][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 38.567079][ T4322] Call trace: [ 38.567605][ T4322] dump_backtrace+0x1c0/0x1ec [ 38.568323][ T4322] show_stack+0x2c/0x3c [ 38.568975][ T4322] __dump_stack+0x30/0x40 [ 38.569726][ T4322] dump_stack_lvl+0xf4/0x15c [ 38.570452][ T4322] dump_stack+0x1c/0x5c [ 38.571125][ T4322] gfs2_assert_warn_i+0x16c/0x26c [ 38.571868][ T4322] gfs2_quota_cleanup+0x464/0x668 [ 38.572658][ T4322] gfs2_put_super+0x1f0/0x760 [ 38.573416][ T4322] generic_shutdown_super+0x130/0x324 [ 38.574345][ T4322] kill_block_super+0x70/0xdc [ 38.575126][ T4322] gfs2_kill_sb+0xc0/0xd4 [ 38.575813][ T4322] deactivate_locked_super+0xac/0x120 [ 38.576749][ T4322] deactivate_super+0xe4/0x104 [ 38.577458][ T4322] cleanup_mnt+0x390/0x418 [ 38.578112][ T4322] __cleanup_mnt+0x20/0x30 [ 38.578834][ T4322] task_work_run+0x1ec/0x278 [ 38.579548][ T4322] do_notify_resume+0x1fa0/0x2aa4 [ 38.580333][ T4322] el0_svc+0x98/0x128 [ 38.581053][ T4322] el0t_64_sync_handler+0x84/0xf0 [ 38.581842][ T4322] el0t_64_sync+0x18c/0x190 [ 38.600413][ T4463] loop3: detected capacity change from 0 to 4096 [ 38.603917][ T4463] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 38.709638][ T4463] ntfs3: loop3: mft corrupted [ 38.710467][ T4463] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 38.714330][ T4463] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 39.372622][ T4533] loop3: detected capacity change from 0 to 4096 [ 39.665953][ T4533] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 39.683663][ T4533] ntfs3: loop3: mft corrupted [ 39.684469][ T4533] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 39.687606][ T4533] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 40.183398][ T4626] loop0: detected capacity change from 0 to 4096 [ 40.185479][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 40.186457][ T4327] Bluetooth: hci4: command 0x0419 tx timeout [ 40.187473][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 40.188384][ T4327] Bluetooth: hci3: command 0x0419 tx timeout [ 40.189320][ T4327] Bluetooth: hci1: command 0x0419 tx timeout [ 40.385874][ T4626] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 40.397833][ T4626] ntfs3: loop0: mft corrupted [ 40.398664][ T4626] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 40.400285][ T4626] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 41.745031][ T4665] loop4: detected capacity change from 0 to 32768 [ 41.747774][ T4665] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 41.749062][ T4665] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 41.753995][ T4665] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 41.757265][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 41.758339][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 41.768414][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 41.769840][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 41.770780][ T4665] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 41.897841][ T4670] loop1: detected capacity change from 0 to 4096 [ 41.900264][ T4670] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 41.903678][ T4670] ntfs3: loop1: mft corrupted [ 41.904397][ T4670] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 41.906190][ T4670] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 41.921864][ T4665] gfs2: fsid=syz:syz.0: found 1 quota changes [ 41.982663][ T4666] loop2: detected capacity change from 0 to 4096 [ 41.987191][ T4666] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 42.009146][ T4666] ntfs3: loop2: mft corrupted [ 42.009923][ T4666] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 42.011593][ T4666] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 42.496263][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 42.496263][ T4329] inode = 11 2339 [ 42.496263][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 42.499944][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 42.502846][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 42.509484][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 42.514087][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 42.525570][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 42.531262][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 42.534394][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 42.538647][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 42.539766][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 42.541289][ T4329] Call trace: [ 42.541785][ T4329] dump_backtrace+0x1c0/0x1ec [ 42.542586][ T4329] show_stack+0x2c/0x3c [ 42.543257][ T4329] __dump_stack+0x30/0x40 [ 42.544003][ T4329] dump_stack_lvl+0xf4/0x15c [ 42.544771][ T4329] dump_stack+0x1c/0x5c [ 42.545447][ T4329] gfs2_withdraw+0xfa4/0x1390 [ 42.546224][ T4329] gfs2_consist_inode_i+0xf0/0x10c [ 42.547039][ T4329] gfs2_inode_refresh+0x918/0xd64 [ 42.547859][ T4329] inode_go_instantiate+0x4c/0x68 [ 42.548722][ T4329] gfs2_instantiate+0x178/0x2b4 [ 42.549523][ T4329] gfs2_glock_wait+0x1b4/0x298 [ 42.550291][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 42.551005][ T4329] do_sync+0x41c/0xaec [ 42.551596][ T4329] gfs2_quota_sync+0x2cc/0x500 [ 42.552394][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 42.553123][ T4329] sync_filesystem+0xe8/0x218 [ 42.553910][ T4329] generic_shutdown_super+0x70/0x324 [ 42.554773][ T4329] kill_block_super+0x70/0xdc [ 42.555551][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 42.556307][ T4329] deactivate_locked_super+0xac/0x120 [ 42.557236][ T4329] deactivate_super+0xe4/0x104 [ 42.558030][ T4329] cleanup_mnt+0x390/0x418 [ 42.558812][ T4329] __cleanup_mnt+0x20/0x30 [ 42.559547][ T4329] task_work_run+0x1ec/0x278 [ 42.560349][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 42.561187][ T4329] el0_svc+0x98/0x128 [ 42.561875][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 42.562770][ T4329] el0t_64_sync+0x18c/0x190 [ 42.568100][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 42.570421][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 42.571568][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 42.573027][ T4329] Call trace: [ 42.573536][ T4329] dump_backtrace+0x1c0/0x1ec [ 42.574215][ T4329] show_stack+0x2c/0x3c [ 42.574871][ T4329] __dump_stack+0x30/0x40 [ 42.575574][ T4329] dump_stack_lvl+0xf4/0x15c [ 42.576317][ T4329] dump_stack+0x1c/0x5c [ 42.576993][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 42.577813][ T4329] gfs2_quota_cleanup+0x464/0x668 [ 42.578643][ T4329] gfs2_put_super+0x1f0/0x760 [ 42.579405][ T4329] generic_shutdown_super+0x130/0x324 [ 42.580334][ T4329] kill_block_super+0x70/0xdc [ 42.581081][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 42.581786][ T4329] deactivate_locked_super+0xac/0x120 [ 42.582644][ T4329] deactivate_super+0xe4/0x104 [ 42.583476][ T4329] cleanup_mnt+0x390/0x418 [ 42.584185][ T4329] __cleanup_mnt+0x20/0x30 [ 42.584907][ T4329] task_work_run+0x1ec/0x278 [ 42.585637][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 42.586480][ T4329] el0_svc+0x98/0x128 [ 42.587123][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 42.587935][ T4329] el0t_64_sync+0x18c/0x190 [ 43.195422][ T4685] loop3: detected capacity change from 0 to 4096 [ 43.198978][ T4685] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 43.250579][ T4685] ntfs3: loop3: mft corrupted [ 43.251608][ T4685] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 43.256899][ T4685] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 43.682535][ T4688] loop0: detected capacity change from 0 to 32768 [ 43.688507][ T4688] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 43.689819][ T4688] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 43.692794][ T4688] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 43.694661][ T4370] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 43.695801][ T4370] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 43.705639][ T4370] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 9ms [ 43.707930][ T4370] gfs2: fsid=syz:syz.0: jid=0: Done [ 43.708908][ T4688] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 44.137422][ T4688] gfs2: fsid=syz:syz.0: found 1 quota changes [ 44.214660][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 44.214660][ T4328] inode = 11 2339 [ 44.214660][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 44.219276][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 44.220849][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 44.222674][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 44.230212][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 44.238169][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 44.239554][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 44.241007][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 44.247750][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 44.248843][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.250326][ T4328] Call trace: [ 44.250788][ T4328] dump_backtrace+0x1c0/0x1ec [ 44.251537][ T4328] show_stack+0x2c/0x3c [ 44.252165][ T4328] __dump_stack+0x30/0x40 [ 44.252795][ T4328] dump_stack_lvl+0xf4/0x15c [ 44.253519][ T4328] dump_stack+0x1c/0x5c [ 44.254232][ T4328] gfs2_withdraw+0xfa4/0x1390 [ 44.255047][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 44.255882][ T4328] gfs2_inode_refresh+0x918/0xd64 [ 44.256737][ T4328] inode_go_instantiate+0x4c/0x68 [ 44.257550][ T4328] gfs2_instantiate+0x178/0x2b4 [ 44.258327][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 44.259114][ T4328] gfs2_glock_nq+0x8bc/0x11c4 [ 44.259905][ T4328] do_sync+0x41c/0xaec [ 44.260563][ T4328] gfs2_quota_sync+0x2cc/0x500 [ 44.261304][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 44.261986][ T4328] sync_filesystem+0xe8/0x218 [ 44.262709][ T4328] generic_shutdown_super+0x70/0x324 [ 44.263565][ T4328] kill_block_super+0x70/0xdc [ 44.264291][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 44.264980][ T4328] deactivate_locked_super+0xac/0x120 [ 44.265837][ T4328] deactivate_super+0xe4/0x104 [ 44.266570][ T4328] cleanup_mnt+0x390/0x418 [ 44.267265][ T4328] __cleanup_mnt+0x20/0x30 [ 44.267967][ T4328] task_work_run+0x1ec/0x278 [ 44.268687][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 44.269505][ T4328] el0_svc+0x98/0x128 [ 44.270129][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 44.270941][ T4328] el0t_64_sync+0x18c/0x190 [ 44.276121][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 44.278402][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 44.279636][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.281154][ T4328] Call trace: [ 44.281661][ T4328] dump_backtrace+0x1c0/0x1ec [ 44.282378][ T4328] show_stack+0x2c/0x3c [ 44.283051][ T4328] __dump_stack+0x30/0x40 [ 44.283737][ T4328] dump_stack_lvl+0xf4/0x15c [ 44.284490][ T4328] dump_stack+0x1c/0x5c [ 44.285247][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 44.286099][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 44.286989][ T4328] gfs2_put_super+0x1f0/0x760 [ 44.287783][ T4328] generic_shutdown_super+0x130/0x324 [ 44.288716][ T4328] kill_block_super+0x70/0xdc [ 44.289459][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 44.290196][ T4328] deactivate_locked_super+0xac/0x120 [ 44.291038][ T4328] deactivate_super+0xe4/0x104 [ 44.291750][ T4328] cleanup_mnt+0x390/0x418 [ 44.292431][ T4328] __cleanup_mnt+0x20/0x30 [ 44.293149][ T4328] task_work_run+0x1ec/0x278 [ 44.293810][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 44.294570][ T4328] el0_svc+0x98/0x128 [ 44.295216][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 44.295993][ T4328] el0t_64_sync+0x18c/0x190 [ 44.665183][ T4709] loop0: detected capacity change from 0 to 4096 [ 44.670456][ T4709] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 44.687743][ T4709] ntfs3: loop0: mft corrupted [ 44.688549][ T4709] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 44.689899][ T4709] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 44.750170][ T4712] loop4: detected capacity change from 0 to 4096 [ 44.751834][ T4712] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 44.758753][ T4712] ntfs3: loop4: mft corrupted [ 44.759547][ T4712] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 44.760881][ T4712] ntfs3: loop4: Failed to load $AttrDef -> 0 [ 45.098265][ T4313] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.609257][ T4717] loop3: detected capacity change from 0 to 4096 [ 45.786363][ T4717] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 45.790442][ T4717] ntfs3: loop3: mft corrupted [ 45.791160][ T4717] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 45.792390][ T4717] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 45.886790][ T4314] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.400694][ T4730] loop0: detected capacity change from 0 to 32768 [ 46.407156][ T4730] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 46.408468][ T4730] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 46.413619][ T4730] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 46.415381][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 46.418777][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 46.429687][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 46.431104][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 46.431968][ T4730] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 46.512406][ T4730] gfs2: fsid=syz:syz.0: found 1 quota changes [ 49.142472][ T4838] loop1: detected capacity change from 0 to 4096 [ 49.145052][ T4838] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 49.198074][ T4838] ntfs3: loop1: mft corrupted [ 49.198977][ T4838] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 49.200288][ T4838] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 49.207312][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 49.207312][ T4328] inode = 11 2339 [ 49.207312][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 49.213099][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 49.218029][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 49.221717][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 49.223149][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 49.229477][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 49.230970][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 49.232188][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 49.233176][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 49.234280][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 49.235835][ T4328] Call trace: [ 49.236387][ T4328] dump_backtrace+0x1c0/0x1ec [ 49.237152][ T4328] show_stack+0x2c/0x3c [ 49.237839][ T4328] __dump_stack+0x30/0x40 [ 49.238533][ T4328] dump_stack_lvl+0xf4/0x15c [ 49.239280][ T4328] dump_stack+0x1c/0x5c [ 49.239917][ T4328] gfs2_withdraw+0xfa4/0x1390 [ 49.240652][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 49.241458][ T4328] gfs2_inode_refresh+0x918/0xd64 [ 49.242289][ T4328] inode_go_instantiate+0x4c/0x68 [ 49.243096][ T4328] gfs2_instantiate+0x178/0x2b4 [ 49.243904][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 49.244693][ T4328] gfs2_glock_nq+0x8bc/0x11c4 [ 49.245481][ T4328] do_sync+0x41c/0xaec [ 49.246121][ T4328] gfs2_quota_sync+0x2cc/0x500 [ 49.246881][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 49.247610][ T4328] sync_filesystem+0xe8/0x218 [ 49.248343][ T4328] generic_shutdown_super+0x70/0x324 [ 49.249168][ T4328] kill_block_super+0x70/0xdc [ 49.249978][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 49.250681][ T4328] deactivate_locked_super+0xac/0x120 [ 49.251563][ T4328] deactivate_super+0xe4/0x104 [ 49.252347][ T4328] cleanup_mnt+0x390/0x418 [ 49.253085][ T4328] __cleanup_mnt+0x20/0x30 [ 49.253791][ T4328] task_work_run+0x1ec/0x278 [ 49.254536][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 49.255298][ T4328] el0_svc+0x98/0x128 [ 49.255931][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 49.256706][ T4328] el0t_64_sync+0x18c/0x190 [ 49.428918][ T4850] loop3: detected capacity change from 0 to 4096 [ 49.560320][ T4850] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 49.564029][ T4850] ntfs3: loop3: mft corrupted [ 49.564790][ T4850] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 49.566287][ T4850] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 49.567967][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 49.570173][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 49.571313][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 49.572867][ T4328] Call trace: [ 49.573359][ T4328] dump_backtrace+0x1c0/0x1ec [ 49.574131][ T4328] show_stack+0x2c/0x3c [ 49.574789][ T4328] __dump_stack+0x30/0x40 [ 49.575503][ T4328] dump_stack_lvl+0xf4/0x15c [ 49.576219][ T4328] dump_stack+0x1c/0x5c [ 49.576919][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 49.577788][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 49.578668][ T4328] gfs2_put_super+0x1f0/0x760 [ 49.579401][ T4328] generic_shutdown_super+0x130/0x324 [ 49.580266][ T4328] kill_block_super+0x70/0xdc [ 49.580937][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 49.581623][ T4328] deactivate_locked_super+0xac/0x120 [ 49.582465][ T4328] deactivate_super+0xe4/0x104 [ 49.583246][ T4328] cleanup_mnt+0x390/0x418 [ 49.583973][ T4328] __cleanup_mnt+0x20/0x30 [ 49.584706][ T4328] task_work_run+0x1ec/0x278 [ 49.585491][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 49.586358][ T4328] el0_svc+0x98/0x128 [ 49.587018][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 49.587911][ T4328] el0t_64_sync+0x18c/0x190 [ 49.751843][ T4853] loop4: detected capacity change from 0 to 32768 [ 49.758088][ T4853] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 49.759349][ T4853] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.762014][ T4853] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 49.764077][ T4369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 49.766478][ T4369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 49.777924][ T4369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 49.779447][ T4369] gfs2: fsid=syz:syz.0: jid=0: Done [ 49.780558][ T4853] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 49.830303][ T4853] gfs2: fsid=syz:syz.0: found 1 quota changes [ 50.572505][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 50.572505][ T4329] inode = 11 2339 [ 50.572505][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 50.579806][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 50.581497][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 50.593800][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 50.769184][ T4913] loop2: detected capacity change from 0 to 4096 [ 50.857257][ T4913] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 50.868444][ T4913] ntfs3: loop2: mft corrupted [ 50.869315][ T4913] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 50.870556][ T4913] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 50.882177][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 50.886508][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 50.887765][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 50.888941][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 50.889830][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 50.890907][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 50.892379][ T4329] Call trace: [ 50.892900][ T4329] dump_backtrace+0x1c0/0x1ec [ 50.893650][ T4329] show_stack+0x2c/0x3c [ 50.894412][ T4329] __dump_stack+0x30/0x40 [ 50.895167][ T4329] dump_stack_lvl+0xf4/0x15c [ 50.895924][ T4329] dump_stack+0x1c/0x5c [ 50.896620][ T4329] gfs2_withdraw+0xfa4/0x1390 [ 50.897400][ T4329] gfs2_consist_inode_i+0xf0/0x10c [ 50.898228][ T4329] gfs2_inode_refresh+0x918/0xd64 [ 50.899022][ T4329] inode_go_instantiate+0x4c/0x68 [ 50.899898][ T4329] gfs2_instantiate+0x178/0x2b4 [ 50.900666][ T4329] gfs2_glock_wait+0x1b4/0x298 [ 50.901447][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 50.902174][ T4329] do_sync+0x41c/0xaec [ 50.902815][ T4329] gfs2_quota_sync+0x2cc/0x500 [ 50.903550][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 50.904232][ T4329] sync_filesystem+0xe8/0x218 [ 50.904994][ T4329] generic_shutdown_super+0x70/0x324 [ 50.905802][ T4329] kill_block_super+0x70/0xdc [ 50.906491][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 50.907245][ T4329] deactivate_locked_super+0xac/0x120 [ 50.908186][ T4329] deactivate_super+0xe4/0x104 [ 50.908902][ T4329] cleanup_mnt+0x390/0x418 [ 50.909525][ T4329] __cleanup_mnt+0x20/0x30 [ 50.910200][ T4329] task_work_run+0x1ec/0x278 [ 50.910922][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 50.911730][ T4329] el0_svc+0x98/0x128 [ 50.912389][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 50.913273][ T4329] el0t_64_sync+0x18c/0x190 [ 51.029512][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 51.031237][ T4314] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.031943][ T4329] CPU: 0 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 51.034587][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 51.036335][ T4329] Call trace: [ 51.036886][ T4329] dump_backtrace+0x1c0/0x1ec [ 51.037644][ T4329] show_stack+0x2c/0x3c [ 51.038257][ T4329] __dump_stack+0x30/0x40 [ 51.038970][ T4329] dump_stack_lvl+0xf4/0x15c [ 51.039740][ T4329] dump_stack+0x1c/0x5c [ 51.040456][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 51.041312][ T4329] gfs2_quota_cleanup+0x464/0x668 [ 51.042156][ T4329] gfs2_put_super+0x1f0/0x760 [ 51.042920][ T4329] generic_shutdown_super+0x130/0x324 [ 51.043742][ T4329] kill_block_super+0x70/0xdc [ 51.044438][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 51.045050][ T4329] deactivate_locked_super+0xac/0x120 [ 51.045845][ T4329] deactivate_super+0xe4/0x104 [ 51.046527][ T4329] cleanup_mnt+0x390/0x418 [ 51.047175][ T4329] __cleanup_mnt+0x20/0x30 [ 51.047873][ T4329] task_work_run+0x1ec/0x278 [ 51.048652][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 51.049543][ T4329] el0_svc+0x98/0x128 [ 51.050232][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 51.051089][ T4329] el0t_64_sync+0x18c/0x190 [ 51.282149][ T4924] loop3: detected capacity change from 0 to 4096 [ 51.356464][ T4924] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 51.396459][ T4924] ntfs3: loop3: mft corrupted [ 51.397257][ T4924] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 51.398549][ T4924] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 51.770886][ T4931] loop2: detected capacity change from 0 to 4096 [ 51.834316][ T4931] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 51.839077][ T4931] ntfs3: loop2: mft corrupted [ 51.839847][ T4931] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 51.841095][ T4931] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 54.265513][ T4546] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 54.453554][ T4989] loop3: detected capacity change from 0 to 4096 [ 54.584600][ T4989] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 54.846990][ T4989] ntfs3: loop3: mft corrupted [ 54.847733][ T4989] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 54.849546][ T4989] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 55.040807][ T4409] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 55.519824][ T5003] loop3: detected capacity change from 0 to 4096 [ 55.732520][ T5003] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 55.762768][ T5003] ntfs3: loop3: mft corrupted [ 55.763624][ T5003] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 55.765568][ T5003] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 56.006906][ T5007] loop2: detected capacity change from 0 to 4096 [ 56.199408][ T5007] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 56.636560][ T4546] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 56.696053][ T4546] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 56.794461][ T5007] ntfs3: loop2: mft corrupted [ 56.795509][ T5007] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 56.799796][ T5007] ntfs3: loop2: Failed to load $AttrDef -> 0 [ 57.434282][ T4811] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 57.525082][ T4811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.526469][ T4811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.805142][ T5023] loop3: detected capacity change from 0 to 4096 [ 57.812784][ T5023] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 57.893879][ T5023] ntfs3: loop3: mft corrupted [ 57.897812][ T5023] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 57.899058][ T5023] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 58.349080][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 58.465383][ T4392] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 61.132098][ T278] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 61.265524][ T4809] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 61.712973][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 62.193824][ T4409] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 62.455050][ T278] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 62.574582][ T5099] loop4: detected capacity change from 0 to 32768 [ 62.588520][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.589884][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.597676][ T5099] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.598973][ T5099] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.601633][ T5099] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 62.603376][ T4368] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.604456][ T4368] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 62.613893][ T4368] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 9ms [ 62.617295][ T4368] gfs2: fsid=syz:syz.0: jid=0: Done [ 62.619306][ T5099] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 62.703908][ T5099] gfs2: fsid=syz:syz.0: found 1 quota changes [ 63.336547][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 63.336547][ T4329] inode = 11 2339 [ 63.336547][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 63.340075][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 63.341574][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 63.344300][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 63.352091][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 63.372745][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 63.376225][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 63.381908][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 63.384474][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 63.385736][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 63.387347][ T4329] Call trace: [ 63.387839][ T4329] dump_backtrace+0x1c0/0x1ec [ 63.388627][ T4329] show_stack+0x2c/0x3c [ 63.389341][ T4329] __dump_stack+0x30/0x40 [ 63.390080][ T4329] dump_stack_lvl+0xf4/0x15c [ 63.390826][ T4329] dump_stack+0x1c/0x5c [ 63.391539][ T4329] gfs2_withdraw+0xfa4/0x1390 [ 63.392320][ T4329] gfs2_consist_inode_i+0xf0/0x10c [ 63.393115][ T4329] gfs2_inode_refresh+0x918/0xd64 [ 63.393960][ T4329] inode_go_instantiate+0x4c/0x68 [ 63.394726][ T4329] gfs2_instantiate+0x178/0x2b4 [ 63.395468][ T4329] gfs2_glock_wait+0x1b4/0x298 [ 63.396192][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 63.396911][ T4329] do_sync+0x41c/0xaec [ 63.397591][ T4329] gfs2_quota_sync+0x2cc/0x500 [ 63.398410][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 63.399158][ T4329] sync_filesystem+0xe8/0x218 [ 63.399934][ T4329] generic_shutdown_super+0x70/0x324 [ 63.400815][ T4329] kill_block_super+0x70/0xdc [ 63.401565][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 63.402249][ T4329] deactivate_locked_super+0xac/0x120 [ 63.403119][ T4329] deactivate_super+0xe4/0x104 [ 63.403906][ T4329] cleanup_mnt+0x390/0x418 [ 63.404623][ T4329] __cleanup_mnt+0x20/0x30 [ 63.405388][ T4329] task_work_run+0x1ec/0x278 [ 63.406117][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 63.406944][ T4329] el0_svc+0x98/0x128 [ 63.407578][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 63.408426][ T4329] el0t_64_sync+0x18c/0x190 [ 63.444796][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 63.447097][ T4329] CPU: 0 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 63.448229][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 63.449858][ T4329] Call trace: [ 63.450378][ T4329] dump_backtrace+0x1c0/0x1ec [ 63.451114][ T4329] show_stack+0x2c/0x3c [ 63.451797][ T4329] __dump_stack+0x30/0x40 [ 63.452421][ T4329] dump_stack_lvl+0xf4/0x15c [ 63.453146][ T4329] dump_stack+0x1c/0x5c [ 63.453836][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 63.454591][ T4329] gfs2_quota_cleanup+0x464/0x668 [ 63.455376][ T4329] gfs2_put_super+0x1f0/0x760 [ 63.456165][ T4329] generic_shutdown_super+0x130/0x324 [ 63.457046][ T4329] kill_block_super+0x70/0xdc [ 63.457853][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 63.458591][ T4329] deactivate_locked_super+0xac/0x120 [ 63.459475][ T4329] deactivate_super+0xe4/0x104 [ 63.460249][ T4329] cleanup_mnt+0x390/0x418 [ 63.460970][ T4329] __cleanup_mnt+0x20/0x30 [ 63.461664][ T4329] task_work_run+0x1ec/0x278 [ 63.462389][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 63.463187][ T4329] el0_svc+0x98/0x128 [ 63.463819][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 63.464589][ T4329] el0t_64_sync+0x18c/0x190 [ 63.825138][ T5125] loop3: detected capacity change from 0 to 4096 [ 63.846736][ T5125] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 63.850775][ T5125] ntfs3: loop3: mft corrupted [ 63.851503][ T5125] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 63.852952][ T5125] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 64.365461][ T4817] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 64.476136][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.477865][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.490852][ T4615] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 65.683799][ T5160] loop2: detected capacity change from 0 to 16 [ 65.685375][ T5160] ======================================================= [ 65.685375][ T5160] WARNING: The mand mount option has been deprecated and [ 65.685375][ T5160] and is ignored by this kernel. Remove the mand [ 65.685375][ T5160] option from the mount to silence this warning. [ 65.685375][ T5160] ======================================================= [ 65.718989][ T5160] erofs: (device loop2): mounted with root inode @ nid 36. [ 66.686630][ T4556] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 66.918767][ T5175] loop1: detected capacity change from 0 to 16 [ 66.927143][ T5175] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.030067][ T5179] loop0: detected capacity change from 0 to 32768 [ 67.084817][ T5179] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 67.086272][ T5179] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 67.102934][ T5179] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 67.115289][ T4505] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 67.335960][ T4461] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 67.337272][ T4461] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 67.345803][ T4461] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 8ms [ 67.347117][ T4461] gfs2: fsid=syz:syz.0: jid=0: Done [ 67.347993][ T5179] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 67.414472][ T5185] loop3: detected capacity change from 0 to 4096 [ 67.428409][ T5185] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 68.053460][ T4817] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 68.233309][ T5196] loop1: detected capacity change from 0 to 16 [ 68.235503][ T5196] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.244335][ T5179] gfs2: fsid=syz:syz.0: found 1 quota changes [ 68.847791][ T5185] ntfs3: loop3: mft corrupted [ 68.849322][ T5185] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 68.860665][ T5185] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 68.886694][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 68.886694][ T4328] inode = 11 2339 [ 68.886694][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 68.890087][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 68.890125][ T4817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.894002][ T4817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.955520][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 68.963370][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 68.973469][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 69.173801][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 69.175275][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 69.176897][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 69.223846][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 69.225167][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 69.226787][ T4328] Call trace: [ 69.227308][ T4328] dump_backtrace+0x1c0/0x1ec [ 69.228072][ T4328] show_stack+0x2c/0x3c [ 69.228699][ T4328] __dump_stack+0x30/0x40 [ 69.229344][ T4328] dump_stack_lvl+0xf4/0x15c [ 69.230005][ T4328] dump_stack+0x1c/0x5c [ 69.230635][ T4328] gfs2_withdraw+0xfa4/0x1390 [ 69.231317][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 69.232195][ T4328] gfs2_inode_refresh+0x918/0xd64 [ 69.232981][ T4328] inode_go_instantiate+0x4c/0x68 [ 69.233735][ T4328] gfs2_instantiate+0x178/0x2b4 [ 69.234460][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 69.235239][ T4328] gfs2_glock_nq+0x8bc/0x11c4 [ 69.236006][ T4328] do_sync+0x41c/0xaec [ 69.236744][ T4328] gfs2_quota_sync+0x2cc/0x500 [ 69.237559][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 69.238266][ T4328] sync_filesystem+0xe8/0x218 [ 69.239010][ T4328] generic_shutdown_super+0x70/0x324 [ 69.239821][ T4328] kill_block_super+0x70/0xdc [ 69.240535][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 69.241228][ T4328] deactivate_locked_super+0xac/0x120 [ 69.242057][ T4328] deactivate_super+0xe4/0x104 [ 69.242841][ T4328] cleanup_mnt+0x390/0x418 [ 69.243636][ T4328] __cleanup_mnt+0x20/0x30 [ 69.244416][ T4328] task_work_run+0x1ec/0x278 [ 69.245192][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 69.246024][ T4328] el0_svc+0x98/0x128 [ 69.246677][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 69.247458][ T4328] el0t_64_sync+0x18c/0x190 [ 69.755930][ T113] cfg80211: failed to load regulatory.db [ 69.765630][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 69.768039][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 69.769124][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 69.770866][ T4328] Call trace: [ 69.771444][ T4328] dump_backtrace+0x1c0/0x1ec [ 69.772289][ T4328] show_stack+0x2c/0x3c [ 69.772953][ T4328] __dump_stack+0x30/0x40 [ 69.773648][ T4328] dump_stack_lvl+0xf4/0x15c [ 69.774421][ T4328] dump_stack+0x1c/0x5c [ 69.775089][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 69.775945][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 69.776815][ T4328] gfs2_put_super+0x1f0/0x760 [ 69.777573][ T4328] generic_shutdown_super+0x130/0x324 [ 69.778490][ T4328] kill_block_super+0x70/0xdc [ 69.779218][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 69.779938][ T4328] deactivate_locked_super+0xac/0x120 [ 69.780801][ T4328] deactivate_super+0xe4/0x104 [ 69.781557][ T4328] cleanup_mnt+0x390/0x418 [ 69.782291][ T4328] __cleanup_mnt+0x20/0x30 [ 69.783062][ T4328] task_work_run+0x1ec/0x278 [ 69.783871][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 69.784782][ T4328] el0_svc+0x98/0x128 [ 69.785499][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 69.786304][ T4328] el0t_64_sync+0x18c/0x190 [ 70.960350][ T4556] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 71.249827][ T5242] loop4: detected capacity change from 0 to 16 [ 71.251586][ T5245] loop2: detected capacity change from 0 to 16 [ 71.261217][ T5242] erofs: (device loop4): mounted with root inode @ nid 36. [ 71.275339][ T5245] erofs: (device loop2): mounted with root inode @ nid 36. [ 71.881767][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 72.436446][ T4553] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 72.537320][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 72.571086][ T5266] loop3: detected capacity change from 0 to 16 [ 72.895277][ T5266] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.525615][ T11] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 73.774977][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 73.835906][ T5284] loop3: detected capacity change from 0 to 16 [ 73.838389][ T5284] erofs: (device loop3): mounted with root inode @ nid 36. [ 73.934123][ T4615] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 74.229960][ T4615] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 75.605935][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 75.695002][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.696427][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.016445][ T5313] loop2: detected capacity change from 0 to 16 [ 76.022571][ T5313] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.132613][ T5315] loop1: detected capacity change from 0 to 32768 [ 76.164051][ T5315] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 76.165458][ T5315] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 76.168091][ T5315] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 76.169784][ T4752] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.170796][ T4752] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.728203][ T4752] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 557ms [ 76.730732][ T4752] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.731997][ T5315] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.925449][ T5315] gfs2: fsid=syz:syz.0: found 1 quota changes [ 77.305682][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 77.770353][ T4322] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 77.770353][ T4322] inode = 11 2339 [ 77.770353][ T4322] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 77.773583][ T4322] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 77.776544][ T4322] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4322 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 77.804649][ T4322] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 77.806041][ T4322] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 77.827291][ T4322] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.829293][ T4322] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.831036][ T4322] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.832011][ T4322] CPU: 0 PID: 4322 Comm: syz-executor Not tainted syzkaller #0 [ 77.833235][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 77.834821][ T4322] Call trace: [ 77.835380][ T4322] dump_backtrace+0x1c0/0x1ec [ 77.836174][ T4322] show_stack+0x2c/0x3c [ 77.836887][ T4322] __dump_stack+0x30/0x40 [ 77.837623][ T4322] dump_stack_lvl+0xf4/0x15c [ 77.838418][ T4322] dump_stack+0x1c/0x5c [ 77.839135][ T4322] gfs2_withdraw+0xfa4/0x1390 [ 77.839926][ T4322] gfs2_consist_inode_i+0xf0/0x10c [ 77.840780][ T4322] gfs2_inode_refresh+0x918/0xd64 [ 77.841574][ T4322] inode_go_instantiate+0x4c/0x68 [ 77.842442][ T4322] gfs2_instantiate+0x178/0x2b4 [ 77.843185][ T4322] gfs2_glock_wait+0x1b4/0x298 [ 77.843929][ T4322] gfs2_glock_nq+0x8bc/0x11c4 [ 77.844637][ T4322] do_sync+0x41c/0xaec [ 77.845349][ T4322] gfs2_quota_sync+0x2cc/0x500 [ 77.846203][ T4322] gfs2_sync_fs+0x4c/0xc4 [ 77.846958][ T4322] sync_filesystem+0xe8/0x218 [ 77.847715][ T4322] generic_shutdown_super+0x70/0x324 [ 77.848562][ T4322] kill_block_super+0x70/0xdc [ 77.849293][ T4322] gfs2_kill_sb+0xc0/0xd4 [ 77.850009][ T4322] deactivate_locked_super+0xac/0x120 [ 77.850862][ T4322] deactivate_super+0xe4/0x104 [ 77.851550][ T4322] cleanup_mnt+0x390/0x418 [ 77.852197][ T4322] __cleanup_mnt+0x20/0x30 [ 77.852840][ T4322] task_work_run+0x1ec/0x278 [ 77.853612][ T4322] do_notify_resume+0x1fa0/0x2aa4 [ 77.854504][ T4322] el0_svc+0x98/0x128 [ 77.855177][ T4322] el0t_64_sync_handler+0x84/0xf0 [ 77.856023][ T4322] el0t_64_sync+0x18c/0x190 [ 79.840237][ T4322] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 79.842644][ T4322] CPU: 1 PID: 4322 Comm: syz-executor Not tainted syzkaller #0 [ 79.843833][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 79.845515][ T4322] Call trace: [ 79.846091][ T4322] dump_backtrace+0x1c0/0x1ec [ 79.846853][ T4322] show_stack+0x2c/0x3c [ 79.847529][ T4322] __dump_stack+0x30/0x40 [ 79.848277][ T4322] dump_stack_lvl+0xf4/0x15c [ 79.849055][ T4322] dump_stack+0x1c/0x5c [ 79.849766][ T4322] gfs2_assert_warn_i+0x16c/0x26c [ 79.850560][ T4322] gfs2_quota_cleanup+0x464/0x668 [ 79.851453][ T4322] gfs2_put_super+0x1f0/0x760 [ 79.852260][ T4322] generic_shutdown_super+0x130/0x324 [ 79.853162][ T4322] kill_block_super+0x70/0xdc [ 79.853912][ T4322] gfs2_kill_sb+0xc0/0xd4 [ 79.854675][ T4322] deactivate_locked_super+0xac/0x120 [ 79.855592][ T4322] deactivate_super+0xe4/0x104 [ 79.856393][ T4322] cleanup_mnt+0x390/0x418 [ 79.857092][ T4322] __cleanup_mnt+0x20/0x30 [ 79.857844][ T4322] task_work_run+0x1ec/0x278 [ 79.858626][ T4322] do_notify_resume+0x1fa0/0x2aa4 [ 79.859446][ T4322] el0_svc+0x98/0x128 [ 79.860144][ T4322] el0t_64_sync_handler+0x84/0xf0 [ 79.861051][ T4322] el0t_64_sync+0x18c/0x190 [ 79.886335][ T278] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.402933][ T55] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 81.435187][ T4565] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 81.449774][ T4505] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.451350][ T4505] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.913746][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.920925][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 81.945928][ T4409] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 81.966158][ T4809] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 83.588328][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 83.594582][ T55] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 83.596264][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.597525][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.786129][ T4565] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 84.187878][ T4811] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 84.345150][ T4811] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 84.496253][ T5397] loop0: detected capacity change from 0 to 16 [ 84.503300][ T5397] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.579178][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 86.580736][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 86.635598][ T278] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 86.647262][ T4546] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 89.137977][ T4565] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 89.140247][ T4546] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 89.140288][ T4802] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 89.153509][ T5431] loop0: detected capacity change from 0 to 16 [ 89.158113][ T278] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 89.163196][ T5431] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.268265][ T5437] loop2: detected capacity change from 0 to 16 [ 89.275857][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.277290][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.295215][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.295265][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.298001][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.179982][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 91.182063][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 91.182614][ T5437] erofs: (device loop2): mounted with root inode @ nid 36. [ 91.196103][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.221538][ T4546] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 92.725703][ T4811] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 92.736903][ T278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.738226][ T4802] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 92.739663][ T278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.775332][ T4811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.776944][ T4811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.812248][ T5468] loop1: detected capacity change from 0 to 16 [ 92.816609][ T5468] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.858020][ T5471] loop3: detected capacity change from 0 to 16 [ 92.943337][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 93.182906][ T5471] erofs: (device loop3): mounted with root inode @ nid 36. [ 93.211770][ T5477] loop0: detected capacity change from 0 to 16 [ 93.220359][ T5477] erofs: (device loop0): mounted with root inode @ nid 36. [ 93.242516][ T1613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.243800][ T1613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.788844][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 94.190595][ T5488] loop0: detected capacity change from 0 to 16 [ 94.212366][ T5490] loop2: detected capacity change from 0 to 16 [ 94.214211][ T5488] erofs: (device loop0): mounted with root inode @ nid 36. [ 94.239335][ T4392] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 94.242694][ T5490] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.224770][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 96.246746][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 96.267002][ T5501] loop3: detected capacity change from 0 to 16 [ 96.284709][ T5501] erofs: (device loop3): mounted with root inode @ nid 36. [ 96.326566][ T4639] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 96.328318][ T55] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 98.381227][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 98.381302][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 98.409092][ T5517] loop1: detected capacity change from 0 to 16 [ 98.420463][ T5517] erofs: (device loop1): mounted with root inode @ nid 36. [ 98.423766][ T5519] loop0: detected capacity change from 0 to 16 [ 98.429666][ T5519] erofs: (device loop0): mounted with root inode @ nid 36. [ 98.441086][ T5525] loop3: detected capacity change from 0 to 16 [ 98.442864][ T5525] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.534957][ T4546] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 99.711729][ T4505] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 99.730880][ T55] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 100.308801][ T4546] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 100.313571][ T4538] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 100.319971][ T5545] loop3: detected capacity change from 0 to 16 [ 100.332436][ T5545] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.335733][ T5547] loop1: detected capacity change from 0 to 16 [ 100.861912][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 101.015191][ T5547] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.065324][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.066045][ T4809] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 101.067635][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.200879][ T4613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 103.441855][ T4409] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 103.442710][ T4505] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 103.499308][ T5591] loop2: detected capacity change from 0 to 16 [ 103.525266][ T5591] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.544475][ T4565] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 103.551946][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 103.585574][ T5589] loop4: detected capacity change from 0 to 32768 [ 103.588232][ T5589] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.589512][ T5589] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.592303][ T5589] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 103.594089][ T1515] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.595289][ T1515] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 103.604351][ T1515] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 9ms [ 103.605750][ T1515] gfs2: fsid=syz:syz.0: jid=0: Done [ 103.606648][ T5589] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.610990][ T5595] loop3: detected capacity change from 0 to 16 [ 103.627565][ T4613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.628831][ T4613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.630946][ T5599] loop1: detected capacity change from 0 to 16 [ 103.633018][ T5599] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.634455][ T5598] loop0: detected capacity change from 0 to 16 [ 103.636901][ T5595] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.638101][ T5598] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.167551][ T5589] gfs2: fsid=syz:syz.0: found 1 quota changes [ 104.709711][ T4538] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 104.922883][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 104.922883][ T4329] inode = 11 2339 [ 104.922883][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 104.934664][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 104.938375][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 104.942167][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 104.944133][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 104.960594][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 104.966323][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.968675][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.982811][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 104.988217][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 104.991383][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 104.992473][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 104.994063][ T4329] Call trace: [ 104.994594][ T4329] dump_backtrace+0x1c0/0x1ec [ 104.995394][ T4329] show_stack+0x2c/0x3c [ 104.996112][ T4329] __dump_stack+0x30/0x40 [ 104.996848][ T4329] dump_stack_lvl+0xf4/0x15c [ 104.997552][ T4329] dump_stack+0x1c/0x5c [ 104.998243][ T4329] gfs2_withdraw+0xfa4/0x1390 [ 104.998946][ T4329] gfs2_consist_inode_i+0xf0/0x10c [ 104.999727][ T4329] gfs2_inode_refresh+0x918/0xd64 [ 105.000530][ T4329] inode_go_instantiate+0x4c/0x68 [ 105.001307][ T4329] gfs2_instantiate+0x178/0x2b4 [ 105.002013][ T4329] gfs2_glock_wait+0x1b4/0x298 [ 105.002810][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 105.003556][ T4329] do_sync+0x41c/0xaec [ 105.004278][ T4329] gfs2_quota_sync+0x2cc/0x500 [ 105.005078][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 105.005791][ T4329] sync_filesystem+0xe8/0x218 [ 105.006571][ T4329] generic_shutdown_super+0x70/0x324 [ 105.007453][ T4329] kill_block_super+0x70/0xdc [ 105.008226][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 105.008957][ T4329] deactivate_locked_super+0xac/0x120 [ 105.009860][ T4329] deactivate_super+0xe4/0x104 [ 105.010664][ T4329] cleanup_mnt+0x390/0x418 [ 105.011422][ T4329] __cleanup_mnt+0x20/0x30 [ 105.012176][ T4329] task_work_run+0x1ec/0x278 [ 105.012913][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 105.013729][ T4329] el0_svc+0x98/0x128 [ 105.014422][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 105.015294][ T4329] el0t_64_sync+0x18c/0x190 [ 105.058351][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 105.062821][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 105.064064][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 105.065709][ T4329] Call trace: [ 105.066269][ T4329] dump_backtrace+0x1c0/0x1ec [ 105.067027][ T4329] show_stack+0x2c/0x3c [ 105.067652][ T4329] __dump_stack+0x30/0x40 [ 105.068328][ T4329] dump_stack_lvl+0xf4/0x15c [ 105.069059][ T4329] dump_stack+0x1c/0x5c [ 105.069679][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 105.070479][ T4329] gfs2_quota_cleanup+0x464/0x668 [ 105.071239][ T4329] gfs2_put_super+0x1f0/0x760 [ 105.071906][ T4329] generic_shutdown_super+0x130/0x324 [ 105.072757][ T4329] kill_block_super+0x70/0xdc [ 105.073561][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 105.074289][ T4329] deactivate_locked_super+0xac/0x120 [ 105.075186][ T4329] deactivate_super+0xe4/0x104 [ 105.076004][ T4329] cleanup_mnt+0x390/0x418 [ 105.076743][ T4329] __cleanup_mnt+0x20/0x30 [ 105.077457][ T4329] task_work_run+0x1ec/0x278 [ 105.078244][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 105.079095][ T4329] el0_svc+0x98/0x128 [ 105.079772][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 105.080596][ T4329] el0t_64_sync+0x18c/0x190 [ 105.092903][ T5624] loop2: detected capacity change from 0 to 32768 [ 105.095248][ T5624] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 105.096477][ T5624] CPU: 0 PID: 5624 Comm: syz.2.243 Not tainted syzkaller #0 [ 105.097612][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 105.099191][ T5624] Call trace: [ 105.099717][ T5624] dump_backtrace+0x1c0/0x1ec [ 105.100446][ T5624] show_stack+0x2c/0x3c [ 105.101106][ T5624] __dump_stack+0x30/0x40 [ 105.101827][ T5624] dump_stack_lvl+0xf4/0x15c [ 105.102547][ T5624] dump_stack+0x1c/0x5c [ 105.103213][ T5624] sysfs_create_dir_ns+0x244/0x264 [ 105.104007][ T5624] kobject_add_internal+0x598/0xb08 [ 105.104772][ T5624] kobject_init_and_add+0x124/0x190 [ 105.105578][ T5624] gfs2_sys_fs_add+0x200/0x41c [ 105.106293][ T5624] gfs2_fill_super+0xdec/0x194c [ 105.107047][ T5624] get_tree_bdev+0x358/0x544 [ 105.107798][ T5624] gfs2_get_tree+0x54/0x1b4 [ 105.108539][ T5624] vfs_get_tree+0x90/0x274 [ 105.109215][ T5624] do_new_mount+0x228/0x810 [ 105.109920][ T5624] path_mount+0x5bc/0xe80 [ 105.110633][ T5624] __arm64_sys_mount+0x49c/0x59c [ 105.111410][ T5624] invoke_syscall+0x98/0x2b4 [ 105.112108][ T5624] el0_svc_common+0x138/0x258 [ 105.112903][ T5624] do_el0_svc+0x58/0x130 [ 105.113606][ T5624] el0_svc+0x58/0x128 [ 105.114272][ T5624] el0t_64_sync_handler+0x84/0xf0 [ 105.115111][ T5624] el0t_64_sync+0x18c/0x190 [ 105.115959][ T5624] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 105.117953][ T5624] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 105.230924][ T4524] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 105.499609][ T5198] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.535663][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.537223][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.963490][ T5640] loop0: detected capacity change from 0 to 16 [ 106.000165][ T5640] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.003438][ T5642] loop2: detected capacity change from 0 to 16 [ 106.017002][ T5642] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.757517][ T5653] loop1: detected capacity change from 0 to 4096 [ 106.765824][ T5653] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 106.773085][ T5653] ntfs3: loop1: mft corrupted [ 106.773945][ T5653] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 106.778108][ T5653] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 106.959822][ T4809] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 107.195150][ T4809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.196797][ T4809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.295361][ T5659] loop0: detected capacity change from 0 to 32768 [ 107.298169][ T5659] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.299401][ T5659] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.301938][ T5659] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 107.303594][ T4752] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.304828][ T4752] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.314751][ T4752] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 9ms [ 107.315962][ T4752] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.316834][ T5659] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.382483][ T5663] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 107.383658][ T5663] CPU: 0 PID: 5663 Comm: syz.2.252 Not tainted syzkaller #0 [ 107.384856][ T5663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 107.386499][ T5663] Call trace: [ 107.387032][ T5663] dump_backtrace+0x1c0/0x1ec [ 107.387818][ T5663] show_stack+0x2c/0x3c [ 107.388545][ T5663] __dump_stack+0x30/0x40 [ 107.389270][ T5663] dump_stack_lvl+0xf4/0x15c [ 107.389971][ T5663] dump_stack+0x1c/0x5c [ 107.390647][ T5663] sysfs_create_dir_ns+0x244/0x264 [ 107.391489][ T5663] kobject_add_internal+0x598/0xb08 [ 107.392315][ T5663] kobject_init_and_add+0x124/0x190 [ 107.393203][ T5663] gfs2_sys_fs_add+0x200/0x41c [ 107.394034][ T5663] gfs2_fill_super+0xdec/0x194c [ 107.394894][ T5663] get_tree_bdev+0x358/0x544 [ 107.395616][ T5663] gfs2_get_tree+0x54/0x1b4 [ 107.396312][ T5663] vfs_get_tree+0x90/0x274 [ 107.397057][ T5663] do_new_mount+0x228/0x810 [ 107.397781][ T5663] path_mount+0x5bc/0xe80 [ 107.398468][ T5663] __arm64_sys_mount+0x49c/0x59c [ 107.399226][ T5663] invoke_syscall+0x98/0x2b4 [ 107.399937][ T5663] el0_svc_common+0x138/0x258 [ 107.400662][ T5663] do_el0_svc+0x58/0x130 [ 107.401340][ T5663] el0_svc+0x58/0x128 [ 107.401985][ T5663] el0t_64_sync_handler+0x84/0xf0 [ 107.402780][ T5663] el0t_64_sync+0x18c/0x190 [ 107.403673][ T5663] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 107.405945][ T5663] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 107.461870][ T5659] gfs2: fsid=syz:syz.0: found 1 quota changes [ 107.482969][ T5665] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 107.482969][ T5665] inode = 11 2339 [ 107.482969][ T5665] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 107.489660][ T5665] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 107.492054][ T5665] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5665 [gfs2_quotad] gfs2_quota_sync+0x2cc/0x500 [ 107.505598][ T5665] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0 [ 107.508154][ T5665] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 107.672625][ T5665] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 107.679541][ T5665] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 107.683655][ T5665] gfs2: fsid=syz:syz.0: File system withdrawn [ 107.695861][ T5665] CPU: 1 PID: 5665 Comm: gfs2_quotad Not tainted syzkaller #0 [ 107.696989][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 107.698473][ T5665] Call trace: [ 107.698950][ T5665] dump_backtrace+0x1c0/0x1ec [ 107.699816][ T5665] show_stack+0x2c/0x3c [ 107.700534][ T5665] __dump_stack+0x30/0x40 [ 107.701264][ T5665] dump_stack_lvl+0xf4/0x15c [ 107.702063][ T5665] dump_stack+0x1c/0x5c [ 107.702789][ T5665] gfs2_withdraw+0xfa4/0x1390 [ 107.703608][ T5665] gfs2_consist_inode_i+0xf0/0x10c [ 107.704486][ T5665] gfs2_inode_refresh+0x918/0xd64 [ 107.705310][ T5665] inode_go_instantiate+0x4c/0x68 [ 107.706129][ T5665] gfs2_instantiate+0x178/0x2b4 [ 107.706926][ T5665] gfs2_glock_wait+0x1b4/0x298 [ 107.707730][ T5665] gfs2_glock_nq+0x8bc/0x11c4 [ 107.708574][ T5665] do_sync+0x41c/0xaec [ 107.709251][ T5665] gfs2_quota_sync+0x2cc/0x500 [ 107.710106][ T5665] gfs2_quotad+0x2d8/0x500 [ 107.710788][ T5665] kthread+0x250/0x2d8 [ 107.711375][ T5665] ret_from_fork+0x10/0x20 [ 107.827335][ T5680] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.246573][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 108.249162][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 108.250406][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 108.252101][ T4328] Call trace: [ 108.252664][ T4328] dump_backtrace+0x1c0/0x1ec [ 108.253430][ T4328] show_stack+0x2c/0x3c [ 108.254110][ T4328] __dump_stack+0x30/0x40 [ 108.254875][ T4328] dump_stack_lvl+0xf4/0x15c [ 108.255665][ T4328] dump_stack+0x1c/0x5c [ 108.256410][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 108.257225][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 108.258052][ T4328] gfs2_put_super+0x1f0/0x760 [ 108.258849][ T4328] generic_shutdown_super+0x130/0x324 [ 108.259765][ T4328] kill_block_super+0x70/0xdc [ 108.260522][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 108.261217][ T4328] deactivate_locked_super+0xac/0x120 [ 108.262055][ T4328] deactivate_super+0xe4/0x104 [ 108.262766][ T4328] cleanup_mnt+0x390/0x418 [ 108.263401][ T4328] __cleanup_mnt+0x20/0x30 [ 108.264089][ T4328] task_work_run+0x1ec/0x278 [ 108.264788][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 108.265544][ T4328] el0_svc+0x98/0x128 [ 108.266146][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 108.266868][ T4328] el0t_64_sync+0x18c/0x190 [ 108.346620][ T5692] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.615981][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 110.618529][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 110.647152][ T5708] set_capacity_and_notify: 3 callbacks suppressed [ 110.647162][ T5708] loop3: detected capacity change from 0 to 4096 [ 110.660007][ T5708] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 110.669942][ T5714] loop0: detected capacity change from 0 to 16 [ 110.673725][ T5714] erofs: (device loop0): mounted with root inode @ nid 36. [ 110.675549][ T5708] ntfs3: loop3: mft corrupted [ 110.676296][ T5708] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 110.702138][ T5708] ntfs3: loop3: Failed to load $AttrDef -> 0 [ 110.794856][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.796174][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.798749][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.799947][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.902482][ T5717] loop4: detected capacity change from 0 to 32768 [ 110.975111][ T5717] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.976379][ T5717] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.980758][ T5717] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 110.983045][ T4368] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 110.984242][ T4368] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.102851][ T4368] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 111.107217][ T4368] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.109553][ T5717] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 111.198358][ T5717] gfs2: fsid=syz:syz.0: found 1 quota changes [ 111.491189][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.494684][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.858948][ T4329] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 111.858948][ T4329] inode = 11 2339 [ 111.858948][ T4329] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 111.867426][ T4329] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 111.870045][ T4329] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4329 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 111.879671][ T4329] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 111.884614][ T4329] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 111.889406][ T4329] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 111.890746][ T4329] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 111.891775][ T4329] gfs2: fsid=syz:syz.0: File system withdrawn [ 111.894117][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 111.895211][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 111.896653][ T4329] Call trace: [ 111.897184][ T4329] dump_backtrace+0x1c0/0x1ec [ 111.897862][ T4329] show_stack+0x2c/0x3c [ 111.898478][ T4329] __dump_stack+0x30/0x40 [ 111.899199][ T4329] dump_stack_lvl+0xf4/0x15c [ 111.899999][ T4329] dump_stack+0x1c/0x5c [ 111.900675][ T4329] gfs2_withdraw+0xfa4/0x1390 [ 111.901441][ T4329] gfs2_consist_inode_i+0xf0/0x10c [ 111.902271][ T4329] gfs2_inode_refresh+0x918/0xd64 [ 111.903099][ T4329] inode_go_instantiate+0x4c/0x68 [ 111.903933][ T4329] gfs2_instantiate+0x178/0x2b4 [ 111.904747][ T4329] gfs2_glock_wait+0x1b4/0x298 [ 111.905490][ T4329] gfs2_glock_nq+0x8bc/0x11c4 [ 111.906250][ T4329] do_sync+0x41c/0xaec [ 111.906934][ T4329] gfs2_quota_sync+0x2cc/0x500 [ 111.907744][ T4329] gfs2_sync_fs+0x4c/0xc4 [ 111.908476][ T4329] sync_filesystem+0xe8/0x218 [ 111.909298][ T4329] generic_shutdown_super+0x70/0x324 [ 111.910165][ T4329] kill_block_super+0x70/0xdc [ 111.910966][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 111.911682][ T4329] deactivate_locked_super+0xac/0x120 [ 111.912603][ T4329] deactivate_super+0xe4/0x104 [ 111.913414][ T4329] cleanup_mnt+0x390/0x418 [ 111.914162][ T4329] __cleanup_mnt+0x20/0x30 [ 111.914907][ T4329] task_work_run+0x1ec/0x278 [ 111.915646][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 111.916440][ T4329] el0_svc+0x98/0x128 [ 111.917091][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 111.917977][ T4329] el0t_64_sync+0x18c/0x190 [ 111.924633][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 111.928404][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0 [ 111.929535][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 111.931092][ T4329] Call trace: [ 111.931660][ T4329] dump_backtrace+0x1c0/0x1ec [ 111.932451][ T4329] show_stack+0x2c/0x3c [ 111.933118][ T4329] __dump_stack+0x30/0x40 [ 111.933803][ T4329] dump_stack_lvl+0xf4/0x15c [ 111.934587][ T4329] dump_stack+0x1c/0x5c [ 111.935315][ T4329] gfs2_assert_warn_i+0x16c/0x26c [ 111.936092][ T4329] gfs2_quota_cleanup+0x464/0x668 [ 111.936905][ T4329] gfs2_put_super+0x1f0/0x760 [ 111.937707][ T4329] generic_shutdown_super+0x130/0x324 [ 111.938586][ T4329] kill_block_super+0x70/0xdc [ 111.939330][ T4329] gfs2_kill_sb+0xc0/0xd4 [ 111.940012][ T4329] deactivate_locked_super+0xac/0x120 [ 111.940893][ T4329] deactivate_super+0xe4/0x104 [ 111.941617][ T4329] cleanup_mnt+0x390/0x418 [ 111.942296][ T4329] __cleanup_mnt+0x20/0x30 [ 111.942961][ T4329] task_work_run+0x1ec/0x278 [ 111.943664][ T4329] do_notify_resume+0x1fa0/0x2aa4 [ 111.944457][ T4329] el0_svc+0x98/0x128 [ 111.945133][ T4329] el0t_64_sync_handler+0x84/0xf0 [ 111.946027][ T4329] el0t_64_sync+0x18c/0x190 [ 112.134207][ T5726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.400391][ T278] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 112.846440][ T4606] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 112.852570][ T5750] loop2: detected capacity change from 0 to 16 [ 112.862189][ T5750] erofs: (device loop2): mounted with root inode @ nid 36. [ 113.657957][ T5761] loop1: detected capacity change from 0 to 4096 [ 113.662733][ T5761] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 113.667748][ T5761] ntfs3: loop1: mft corrupted [ 113.671490][ T5761] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.733754][ T5761] ntfs3: loop1: Failed to load $AttrDef -> 0 [ 113.854184][ T5769] loop2: detected capacity change from 0 to 32768 [ 113.938823][ T5769] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.940157][ T5769] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.946531][ T5769] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 113.978570][ T55] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 114.148163][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 114.149341][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 114.166931][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 17ms [ 114.168164][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.168928][ T5769] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 114.234954][ T5769] gfs2: fsid=syz:syz.0: found 1 quota changes [ 114.255348][ T55] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 114.903537][ T5781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.906770][ T5781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.934099][ T4330] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 114.934099][ T4330] inode = 11 2339 [ 114.934099][ T4330] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 114.939311][ T4330] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 114.942921][ T4330] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4330 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 114.948849][ T4330] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 114.950254][ T4330] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 114.955117][ T4330] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 114.956568][ T4330] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 115.155892][ T4330] gfs2: fsid=syz:syz.0: File system withdrawn [ 115.170608][ T4330] CPU: 0 PID: 4330 Comm: syz-executor Not tainted syzkaller #0 [ 115.171783][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 115.173404][ T4330] Call trace: [ 115.173913][ T4330] dump_backtrace+0x1c0/0x1ec [ 115.174647][ T4330] show_stack+0x2c/0x3c [ 115.175321][ T4330] __dump_stack+0x30/0x40 [ 115.176027][ T4330] dump_stack_lvl+0xf4/0x15c [ 115.176751][ T4330] dump_stack+0x1c/0x5c [ 115.177462][ T4330] gfs2_withdraw+0xfa4/0x1390 [ 115.178168][ T4330] gfs2_consist_inode_i+0xf0/0x10c [ 115.178953][ T4330] gfs2_inode_refresh+0x918/0xd64 [ 115.179724][ T4330] inode_go_instantiate+0x4c/0x68 [ 115.180455][ T4330] gfs2_instantiate+0x178/0x2b4 [ 115.181186][ T4330] gfs2_glock_wait+0x1b4/0x298 [ 115.181869][ T4330] gfs2_glock_nq+0x8bc/0x11c4 [ 115.182615][ T4330] do_sync+0x41c/0xaec [ 115.183235][ T4330] gfs2_quota_sync+0x2cc/0x500 [ 115.183928][ T4330] gfs2_sync_fs+0x4c/0xc4 [ 115.184563][ T4330] sync_filesystem+0xe8/0x218 [ 115.185238][ T4330] generic_shutdown_super+0x70/0x324 [ 115.186024][ T4330] kill_block_super+0x70/0xdc [ 115.186779][ T4330] gfs2_kill_sb+0xc0/0xd4 [ 115.187511][ T4330] deactivate_locked_super+0xac/0x120 [ 115.188339][ T4330] deactivate_super+0xe4/0x104 [ 115.189113][ T4330] cleanup_mnt+0x390/0x418 [ 115.189804][ T4330] __cleanup_mnt+0x20/0x30 [ 115.190510][ T4330] task_work_run+0x1ec/0x278 [ 115.191225][ T4330] do_notify_resume+0x1fa0/0x2aa4 [ 115.192066][ T4330] el0_svc+0x98/0x128 [ 115.192732][ T4330] el0t_64_sync_handler+0x84/0xf0 [ 115.193496][ T4330] el0t_64_sync+0x18c/0x190 [ 115.255129][ T4330] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 115.257542][ T4330] CPU: 1 PID: 4330 Comm: syz-executor Not tainted syzkaller #0 [ 115.258655][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 115.260212][ T4330] Call trace: [ 115.260222][ T5778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.260725][ T4330] dump_backtrace+0x1c0/0x1ec [ 115.263039][ T4330] show_stack+0x2c/0x3c [ 115.263753][ T4330] __dump_stack+0x30/0x40 [ 115.264501][ T4330] dump_stack_lvl+0xf4/0x15c [ 115.265266][ T4330] dump_stack+0x1c/0x5c [ 115.265965][ T4330] gfs2_assert_warn_i+0x16c/0x26c [ 115.266844][ T4330] gfs2_quota_cleanup+0x464/0x668 [ 115.267649][ T4330] gfs2_put_super+0x1f0/0x760 [ 115.268402][ T4330] generic_shutdown_super+0x130/0x324 [ 115.269224][ T4330] kill_block_super+0x70/0xdc [ 115.269924][ T4330] gfs2_kill_sb+0xc0/0xd4 [ 115.270540][ T4330] deactivate_locked_super+0xac/0x120 [ 115.271350][ T4330] deactivate_super+0xe4/0x104 [ 115.272018][ T4330] cleanup_mnt+0x390/0x418 [ 115.272667][ T4330] __cleanup_mnt+0x20/0x30 [ 115.273349][ T4330] task_work_run+0x1ec/0x278 [ 115.274032][ T4330] do_notify_resume+0x1fa0/0x2aa4 [ 115.274805][ T4330] el0_svc+0x98/0x128 [ 115.275498][ T4330] el0t_64_sync_handler+0x84/0xf0 [ 115.276330][ T4330] el0t_64_sync+0x18c/0x190 [ 115.393187][ T5791] loop0: detected capacity change from 0 to 32768 [ 115.397657][ T5791] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.398953][ T5791] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.402909][ T5791] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 115.422667][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.423751][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.434853][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 115.435989][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.436931][ T5791] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.453888][ T5799] loop4: detected capacity change from 0 to 16 [ 115.463309][ T5799] erofs: (device loop4): mounted with root inode @ nid 36. [ 115.548001][ T4565] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 115.845501][ T4565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.848918][ T4565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.853752][ T5791] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.947028][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 115.947028][ T4328] inode = 11 2339 [ 115.947028][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 115.947969][ T5804] loop1: detected capacity change from 0 to 16 [ 115.950116][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 115.952941][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 115.956009][ T5804] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.963285][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 115.965405][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 116.379897][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 116.381469][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 116.382713][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 116.383726][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 116.385000][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 116.386678][ T4328] Call trace: [ 116.387224][ T4328] dump_backtrace+0x1c0/0x1ec [ 116.388019][ T4328] show_stack+0x2c/0x3c [ 116.388682][ T4328] __dump_stack+0x30/0x40 [ 116.389396][ T4328] dump_stack_lvl+0xf4/0x15c [ 116.390163][ T4328] dump_stack+0x1c/0x5c [ 116.390844][ T4328] gfs2_withdraw+0xfa4/0x1390 [ 116.391658][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 116.392440][ T4328] gfs2_inode_refresh+0x918/0xd64 [ 116.393199][ T4328] inode_go_instantiate+0x4c/0x68 [ 116.393939][ T4328] gfs2_instantiate+0x178/0x2b4 [ 116.394764][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 116.395559][ T4328] gfs2_glock_nq+0x8bc/0x11c4 [ 116.396321][ T4328] do_sync+0x41c/0xaec [ 116.396999][ T4328] gfs2_quota_sync+0x2cc/0x500 [ 116.397786][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 116.398546][ T4328] sync_filesystem+0xe8/0x218 [ 116.399358][ T4328] generic_shutdown_super+0x70/0x324 [ 116.400228][ T4328] kill_block_super+0x70/0xdc [ 116.401032][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 116.401712][ T4328] deactivate_locked_super+0xac/0x120 [ 116.402562][ T4328] deactivate_super+0xe4/0x104 [ 116.403280][ T4328] cleanup_mnt+0x390/0x418 [ 116.404003][ T4328] __cleanup_mnt+0x20/0x30 [ 116.404772][ T4328] task_work_run+0x1ec/0x278 [ 116.405555][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 116.406351][ T4328] el0_svc+0x98/0x128 [ 116.406981][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 116.407841][ T4328] el0t_64_sync+0x18c/0x190 [ 116.421362][ T5812] loop4: detected capacity change from 0 to 16 [ 116.429190][ T5812] erofs: (device loop4): mounted with root inode @ nid 36. [ 116.430719][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 116.442760][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 116.444058][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 116.445750][ T4328] Call trace: [ 116.446292][ T4328] dump_backtrace+0x1c0/0x1ec [ 116.447105][ T4328] show_stack+0x2c/0x3c [ 116.447742][ T4328] __dump_stack+0x30/0x40 [ 116.448445][ T4328] dump_stack_lvl+0xf4/0x15c [ 116.449181][ T4328] dump_stack+0x1c/0x5c [ 116.449782][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 116.450537][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 116.451259][ T4328] gfs2_put_super+0x1f0/0x760 [ 116.451946][ T4328] generic_shutdown_super+0x130/0x324 [ 116.452827][ T4328] kill_block_super+0x70/0xdc [ 116.453707][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 116.454417][ T4328] deactivate_locked_super+0xac/0x120 [ 116.455325][ T4328] deactivate_super+0xe4/0x104 [ 116.456178][ T4328] cleanup_mnt+0x390/0x418 [ 116.456960][ T4328] __cleanup_mnt+0x20/0x30 [ 116.457674][ T4328] task_work_run+0x1ec/0x278 [ 116.458408][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 116.459270][ T4328] el0_svc+0x98/0x128 [ 116.459935][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 116.460705][ T4328] el0t_64_sync+0x18c/0x190 [ 117.037162][ T1613] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 117.236422][ T1613] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 118.028710][ T4409] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 118.157393][ T4409] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 118.283707][ T5840] loop0: detected capacity change from 0 to 16 [ 118.330234][ T5840] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.536556][ T5847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.552750][ T5847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.128618][ T5841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.481502][ T4409] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 119.483685][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 119.575178][ T5859] loop0: detected capacity change from 0 to 16 [ 119.582116][ T5859] erofs: (device loop0): mounted with root inode @ nid 36. [ 119.585884][ T4392] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 119.586364][ T11] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 120.038729][ T5870] loop2: detected capacity change from 0 to 16 [ 120.044248][ T5870] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.058401][ T5862] loop3: detected capacity change from 0 to 16 [ 120.060987][ T5862] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.174761][ T5875] loop4: detected capacity change from 0 to 128 [ 120.443152][ T4606] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 120.456564][ T5875] FAT-fs (loop4): bogus sectors per cluster 0 [ 120.457596][ T5875] FAT-fs (loop4): Can't find a valid FAT filesystem [ 120.499854][ T5198] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.587125][ T4606] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 120.953176][ T4606] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 121.014109][ T5895] loop1: detected capacity change from 0 to 16 [ 121.014964][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.016624][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.016943][ T5895] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.118313][ T4392] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 121.575776][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.577275][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.756413][ T5902] loop0: detected capacity change from 0 to 16 [ 121.793453][ T5902] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.998233][ T5914] loop1: detected capacity change from 0 to 16 [ 122.009230][ T5914] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.818927][ T5928] loop0: detected capacity change from 0 to 128 [ 122.855814][ T5928] FAT-fs (loop0): bogus sectors per cluster 0 [ 122.856909][ T5928] FAT-fs (loop0): Can't find a valid FAT filesystem [ 122.897541][ T5930] loop1: detected capacity change from 0 to 16 [ 122.907857][ T5930] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.593420][ T5942] loop0: detected capacity change from 0 to 16 [ 123.605162][ T5942] erofs: (device loop0): mounted with root inode @ nid 36. [ 123.942190][ T5945] loop3: detected capacity change from 0 to 16 [ 123.955867][ T5945] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.599294][ T4606] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 125.255066][ T4553] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 125.422064][ T4606] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 125.716361][ T4606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.717673][ T4606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.816692][ T5984] loop0: detected capacity change from 0 to 128 [ 125.820612][ T5984] FAT-fs (loop0): bogus sectors per cluster 0 [ 125.821739][ T5984] FAT-fs (loop0): Can't find a valid FAT filesystem [ 125.895872][ T4313] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 125.925547][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926778][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.623263][ T5994] loop0: detected capacity change from 0 to 32768 [ 126.675352][ T5994] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.676788][ T5994] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.685140][ T5994] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 126.686815][ T113] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.687949][ T113] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.699873][ T113] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 126.701294][ T113] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.702181][ T5994] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 127.086848][ T5994] gfs2: fsid=syz:syz.0: found 1 quota changes [ 127.117793][ T4328] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 127.117793][ T4328] inode = 11 2339 [ 127.117793][ T4328] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 127.120903][ T4328] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 127.122425][ T4328] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4328 [syz-executor] gfs2_quota_sync+0x2cc/0x500 [ 127.123970][ T4328] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000001 s:0 p:0 [ 127.135011][ T4328] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 127.141243][ T4328] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 127.153015][ T4328] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 127.154126][ T4328] gfs2: fsid=syz:syz.0: File system withdrawn [ 127.158218][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 127.159414][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 127.161068][ T4328] Call trace: [ 127.161622][ T4328] dump_backtrace+0x1c0/0x1ec [ 127.162423][ T4328] show_stack+0x2c/0x3c [ 127.163131][ T4328] __dump_stack+0x30/0x40 [ 127.163832][ T4328] dump_stack_lvl+0xf4/0x15c [ 127.164569][ T4328] dump_stack+0x1c/0x5c [ 127.165259][ T4328] gfs2_withdraw+0xfa4/0x1390 [ 127.165999][ T4328] gfs2_consist_inode_i+0xf0/0x10c [ 127.166854][ T4328] gfs2_inode_refresh+0x918/0xd64 [ 127.167649][ T4328] inode_go_instantiate+0x4c/0x68 [ 127.168457][ T4328] gfs2_instantiate+0x178/0x2b4 [ 127.169256][ T4328] gfs2_glock_wait+0x1b4/0x298 [ 127.170015][ T4328] gfs2_glock_nq+0x8bc/0x11c4 [ 127.170766][ T4328] do_sync+0x41c/0xaec [ 127.171545][ T4328] gfs2_quota_sync+0x2cc/0x500 [ 127.172371][ T4328] gfs2_sync_fs+0x4c/0xc4 [ 127.173148][ T4328] sync_filesystem+0xe8/0x218 [ 127.173953][ T4328] generic_shutdown_super+0x70/0x324 [ 127.174819][ T4328] kill_block_super+0x70/0xdc [ 127.175572][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 127.176269][ T4328] deactivate_locked_super+0xac/0x120 [ 127.177142][ T4328] deactivate_super+0xe4/0x104 [ 127.177933][ T4328] cleanup_mnt+0x390/0x418 [ 127.178636][ T4328] __cleanup_mnt+0x20/0x30 [ 127.179338][ T4328] task_work_run+0x1ec/0x278 [ 127.180062][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 127.180929][ T4328] el0_svc+0x98/0x128 [ 127.181588][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 127.182453][ T4328] el0t_64_sync+0x18c/0x190 [ 127.204763][ T4328] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 127.207299][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted syzkaller #0 [ 127.208542][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 127.210242][ T4328] Call trace: [ 127.210804][ T4328] dump_backtrace+0x1c0/0x1ec [ 127.211621][ T4328] show_stack+0x2c/0x3c [ 127.212301][ T4328] __dump_stack+0x30/0x40 [ 127.213005][ T4328] dump_stack_lvl+0xf4/0x15c [ 127.213694][ T4328] dump_stack+0x1c/0x5c [ 127.214400][ T4328] gfs2_assert_warn_i+0x16c/0x26c [ 127.215218][ T4328] gfs2_quota_cleanup+0x464/0x668 [ 127.215986][ T4328] gfs2_put_super+0x1f0/0x760 [ 127.216788][ T4328] generic_shutdown_super+0x130/0x324 [ 127.217710][ T4328] kill_block_super+0x70/0xdc [ 127.218473][ T4328] gfs2_kill_sb+0xc0/0xd4 [ 127.219217][ T4328] deactivate_locked_super+0xac/0x120 [ 127.220147][ T4328] deactivate_super+0xe4/0x104 [ 127.220912][ T4328] cleanup_mnt+0x390/0x418 [ 127.221662][ T4328] __cleanup_mnt+0x20/0x30 [ 127.222400][ T4328] task_work_run+0x1ec/0x278 [ 127.223144][ T4328] do_notify_resume+0x1fa0/0x2aa4 [ 127.223921][ T4328] el0_svc+0x98/0x128 [ 127.224548][ T4328] el0t_64_sync_handler+0x84/0xf0 [ 127.225370][ T4328] el0t_64_sync+0x18c/0x190 [ 127.323620][ T4505] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 127.727256][ T4505] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 128.771470][ T4505] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 129.031565][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.246375][ T4409] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 130.992410][ T6065] loop1: detected capacity change from 0 to 16 [ 131.000809][ T6067] loop4: detected capacity change from 0 to 16 [ 131.012379][ T6065] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.018465][ T6067] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.329240][ T6091] loop2: detected capacity change from 0 to 128 [ 132.333642][ T6091] FAT-fs (loop2): bogus sectors per cluster 0 [ 132.334700][ T6091] FAT-fs (loop2): Can't find a valid FAT filesystem [ 132.354046][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.257553][ T6128] loop2: detected capacity change from 0 to 16 [ 134.259421][ T6128] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.034283][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.147149][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.378742][ T6154] loop2: detected capacity change from 0 to 16 [ 135.381166][ T6154] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.440792][ T6156] loop0: detected capacity change from 0 to 128 [ 135.488818][ T6156] FAT-fs (loop0): bogus sectors per cluster 0 [ 135.489832][ T6156] FAT-fs (loop0): Can't find a valid FAT filesystem [ 135.536588][ T5559] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.557923][ T4524] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 135.568768][ T6161] loop2: detected capacity change from 0 to 16 [ 135.574342][ T6161] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.664591][ T4524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.666114][ T4524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.326841][ T6187] loop4: detected capacity change from 0 to 64 [ 137.809323][ T6199] loop1: detected capacity change from 0 to 64 [ 138.533940][ T5665] ------------[ cut here ]------------ [ 138.534837][ T5665] DEBUG_LOCKS_WARN_ON(!test_bit(class_idx, lock_classes_in_use)) [ 138.534872][ T5665] WARNING: CPU: 1 PID: 5665 at kernel/locking/lockdep.c:5019 __lock_acquire+0x1954/0x6800 [ 138.537725][ T5665] Modules linked in: [ 138.538379][ T5665] CPU: 1 PID: 5665 Comm: gfs2_quotad Not tainted syzkaller #0 [ 138.539553][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 138.541240][ T5665] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 138.542548][ T5665] pc : __lock_acquire+0x1954/0x6800 [ 138.543473][ T5665] lr : __lock_acquire+0x1950/0x6800 [ 138.544415][ T5665] sp : ffff8000218b7940 [ 138.545045][ T5665] x29: ffff8000218b7b50 x28: dfff800000000000 x27: 0000000000000001 [ 138.546411][ T5665] x26: ffff0000d37ea638 x25: ffff0000d37ea630 x24: ffffffffffffffff [ 138.547823][ T5665] x23: 0000000000000000 x22: ffff0000d37ea658 x21: ffff0000d37e9bc0 [ 138.549194][ T5665] x20: 0000000000000000 x19: dfff800000000000 x18: ffff800011b8bf60 [ 138.550465][ T5665] x17: 0000000000000000 x16: ffff8000082eee68 x15: 0000000000000000 [ 138.551755][ T5665] x14: 0000000000000001 x13: 1fffe00033eac9a3 x12: 0000000000ff0100 [ 138.552969][ T5665] x11: ff00800008194238 x10: 0000000000000000 x9 : b05fdcfa70e4a300 [ 138.554300][ T5665] x8 : b05fdcfa70e4a300 x7 : 0000000000000001 x6 : 0000000000000001 [ 138.555666][ T5665] x5 : ffff8000218b73d8 x4 : ffff8000152f4cc0 x3 : ffff80000853854c [ 138.556977][ T5665] x2 : 0000000000000001 x1 : 0000000100000001 x0 : 0000000000000000 [ 138.558286][ T5665] Call trace: [ 138.558815][ T5665] __lock_acquire+0x1954/0x6800 [ 138.559587][ T5665] lock_acquire+0x20c/0x63c [ 138.560339][ T5665] _raw_spin_lock_irqsave+0x6c/0xb0 [ 138.561083][ T5665] finish_wait+0xc8/0x1ac [ 138.561817][ T5665] gfs2_quotad+0x390/0x500 [ 138.562532][ T5665] kthread+0x250/0x2d8 [ 138.563201][ T5665] ret_from_fork+0x10/0x20 [ 138.563938][ T5665] irq event stamp: 1178 [ 138.564615][ T5665] hardirqs last enabled at (1177): [] __free_object+0x1e0/0x894 [ 138.566059][ T5665] hardirqs last disabled at (1178): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 138.567695][ T5665] softirqs last enabled at (1132): [] handle_softirqs+0xaec/0xc60 [ 138.569251][ T5665] softirqs last disabled at (941): [] __do_softirq+0x14/0x20 [ 138.570716][ T5665] ---[ end trace 0000000000000000 ]---